Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
Aimbot.exe

Overview

General Information

Sample name:Aimbot.exe
Analysis ID:1431572
MD5:b121a204d1da912895072b38471e6165
SHA1:4d0d7ae81f2b4713a313b16d48aaa89eedce9492
SHA256:54d1845b815984ae78d8dc18c6bb75b2249d49b60048fd8d3de4352c0f459b38
Tags:exeRansomware
Infos:

Detection

Score:32
Range:0 - 100
Whitelisted:false
Confidence:0%

Signatures

Found pyInstaller with non standard icon
Contains functionality for read data from the clipboard
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to check if a window is minimized (may be used to check if an application is visible)
Contains functionality to dynamically determine API calls
Contains functionality to modify clipboard data
Contains functionality to query CPU information (cpuid)
Contains functionality to query locales information (e.g. system language)
Contains functionality to read the clipboard data
Contains functionality to retrieve information about pressed keystrokes
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Creates a process in suspended mode (likely to inject code)
Detected potential crypto function
Drops PE files
Extensive use of GetProcAddress (often used to hide API calls)
Found dropped PE file which has not been started or loaded
Found evasive API chain checking for process token information
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
PE file contains executable resources (Code or Archives)
PE file contains more sections than normal
PE file contains sections with non-standard names
PE file does not import any functions
Potential key logger detected (key state polling based)
Queries the volume information (name, serial number etc) of a device
Sample file is different than original file name gathered from version info

Classification

Analysis Advice

Sample drops PE files which have not been started, submit dropped PE samples for a secondary analysis to Joe Sandbox
Sample has a GUI, but Joe Sandbox has not found any clickable buttons, likely more UI automation may extend behavior
Sample tries to load a library which is not present or installed on the analysis machine, adding the library might reveal more behavior
Sample may offer command line options, please run it with the 'Execute binary with arguments' cookbook (it's possible that the command line switches require additional characters like: "-", "/", "--")
Sample searches for specific file, try point organization specific fake files to the analysis machine
Sample has functionality to log and monitor keystrokes, analyze it with the 'Simulates keyboard and window changes' cookbook

Process Tree

  • System is w10x64
  • Aimbot.exe (PID: 7344 cmdline: "C:\Users\user\Desktop\Aimbot.exe" MD5: B121A204D1DA912895072B38471E6165)
    • Aimbot.exe (PID: 7404 cmdline: "C:\Users\user\Desktop\Aimbot.exe" MD5: B121A204D1DA912895072B38471E6165)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results
Source: Aimbot.exe, 00000001.00000002.2910091904.000001C6894E4000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: -----BEGIN PUBLIC KEY-----memstr_f87e303b-8
Source: Aimbot.exeStatic PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE
Source: Binary string: D:\a\1\b\bin\amd64\select.pdb source: Aimbot.exe, 00000000.00000003.1671751784.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2916798867.00007FFE148E3000.00000002.00000001.01000000.0000000E.sdmp, select.pyd.0.dr
Source: Binary string: D:\a\1\b\bin\amd64\python312.pdb source: Aimbot.exe, 00000001.00000002.2914645148.00007FFDFB812000.00000002.00000001.01000000.00000004.sdmp
Source: Binary string: D:\a\1\b\libcrypto-3.pdb| source: Aimbot.exe, 00000001.00000002.2913131498.00007FFDFAAF1000.00000002.00000001.01000000.00000010.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_hashlib.pdb source: Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2915760786.00007FFE11EB7000.00000002.00000001.01000000.0000000F.sdmp, _hashlib.pyd.0.dr
Source: Binary string: D:\a\1\b\bin\amd64\_decimal.pdb$$ source: _decimal.pyd.0.dr
Source: Binary string: crypto\engine\tb_digest.cENGINE_get_digestcrypto\buffer\buffer.cBUF_MEM_growBUF_MEM_grow_cleancrypto\packet.ccompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specific.dllCPUINFO: crypto\initthread.cOPENSSL_ia32cap source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_lzma.pdbNN source: Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: tRSA_PRIME_INFOeqdmp1dmq1iqmpprime_infosRSAPrivateKeyRSAPublicKeyhashAlgorithmmaskGenAlgorithmsaltLengthtrailerFieldRSA_PSS_PARAMShashFuncmaskGenFuncpSourceFuncRSA_OAEP_PARAMScompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"3.2.1built on: Fri Feb 23 00:13:44 2024 UTCplatform: VC-WIN64AOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availablecrypto\init.cOPENSSL_init_cryptocrypto\bio\bio_lib.cBIO_new_exbio_read_internbio_write_internBIO_sendmmsgBIO_recvmmsgBIO_putsBIO_getsBIO_get_line BIO_ctrlBIO_callback_ctrlBIO_find_type source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_decimal.pdb source: _decimal.pyd.0.dr
Source: Binary string: C:\Users\runneradmin\AppData\Local\Temp\pip-req-build-csg7dlje\src\rust\target\release\deps\cryptography_rust.pdb source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_lzma.pdb source: Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_bz2.pdb source: Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: @ compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"OpenSSL 3.0.13 30 Jan 20243.0.13built on: Mon Feb 5 17:39:09 2024 UTCplatform: VC-WIN64A-masmOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availableget_and_lock..\s\crypto\ex_data.cossl_crypto_get_ex_new_index_exossl_crypto_new_ex_data_exCRYPTO_dup_ex_dataCRYPTO_set_ex_dataOPENSSL_WIN32_UTF8..\s\crypto\getenv.ccompiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specificC:\Program Files\Common Files\SSLC:\Program Files\OpenSSL\lib\ossl-modules.dllCPUINFO: ..\s\crypto\init.cOPENSSL_init_cryptoOPENSSL_atexit..\s\crypto\initthread.c..\s\crypto\mem_sec.cassertion failed: (bit & 1) == 0assertion failed: list >= 0 && list < sh.freelist_sizeassertion failed: ((ptr - sh.arena) & ((sh.arena_size >> list) - 1)) == 0assertion failed: bit > 0 && bit < sh.bittable_sizeassertion failed: TESTBIT(table, bit)assertion failed: !TESTBIT(table, bit)assertion failed: WITHIN_FREELIST(list)assertion failed: WITHIN_ARENA(ptr)assertion failed: temp->next == NULL || WITHIN_ARENA(temp->next)assertion failed: (char **)temp->next->p_next == listassertion failed: WITHIN_FREELIST(temp2->p_next) || WITHIN_ARENA(temp2->p_next)assertion failed: size > 0assertion failed: (size & (size - 1)) == 0assertion failed: (minsize & (minsize - 1)) == 0assertion failed: sh.freelist != NULLassertion failed: sh.bittable != NULLassertion failed: sh.bitmalloc != NULLassertion failed: !sh_testbit(temp, slist, sh.bitmalloc)assertion failed: temp != sh.freelist[slist]assertion failed: sh.freelist[slist] == tempassertion failed: temp-(sh.arena_size >> slist) == sh_find_my_buddy(temp, slist)assertion failed: sh_testbit(chunk, list, sh.bittable)assertion failed: WITHIN_ARENA(chunk)assertion failed: sh_testbit(ptr, list, sh.bittable)assertion failed: ptr == sh_find_my_buddy(buddy, list)assertion failed: ptr != NULLassertion failed: !sh_testbit(ptr, list, sh.bitmalloc)assertion failed: sh.freelist[list] == ptr/*0123456789ABCDEFCRYPTO_memdup..\s\crypto\o_str.chexstr2buf_sepossl_hexstr2buf_sepbuf2hexstr_sepossl_buf2hexstr_sep..\s\crypto\packet.cwpacket_intern_init_lenWPACKET_start_sub_packet_len__..\s\crypto\param_build.cparam_pushparam_push_numOSSL_PARAM_BLD_push_BN_padNegative big numbers are unsupported for OSSL_PARAMOSSL_PARAM_BLD_push_utf8_stringOSSL_PARAM_BLD_push_utf8_ptrOSSL_PARAM_BLD_push_octet_stringOSSL_PARAM_BLD_
Source: Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb source: Aimbot.exe, 00000000.00000003.1662087768.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2916569171.00007FFE13313000.00000002.00000001.01000000.00000005.sdmp, VCRUNTIME140.dll.0.dr
Source: Binary string: C:\Users\runneradmin\AppData\Local\Temp\pip-req-build-csg7dlje\src\rust\target\release\deps\cryptography_rust.pdbo source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmp
Source: Binary string: compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: Aimbot.exe, 00000001.00000002.2913131498.00007FFDFAA59000.00000002.00000001.01000000.00000010.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_tkinter.pdb source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2916422110.00007FFE13238000.00000002.00000001.01000000.00000007.sdmp
Source: Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdbGCTL source: Aimbot.exe, 00000000.00000003.1662087768.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2916569171.00007FFE13313000.00000002.00000001.01000000.00000005.sdmp, VCRUNTIME140.dll.0.dr
Source: Binary string: D:\a\1\b\libcrypto-3.pdb source: Aimbot.exe, 00000001.00000002.2913131498.00007FFDFAAF1000.00000002.00000001.01000000.00000010.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_socket.pdb source: Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2915901227.00007FFE11ED9000.00000002.00000001.01000000.0000000D.sdmp, _socket.pyd.0.dr
Source: Binary string: D:\a\1\b\bin\amd64\python3.pdb source: Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2910062502.000001C689150000.00000002.00000001.01000000.00000006.sdmp
Source: Binary string: compiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmp
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4D8D00 FindFirstFileExW,FindClose,0_2_00007FF74B4D8D00
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E8670 _invalid_parameter_noinfo,FindFirstFileExW,GetLastError,_invalid_parameter_noinfo,FindNextFileW,GetLastError,0_2_00007FF74B4E8670
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E8670 _invalid_parameter_noinfo,FindFirstFileExW,GetLastError,_invalid_parameter_noinfo,FindNextFileW,GetLastError,0_2_00007FF74B4E8670
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F26C4 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose,0_2_00007FF74B4F26C4
Source: C:\Users\user\Desktop\Aimbot.exeFile opened: C:\Users\user\AppData\Local\Temp\Jump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeFile opened: C:\Users\user\AppData\Local\Jump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeFile opened: C:\Users\user\AppData\Jump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeFile opened: C:\Users\user\AppData\Local\Temp\_MEI73442\Jump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeFile opened: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\Jump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeFile opened: C:\Users\user\Jump to behavior
Source: Aimbot.exe, 00000000.00000002.2908628806.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://cacerts.digicert.co
Source: Aimbot.exe, 00000000.00000003.1672886748.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672127130.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000002.2908628806.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672097559.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662912486.000002013275D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672097559.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662912486.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671751784.0000020132766000.00000004.00000020.00020000.00000000.sdmp, select.pyd.0.dr, _decimal.pyd.0.dr, _socket.pyd.0.dr, _hashlib.pyd.0.drString found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662912486.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672127130.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671751784.0000020132766000.00000004.00000020.00020000.00000000.sdmp, select.pyd.0.dr, _decimal.pyd.0.dr, _socket.pyd.0.dr, _hashlib.pyd.0.dr, tcl86t.dll.0.drString found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Aimbot.exe, 00000000.00000003.1672886748.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672127130.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000002.2908628806.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672097559.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Aimbot.exe, 00000000.00000003.1672886748.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672127130.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000002.2908628806.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672097559.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662912486.000002013275D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000002.2908628806.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672097559.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662912486.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671751784.0000020132766000.00000004.00000020.00020000.00000000.sdmp, select.pyd.0.dr, _decimal.pyd.0.dr, _socket.pyd.0.drString found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662912486.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672127130.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671751784.0000020132766000.00000004.00000020.00020000.00000000.sdmp, select.pyd.0.dr, _decimal.pyd.0.dr, _socket.pyd.0.dr, _hashlib.pyd.0.dr, tcl86t.dll.0.drString found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.c
Source: tcl86t.dll.0.drString found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.ct
Source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000002.2908628806.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672097559.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662912486.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671751784.0000020132766000.00000004.00000020.00020000.00000000.sdmp, select.pyd.0.dr, _decimal.pyd.0.dr, _socket.pyd.0.drString found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000002.2908628806.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672097559.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662912486.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671751784.0000020132766000.00000004.00000020.00020000.00000000.sdmp, select.pyd.0.dr, _decimal.pyd.0.dr, _socket.pyd.0.drString found in binary or memory: http://ocsp.digicert.com0
Source: Aimbot.exe, 00000000.00000003.1672886748.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672127130.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000002.2908628806.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672097559.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://ocsp.digicert.com0A
Source: Aimbot.exe, 00000000.00000003.1672886748.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672127130.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000002.2908628806.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672097559.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662912486.000002013275D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://ocsp.digicert.com0C
Source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662912486.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672127130.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671751784.0000020132766000.00000004.00000020.00020000.00000000.sdmp, select.pyd.0.dr, _decimal.pyd.0.dr, _socket.pyd.0.dr, _hashlib.pyd.0.dr, tcl86t.dll.0.drString found in binary or memory: http://ocsp.digicert.com0X
Source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000002.2908628806.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1672097559.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670270253.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668088239.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671778196.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1668157588.0000020132760000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1669476901.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1670225045.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1662912486.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1671751784.0000020132766000.00000004.00000020.00020000.00000000.sdmp, select.pyd.0.dr, _decimal.pyd.0.dr, _socket.pyd.0.drString found in binary or memory: http://www.digicert.com/CPS0
Source: Aimbot.exe, 00000001.00000002.2916314500.00007FFE13228000.00000008.00000001.01000000.0000000A.sdmpString found in binary or memory: http://www.zlib.net/D
Source: Aimbot.exe, Aimbot.exe, 00000001.00000002.2916044592.00007FFE126DD000.00000002.00000001.01000000.0000000C.sdmpString found in binary or memory: https://cffi.readthedocs.io/en/latest/using.html#callbacks
Source: Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drString found in binary or memory: https://cryptography.io
Source: METADATA.0.drString found in binary or memory: https://cryptography.io/
Source: Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drString found in binary or memory: https://cryptography.io/en/latest/changelog/
Source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmpString found in binary or memory: https://cryptography.io/en/latest/faq/#why-can-t-i-import-my-pem-file
Source: Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drString found in binary or memory: https://cryptography.io/en/latest/installation/
Source: Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drString found in binary or memory: https://cryptography.io/en/latest/security/
Source: Aimbot.exe, 00000001.00000002.2910091904.000001C6894FB000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://datatracker.ietf.org/doc/html/rfc5246#section-7.4.1.4.1
Source: Aimbot.exe, 00000000.00000003.1673490397.0000020132761000.00000004.00000020.00020000.00000000.sdmp, http-2.9.8.tm.0.drString found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Connection
Source: Aimbot.exe, 00000001.00000002.2909205336.000001C688A10000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://docs.python.org/3.11/library/binascii.html#binascii.a2b_base64
Source: Aimbot.exe, 00000001.00000002.2908766495.000001C687021000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://github.com/Unidata/MetPy/blob/a3424de66a44bf3a92b0dcacf4dff82ad7b86712/src/metpy/plots/wx_sy
Source: Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drString found in binary or memory: https://github.com/pyca/cryptography
Source: Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drString found in binary or memory: https://github.com/pyca/cryptography/
Source: Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drString found in binary or memory: https://github.com/pyca/cryptography/actions?query=workflow%3ACI
Source: METADATA.0.drString found in binary or memory: https://github.com/pyca/cryptography/issues
Source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmpString found in binary or memory: https://github.com/pyca/cryptography/issues/8996
Source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmpString found in binary or memory: https://github.com/pyca/cryptography/issues/9253
Source: Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drString found in binary or memory: https://github.com/pyca/cryptography/workflows/CI/badge.svg?branch=main
Source: Aimbot.exe, 00000001.00000002.2909009086.000001C68897C000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://github.com/python/cpython/blob/3.9/Lib/importlib/_bootstrap_external.py#L679-L688
Source: Aimbot.exe, 00000001.00000002.2908766495.000001C687021000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://github.com/python/cpython/blob/839d7893943782ee803536a47f1d4de160314f85/Lib/importlib/abc.py
Source: Aimbot.exe, 00000001.00000002.2908766495.000001C687021000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://github.com/python/cpython/blob/839d7893943782ee803536a47f1d4de160314f85/Lib/importlib/reader
Source: Aimbot.exe, 00000001.00000002.2909511969.000001C688E9A000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000003.1736464563.000001C688FDD000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000003.1736537132.000001C688F6D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://github.com/python/cpython/issues/86361.
Source: Aimbot.exe, 00000001.00000002.2908766495.000001C687021000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://github.com/tensorflow/datasets/blob/master/tensorflow_datasets/core/utils/resource_utils.py#
Source: Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drString found in binary or memory: https://img.shields.io/pypi/v/cryptography.svg
Source: Aimbot.exe, 00000000.00000003.1728020864.0000020132761000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://linuxreviews.org/HOWTO_change_the_mouse_speed_in_X
Source: Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drString found in binary or memory: https://mail.python.org/mailman/listinfo/cryptography-dev
Source: Aimbot.exe, 00000001.00000002.2909951399.000001C6890D8000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://peps.python.org/pep-0205/
Source: Aimbot.exe, 00000001.00000002.2914645148.00007FFDFB812000.00000002.00000001.01000000.00000004.sdmpString found in binary or memory: https://peps.python.org/pep-0263/
Source: Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drString found in binary or memory: https://pypi.org/project/cryptography/
Source: Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drString found in binary or memory: https://readthedocs.org/projects/cryptography/badge/?version=latest
Source: Aimbot.exe, 00000001.00000002.2911088825.000001C68982D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://support.apple.com/en-us/HT200
Source: Aimbot.exe, 00000000.00000003.1728140426.0000020132761000.00000004.00000020.00020000.00000000.sdmp, tk.tcl.0.drString found in binary or memory: https://support.apple.com/en-us/HT201236
Source: Aimbot.exe, 00000000.00000003.1664416001.0000020132760000.00000004.00000020.00020000.00000000.sdmp, LICENSE.APACHE.0.drString found in binary or memory: https://www.apache.org/licenses/
Source: Aimbot.exe, 00000000.00000003.1664472258.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1664373166.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1664416001.0000020132760000.00000004.00000020.00020000.00000000.sdmp, LICENSE.APACHE.0.drString found in binary or memory: https://www.apache.org/licenses/LICENSE-2.0
Source: Aimbot.exe, 00000001.00000002.2913429275.00007FFDFAB9A000.00000002.00000001.01000000.00000010.sdmpString found in binary or memory: https://www.openssl.org/H
Source: Aimbot.exe, 00000001.00000002.2909009086.000001C688900000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.python.org/download/releases/2.3/mro/.
Source: Aimbot.exe, 00000001.00000002.2915072045.00007FFDFB989000.00000008.00000001.01000000.00000004.sdmpString found in binary or memory: https://www.python.org/psf/license/
Source: Aimbot.exe, 00000001.00000002.2914645148.00007FFDFB812000.00000002.00000001.01000000.00000004.sdmpString found in binary or memory: https://www.python.org/psf/license/)
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2C7560 SendMessageW,ClientToScreen,WindowFromPoint,OpenClipboard,GetClipboardOwner,CloseClipboard,1_2_00007FFDFB2C7560
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2A8BA0 GlobalAlloc,GlobalLock,memcpy,GlobalUnlock,SetClipboardData,1_2_00007FFDFB2A8BA0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2A8D70 OpenClipboard,EmptyClipboard,SetClipboardData,CloseClipboard,1_2_00007FFDFB2A8D70
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2A8660 OpenClipboard,IsClipboardFormatAvailable,GetClipboardData,GlobalLock,GlobalUnlock,IsClipboardFormatAvailable,IsClipboardFormatAvailable,GetClipboardData,GlobalLock,GetLocaleInfoA,GlobalUnlock,GetClipboardData,GlobalLock,GlobalUnlock,IsClipboardFormatAvailable,GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,CloseClipboard,1_2_00007FFDFB2A8660
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2B77F0 ClientToScreen,GetSystemMetrics,GetAsyncKeyState,GetAsyncKeyState,TrackPopupMenu,GetCursorPos,WindowFromPoint,1_2_00007FFDFB2B77F0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2BB830 GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,1_2_00007FFDFB2BB830
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4D7B600_2_00007FF74B4D7B60
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F6B500_2_00007FF74B4F6B50
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F7A9C0_2_00007FF74B4F7A9C
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4D10000_2_00007FF74B4D1000
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4D9D9B0_2_00007FF74B4D9D9B
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E24800_2_00007FF74B4E2480
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4EAC500_2_00007FF74B4EAC50
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4EECA00_2_00007FF74B4EECA0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E84BC0_2_00007FF74B4E84BC
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4EF3200_2_00007FF74B4EF320
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E22740_2_00007FF74B4E2274
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F4A600_2_00007FF74B4F4A60
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E2A940_2_00007FF74B4E2A94
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F17200_2_00007FF74B4F1720
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E42D40_2_00007FF74B4E42D4
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4D92D00_2_00007FF74B4D92D0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E20700_2_00007FF74B4E2070
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E28900_2_00007FF74B4E2890
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4DA76D0_2_00007FF74B4DA76D
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F17200_2_00007FF74B4F1720
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E67500_2_00007FF74B4E6750
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4D9F3B0_2_00007FF74B4D9F3B
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4FA7D80_2_00007FF74B4FA7D8
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4EE80C0_2_00007FF74B4EE80C
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E86700_2_00007FF74B4E8670
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E86700_2_00007FF74B4E8670
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E26840_2_00007FF74B4E2684
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E8EF40_2_00007FF74B4E8EF4
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F4EFC0_2_00007FF74B4F4EFC
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E3ED00_2_00007FF74B4E3ED0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F26C40_2_00007FF74B4F26C4
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F75500_2_00007FF74B4F7550
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E35400_2_00007FF74B4E3540
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F6DCC0_2_00007FF74B4F6DCC
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB31F9101_2_00007FFDFB31F910
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2D3D001_2_00007FFDFB2D3D00
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2B13101_2_00007FFDFB2B1310
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3772301_2_00007FFDFB377230
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2B50801_2_00007FFDFB2B5080
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB37568E1_2_00007FFDFB37568E
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3863701_2_00007FFDFB386370
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2ADBA01_2_00007FFDFB2ADBA0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB35FBF01_2_00007FFDFB35FBF0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB35BAA01_2_00007FFDFB35BAA0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB305A701_2_00007FFDFB305A70
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB34FAD01_2_00007FFDFB34FAD0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB351A701_2_00007FFDFB351A70
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB365AF01_2_00007FFDFB365AF0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB385B101_2_00007FFDFB385B10
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3899A01_2_00007FFDFB3899A0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB34D9601_2_00007FFDFB34D960
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3139E01_2_00007FFDFB3139E0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2E5A501_2_00007FFDFB2E5A50
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2DB9101_2_00007FFDFB2DB910
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB38BF701_2_00007FFDFB38BF70
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2B5FB01_2_00007FFDFB2B5FB0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB329E901_2_00007FFDFB329E90
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2DFEE01_2_00007FFDFB2DFEE0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB359D601_2_00007FFDFB359D60
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB32FE201_2_00007FFDFB32FE20
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB34BD401_2_00007FFDFB34BD40
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2A3D301_2_00007FFDFB2A3D30
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB30F3701_2_00007FFDFB30F370
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3193801_2_00007FFDFB319380
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB36B2701_2_00007FFDFB36B270
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB34D2901_2_00007FFDFB34D290
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB37D2E01_2_00007FFDFB37D2E0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3432501_2_00007FFDFB343250
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB32325B1_2_00007FFDFB32325B
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3050701_2_00007FFDFB305070
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2E91001_2_00007FFDFB2E9100
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2E31001_2_00007FFDFB2E3100
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2A10E01_2_00007FFDFB2A10E0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3717C01_2_00007FFDFB3717C0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3997901_2_00007FFDFB399790
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3538501_2_00007FFDFB353850
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2C78401_2_00007FFDFB2C7840
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2AD8301_2_00007FFDFB2AD830
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2B58201_2_00007FFDFB2B5820
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2E38201_2_00007FFDFB2E3820
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2FB6A01_2_00007FFDFB2FB6A0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3277201_2_00007FFDFB327720
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB32373C1_2_00007FFDFB32373C
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3217101_2_00007FFDFB321710
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB35CBC01_2_00007FFDFB35CBC0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB394C201_2_00007FFDFB394C20
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2AAC501_2_00007FFDFB2AAC50
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB34CBF01_2_00007FFDFB34CBF0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2B2AE01_2_00007FFDFB2B2AE0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2B0B501_2_00007FFDFB2B0B50
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2D6B401_2_00007FFDFB2D6B40
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2FA9A01_2_00007FFDFB2FA9A0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2A6A001_2_00007FFDFB2A6A00
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB32A9F01_2_00007FFDFB32A9F0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB386A001_2_00007FFDFB386A00
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2B8A301_2_00007FFDFB2B8A30
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2AC8AC1_2_00007FFDFB2AC8AC
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB384F901_2_00007FFDFB384F90
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3230501_2_00007FFDFB323050
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB314FE01_2_00007FFDFB314FE0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB326E901_2_00007FFDFB326E90
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2A4EE01_2_00007FFDFB2A4EE0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB35EF001_2_00007FFDFB35EF00
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB324DA01_2_00007FFDFB324DA0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB398D801_2_00007FFDFB398D80
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB31AE201_2_00007FFDFB31AE20
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB320E401_2_00007FFDFB320E40
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB35ADF01_2_00007FFDFB35ADF0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB362E101_2_00007FFDFB362E10
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB31ACD01_2_00007FFDFB31ACD0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2C0C601_2_00007FFDFB2C0C60
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB348C901_2_00007FFDFB348C90
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB364D301_2_00007FFDFB364D30
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB318D401_2_00007FFDFB318D40
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB358D501_2_00007FFDFB358D50
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3541901_2_00007FFDFB354190
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2B42001_2_00007FFDFB2B4200
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3241F01_2_00007FFDFB3241F0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2E41101_2_00007FFDFB2E4110
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2A20F01_2_00007FFDFB2A20F0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB3106B01_2_00007FFDFB3106B0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2DC6C01_2_00007FFDFB2DC6C0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB35E7301_2_00007FFDFB35E730
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB35C7301_2_00007FFDFB35C730
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2C25801_2_00007FFDFB2C2580
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2CC6181_2_00007FFDFB2CC618
Source: C:\Users\user\Desktop\Aimbot.exeCode function: String function: 00007FF74B4D2B10 appears 47 times
Source: C:\Users\user\Desktop\Aimbot.exeCode function: String function: 00007FFDFB393540 appears 53 times
Source: unicodedata.pyd.0.drStatic PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: zlib1.dll.0.drStatic PE information: Number of sections : 12 > 10
Source: python3.dll.0.drStatic PE information: No import functions for PE file found
Source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: OriginalFilename_tkinter.pyd. vs Aimbot.exe
Source: Aimbot.exe, 00000000.00000003.1672097559.0000020132766000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: OriginalFilenametcl86.dllP vs Aimbot.exe
Source: Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: OriginalFilename_bz2.pyd. vs Aimbot.exe
Source: Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: OriginalFilename_socket.pyd. vs Aimbot.exe
Source: Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: OriginalFilename_lzma.pyd. vs Aimbot.exe
Source: Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: OriginalFilenamepython3.dll. vs Aimbot.exe
Source: Aimbot.exe, 00000000.00000003.1662087768.000002013275D000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: OriginalFilenamevcruntime140.dllT vs Aimbot.exe
Source: Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: OriginalFilename_hashlib.pyd. vs Aimbot.exe
Source: Aimbot.exe, 00000000.00000003.1662912486.000002013275D000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: OriginalFilename_decimal.pyd. vs Aimbot.exe
Source: Aimbot.exe, 00000000.00000003.1671751784.0000020132766000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: OriginalFilenameselect.pyd. vs Aimbot.exe
Source: Aimbot.exeBinary or memory string: OriginalFilename vs Aimbot.exe
Source: Aimbot.exe, 00000001.00000002.2916652415.00007FFE13319000.00000002.00000001.01000000.00000005.sdmpBinary or memory string: OriginalFilenamevcruntime140.dllT vs Aimbot.exe
Source: Aimbot.exe, 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpBinary or memory string: OriginalFilenametk86.dllP vs Aimbot.exe
Source: Aimbot.exe, 00000001.00000002.2915440494.00007FFDFBAB2000.00000002.00000001.01000000.00000004.sdmpBinary or memory string: OriginalFilenamepython312.dll. vs Aimbot.exe
Source: Aimbot.exe, 00000001.00000002.2915669907.00007FFDFF2FB000.00000002.00000001.01000000.00000008.sdmpBinary or memory string: OriginalFilenametcl86.dllP vs Aimbot.exe
Source: Aimbot.exe, 00000001.00000002.2916900033.00007FFE148E6000.00000002.00000001.01000000.0000000E.sdmpBinary or memory string: OriginalFilenameselect.pyd. vs Aimbot.exe
Source: Aimbot.exe, 00000001.00000002.2916478374.00007FFE1323E000.00000002.00000001.01000000.00000007.sdmpBinary or memory string: OriginalFilename_tkinter.pyd. vs Aimbot.exe
Source: Aimbot.exe, 00000001.00000002.2910062502.000001C689150000.00000002.00000001.01000000.00000006.sdmpBinary or memory string: OriginalFilenamepython3.dll. vs Aimbot.exe
Source: Aimbot.exe, 00000001.00000002.2916314500.00007FFE13228000.00000008.00000001.01000000.0000000A.sdmpBinary or memory string: OriginalFilenamezlib1.dll* vs Aimbot.exe
Source: Aimbot.exe, 00000001.00000002.2915956720.00007FFE11EE3000.00000002.00000001.01000000.0000000D.sdmpBinary or memory string: OriginalFilename_socket.pyd. vs Aimbot.exe
Source: Aimbot.exe, 00000001.00000002.2915817712.00007FFE11EBE000.00000002.00000001.01000000.0000000F.sdmpBinary or memory string: OriginalFilename_hashlib.pyd. vs Aimbot.exe
Source: Aimbot.exe, 00000001.00000002.2913429275.00007FFDFAB9A000.00000002.00000001.01000000.00000010.sdmpBinary or memory string: OriginalFilenamelibcryptoH vs Aimbot.exe
Source: classification engineClassification label: sus32.winEXE@3/951@0/0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4D8770 GetLastError,FormatMessageW,WideCharToMultiByte,0_2_00007FF74B4D8770
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2AA3B0 CoCreateInstance,EnableWindow,CoTaskMemFree,CoTaskMemFree,1_2_00007FFDFB2AA3B0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2A7CE0 GetModuleHandleW,FindResourceW,LoadResource,LockResource,memcpy,1_2_00007FFDFB2A7CE0
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\Desktop\private_key.pemJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442Jump to behavior
Source: Aimbot.exeStatic PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: C:\Users\user\Desktop\Aimbot.exeKey opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
Source: Aimbot.exeString found in binary or memory: -help
Source: Aimbot.exeString found in binary or memory: -startline must be less than or equal to -endline
Source: C:\Users\user\Desktop\Aimbot.exeFile read: C:\Users\user\Desktop\Aimbot.exeJump to behavior
Source: unknownProcess created: C:\Users\user\Desktop\Aimbot.exe "C:\Users\user\Desktop\Aimbot.exe"
Source: C:\Users\user\Desktop\Aimbot.exeProcess created: C:\Users\user\Desktop\Aimbot.exe "C:\Users\user\Desktop\Aimbot.exe"
Source: C:\Users\user\Desktop\Aimbot.exeProcess created: C:\Users\user\Desktop\Aimbot.exe "C:\Users\user\Desktop\Aimbot.exe"Jump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: version.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: vcruntime140.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: tcl86t.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: tk86t.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: netapi32.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: userenv.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: zlib1.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: logoncli.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: netutils.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: samcli.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: cryptbase.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: iphlpapi.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: libcrypto-3.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: cryptsp.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: rsaenh.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: uxtheme.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: kernel.appcore.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: textinputframework.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: coreuicomponents.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: coremessaging.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: ntmarta.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: coremessaging.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: wintypes.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: wintypes.dllJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeSection loaded: wintypes.dllJump to behavior
Source: Window RecorderWindow detected: More than 3 window changes detected
Source: Aimbot.exeStatic PE information: Image base 0x140000000 > 0x60000000
Source: Aimbot.exeStatic file information: File size 13439784 > 1048576
Source: Aimbot.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: Aimbot.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: Aimbot.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: Aimbot.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: Aimbot.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: Aimbot.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT
Source: Aimbot.exeStatic PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE
Source: Aimbot.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: Binary string: D:\a\1\b\bin\amd64\select.pdb source: Aimbot.exe, 00000000.00000003.1671751784.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2916798867.00007FFE148E3000.00000002.00000001.01000000.0000000E.sdmp, select.pyd.0.dr
Source: Binary string: D:\a\1\b\bin\amd64\python312.pdb source: Aimbot.exe, 00000001.00000002.2914645148.00007FFDFB812000.00000002.00000001.01000000.00000004.sdmp
Source: Binary string: D:\a\1\b\libcrypto-3.pdb| source: Aimbot.exe, 00000001.00000002.2913131498.00007FFDFAAF1000.00000002.00000001.01000000.00000010.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_hashlib.pdb source: Aimbot.exe, 00000000.00000003.1663107498.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2915760786.00007FFE11EB7000.00000002.00000001.01000000.0000000F.sdmp, _hashlib.pyd.0.dr
Source: Binary string: D:\a\1\b\bin\amd64\_decimal.pdb$$ source: _decimal.pyd.0.dr
Source: Binary string: crypto\engine\tb_digest.cENGINE_get_digestcrypto\buffer\buffer.cBUF_MEM_growBUF_MEM_grow_cleancrypto\packet.ccompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specific.dllCPUINFO: crypto\initthread.cOPENSSL_ia32cap source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_lzma.pdbNN source: Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: tRSA_PRIME_INFOeqdmp1dmq1iqmpprime_infosRSAPrivateKeyRSAPublicKeyhashAlgorithmmaskGenAlgorithmsaltLengthtrailerFieldRSA_PSS_PARAMShashFuncmaskGenFuncpSourceFuncRSA_OAEP_PARAMScompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"3.2.1built on: Fri Feb 23 00:13:44 2024 UTCplatform: VC-WIN64AOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availablecrypto\init.cOPENSSL_init_cryptocrypto\bio\bio_lib.cBIO_new_exbio_read_internbio_write_internBIO_sendmmsgBIO_recvmmsgBIO_putsBIO_getsBIO_get_line BIO_ctrlBIO_callback_ctrlBIO_find_type source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_decimal.pdb source: _decimal.pyd.0.dr
Source: Binary string: C:\Users\runneradmin\AppData\Local\Temp\pip-req-build-csg7dlje\src\rust\target\release\deps\cryptography_rust.pdb source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_lzma.pdb source: Aimbot.exe, 00000000.00000003.1663264315.000002013275D000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_bz2.pdb source: Aimbot.exe, 00000000.00000003.1662224656.000002013275D000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: @ compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"OpenSSL 3.0.13 30 Jan 20243.0.13built on: Mon Feb 5 17:39:09 2024 UTCplatform: VC-WIN64A-masmOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availableget_and_lock..\s\crypto\ex_data.cossl_crypto_get_ex_new_index_exossl_crypto_new_ex_data_exCRYPTO_dup_ex_dataCRYPTO_set_ex_dataOPENSSL_WIN32_UTF8..\s\crypto\getenv.ccompiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specificC:\Program Files\Common Files\SSLC:\Program Files\OpenSSL\lib\ossl-modules.dllCPUINFO: ..\s\crypto\init.cOPENSSL_init_cryptoOPENSSL_atexit..\s\crypto\initthread.c..\s\crypto\mem_sec.cassertion failed: (bit & 1) == 0assertion failed: list >= 0 && list < sh.freelist_sizeassertion failed: ((ptr - sh.arena) & ((sh.arena_size >> list) - 1)) == 0assertion failed: bit > 0 && bit < sh.bittable_sizeassertion failed: TESTBIT(table, bit)assertion failed: !TESTBIT(table, bit)assertion failed: WITHIN_FREELIST(list)assertion failed: WITHIN_ARENA(ptr)assertion failed: temp->next == NULL || WITHIN_ARENA(temp->next)assertion failed: (char **)temp->next->p_next == listassertion failed: WITHIN_FREELIST(temp2->p_next) || WITHIN_ARENA(temp2->p_next)assertion failed: size > 0assertion failed: (size & (size - 1)) == 0assertion failed: (minsize & (minsize - 1)) == 0assertion failed: sh.freelist != NULLassertion failed: sh.bittable != NULLassertion failed: sh.bitmalloc != NULLassertion failed: !sh_testbit(temp, slist, sh.bitmalloc)assertion failed: temp != sh.freelist[slist]assertion failed: sh.freelist[slist] == tempassertion failed: temp-(sh.arena_size >> slist) == sh_find_my_buddy(temp, slist)assertion failed: sh_testbit(chunk, list, sh.bittable)assertion failed: WITHIN_ARENA(chunk)assertion failed: sh_testbit(ptr, list, sh.bittable)assertion failed: ptr == sh_find_my_buddy(buddy, list)assertion failed: ptr != NULLassertion failed: !sh_testbit(ptr, list, sh.bitmalloc)assertion failed: sh.freelist[list] == ptr/*0123456789ABCDEFCRYPTO_memdup..\s\crypto\o_str.chexstr2buf_sepossl_hexstr2buf_sepbuf2hexstr_sepossl_buf2hexstr_sep..\s\crypto\packet.cwpacket_intern_init_lenWPACKET_start_sub_packet_len__..\s\crypto\param_build.cparam_pushparam_push_numOSSL_PARAM_BLD_push_BN_padNegative big numbers are unsupported for OSSL_PARAMOSSL_PARAM_BLD_push_utf8_stringOSSL_PARAM_BLD_push_utf8_ptrOSSL_PARAM_BLD_push_octet_stringOSSL_PARAM_BLD_
Source: Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb source: Aimbot.exe, 00000000.00000003.1662087768.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2916569171.00007FFE13313000.00000002.00000001.01000000.00000005.sdmp, VCRUNTIME140.dll.0.dr
Source: Binary string: C:\Users\runneradmin\AppData\Local\Temp\pip-req-build-csg7dlje\src\rust\target\release\deps\cryptography_rust.pdbo source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmp
Source: Binary string: compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: Aimbot.exe, 00000001.00000002.2913131498.00007FFDFAA59000.00000002.00000001.01000000.00000010.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_tkinter.pdb source: Aimbot.exe, 00000000.00000003.1663538195.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2916422110.00007FFE13238000.00000002.00000001.01000000.00000007.sdmp
Source: Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdbGCTL source: Aimbot.exe, 00000000.00000003.1662087768.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2916569171.00007FFE13313000.00000002.00000001.01000000.00000005.sdmp, VCRUNTIME140.dll.0.dr
Source: Binary string: D:\a\1\b\libcrypto-3.pdb source: Aimbot.exe, 00000001.00000002.2913131498.00007FFDFAAF1000.00000002.00000001.01000000.00000010.sdmp
Source: Binary string: D:\a\1\b\bin\amd64\_socket.pdb source: Aimbot.exe, 00000000.00000003.1663406733.000002013275D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2915901227.00007FFE11ED9000.00000002.00000001.01000000.0000000D.sdmp, _socket.pyd.0.dr
Source: Binary string: D:\a\1\b\bin\amd64\python3.pdb source: Aimbot.exe, 00000000.00000003.1669451270.0000020132766000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000002.2910062502.000001C689150000.00000002.00000001.01000000.00000006.sdmp
Source: Binary string: compiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmp
Source: Aimbot.exeStatic PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: Aimbot.exeStatic PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: Aimbot.exeStatic PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: Aimbot.exeStatic PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: Aimbot.exeStatic PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB329E90 abort,strcmp,strcmp,GetModuleHandleW,GetModuleFileNameW,LoadLibraryW,GetProcAddress,strncmp,1_2_00007FFDFB329E90
Source: Aimbot.exeStatic PE information: section name: _RDATA
Source: VCRUNTIME140.dll.0.drStatic PE information: section name: fothk
Source: VCRUNTIME140.dll.0.drStatic PE information: section name: _RDATA
Source: zlib1.dll.0.drStatic PE information: section name: .xdata
Source: libcrypto-3.dll.0.drStatic PE information: section name: .00cfg
Source: python312.dll.0.drStatic PE information: section name: PyRuntim

Persistence and Installation Behavior

barindex
Found pyInstaller with non standard icon
Source: C:\Users\user\Desktop\Aimbot.exeProcess created: "C:\Users\user\Desktop\Aimbot.exe"
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\python312.dllJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\libcrypto-3.dllJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\zlib1.dllJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography\hazmat\bindings\_rust.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\VCRUNTIME140.dllJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\_cffi_backend.cp312-win_amd64.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\_socket.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\_tkinter.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\unicodedata.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\_decimal.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\_bz2.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\_hashlib.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\tk86t.dllJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\python3.dllJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\select.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl86t.dllJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeFile created: C:\Users\user\AppData\Local\Temp\_MEI73442\_lzma.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2C41F0 IsIconic,IsZoomed,AdjustWindowRectEx,SendMessageW,SendMessageW,GetSystemMetrics,MoveWindow,GetWindowRect,GetClientRect,MoveWindow,GetWindowRect,MoveWindow,DrawMenuBar,1_2_00007FFDFB2C41F0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4D53F0 GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,0_2_00007FF74B4D53F0
Source: C:\Users\user\Desktop\Aimbot.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI73442\python312.dllJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography\hazmat\bindings\_rust.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI73442\_socket.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI73442\_cffi_backend.cp312-win_amd64.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI73442\_tkinter.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI73442\unicodedata.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI73442\_decimal.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI73442\_bz2.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI73442\_hashlib.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI73442\python3.dllJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI73442\select.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI73442\_lzma.pydJump to dropped file
Source: C:\Users\user\Desktop\Aimbot.exeCheck user administrative privileges: GetTokenInformation,DecisionNodesgraph_0-17382
Source: C:\Users\user\Desktop\Aimbot.exeAPI coverage: 4.2 %
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4D8D00 FindFirstFileExW,FindClose,0_2_00007FF74B4D8D00
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E8670 _invalid_parameter_noinfo,FindFirstFileExW,GetLastError,_invalid_parameter_noinfo,FindNextFileW,GetLastError,0_2_00007FF74B4E8670
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4E8670 _invalid_parameter_noinfo,FindFirstFileExW,GetLastError,_invalid_parameter_noinfo,FindNextFileW,GetLastError,0_2_00007FF74B4E8670
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F26C4 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose,0_2_00007FF74B4F26C4
Source: C:\Users\user\Desktop\Aimbot.exeFile opened: C:\Users\user\AppData\Local\Temp\Jump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeFile opened: C:\Users\user\AppData\Local\Jump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeFile opened: C:\Users\user\AppData\Jump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeFile opened: C:\Users\user\AppData\Local\Temp\_MEI73442\Jump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeFile opened: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\Jump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeFile opened: C:\Users\user\Jump to behavior
Source: Aimbot.exe, 00000001.00000002.2909205336.000001C688A10000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4EB3CC RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,0_2_00007FF74B4EB3CC
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB329E90 abort,strcmp,strcmp,GetModuleHandleW,GetModuleFileNameW,LoadLibraryW,GetProcAddress,strncmp,1_2_00007FFDFB329E90
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F42D0 GetProcessHeap,0_2_00007FF74B4F42D0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4EB3CC RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,0_2_00007FF74B4EB3CC
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4DCA9C SetUnhandledExceptionFilter,0_2_00007FF74B4DCA9C
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4DC030 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,0_2_00007FF74B4DC030
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4DC8BC IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,0_2_00007FF74B4DC8BC
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB39DEDC IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,1_2_00007FFDFB39DEDC
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB39D4C0 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,1_2_00007FFDFB39D4C0
Source: C:\Users\user\Desktop\Aimbot.exeProcess created: C:\Users\user\Desktop\Aimbot.exe "C:\Users\user\Desktop\Aimbot.exe"Jump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4FA620 cpuid 0_2_00007FF74B4FA620
Source: C:\Users\user\Desktop\Aimbot.exeCode function: InitCommonControlsEx,RegisterClassW,GetKeyboardLayout,GetLocaleInfoW,TranslateCharsetInfo,1_2_00007FFDFB2C6890
Source: C:\Users\user\Desktop\Aimbot.exeCode function: OpenClipboard,IsClipboardFormatAvailable,GetClipboardData,GlobalLock,GlobalUnlock,IsClipboardFormatAvailable,IsClipboardFormatAvailable,GetClipboardData,GlobalLock,GetLocaleInfoA,GlobalUnlock,GetClipboardData,GlobalLock,GlobalUnlock,IsClipboardFormatAvailable,GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,CloseClipboard,1_2_00007FFDFB2A8660
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl8 VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl8\8.4 VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl8 VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl8\8.5 VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl8 VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\http1.0 VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\opt0.4 VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\Desktop\Aimbot.exe VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442 VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442 VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442 VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442 VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\Desktop\Aimbot.exe VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\Desktop\Aimbot.exe VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\Desktop\Aimbot.exe VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\Desktop\Aimbot.exe VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\Desktop\Aimbot.exe VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\Desktop\Aimbot.exe VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\Desktop\Aimbot.exe VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\Desktop\Aimbot.exe VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\Desktop\Aimbot.exe VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442 VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\_tkinter.pyd VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\Desktop\Aimbot.exe VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeQueries volume information: C:\Users\user\Desktop\Aimbot.exe VolumeInformationJump to behavior
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4DC7A0 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,0_2_00007FF74B4DC7A0
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 0_2_00007FF74B4F6B50 _get_daylight,_get_daylight,_get_daylight,_get_daylight,_get_daylight,GetTimeZoneInformation,0_2_00007FF74B4F6B50
Source: C:\Users\user\Desktop\Aimbot.exeCode function: 1_2_00007FFDFB2C6A90 GetVersionExW,memset,RegOpenKeyExW,RegQueryValueExW,RegCloseKey,1_2_00007FFDFB2C6A90
Source: C:\Users\user\Desktop\Aimbot.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuidJump to behavior

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid Accounts2
Command and Scripting Interpreter		1
DLL Side-Loading		11
Process Injection		1
Masquerading		21
Input Capture		2
System Time Discovery		Remote Services21
Input Capture		1
Encrypted Channel		Exfiltration Over Other Network MediumAbuse Accessibility Features
CredentialsDomainsDefault Accounts2
Native API		Boot or Logon Initialization Scripts1
DLL Side-Loading		11
Process Injection		LSASS Memory21
Security Software Discovery		Remote Desktop Protocol11
Archive Collected Data		Junk DataExfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)1
Deobfuscate/Decode Files or Information		Security Account Manager1
Application Window Discovery		SMB/Windows Admin Shares3
Clipboard Data		SteganographyAutomated ExfiltrationData Encrypted for Impact
Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin Hook1
Obfuscated Files or Information		NTDS2
File and Directory Discovery		Distributed Component Object ModelInput CaptureProtocol ImpersonationTraffic DuplicationData Destruction
Gather Victim Network InformationServerCloud AccountsLaunchdNetwork Logon ScriptNetwork Logon Script1
DLL Side-Loading		LSA Secrets34
System Information Discovery		SSHKeyloggingFallback ChannelsScheduled TransferData Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

SourceDetectionScannerLabelLink
C:\Users\user\AppData\Local\Temp\_MEI73442\VCRUNTIME140.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\VCRUNTIME140.dll0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\_bz2.pyd0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\_bz2.pyd0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\_cffi_backend.cp312-win_amd64.pyd0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\_cffi_backend.cp312-win_amd64.pyd0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\_decimal.pyd0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\_decimal.pyd0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\_hashlib.pyd0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\_hashlib.pyd0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\_lzma.pyd0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\_lzma.pyd0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\_socket.pyd0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\_socket.pyd0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\_tkinter.pyd0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\_tkinter.pyd0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography\hazmat\bindings\_rust.pyd0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography\hazmat\bindings\_rust.pyd0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\libcrypto-3.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\libcrypto-3.dll0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\python3.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\python3.dll0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\python312.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\python312.dll0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\select.pyd0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\select.pyd0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\tcl86t.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\tcl86t.dll0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\tk86t.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\tk86t.dll0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\unicodedata.pyd0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\unicodedata.pyd0%VirustotalBrowse
C:\Users\user\AppData\Local\Temp\_MEI73442\zlib1.dll0%ReversingLabs
C:\Users\user\AppData\Local\Temp\_MEI73442\zlib1.dll0%VirustotalBrowse

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

SourceDetectionScannerLabelLink
http://cacerts.digicert.co0%URL Reputationsafe
http://cacerts.digicert.co0%URL Reputationsafe
https://linuxreviews.org/HOWTO_change_the_mouse_speed_in_X0%Avira URL Cloudsafe
https://linuxreviews.org/HOWTO_change_the_mouse_speed_in_X0%VirustotalBrowse

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

NameSourceMaliciousAntivirus DetectionReputation
https://github.com/python/cpython/blob/3.9/Lib/importlib/_bootstrap_external.py#L679-L688Aimbot.exe, 00000001.00000002.2909009086.000001C68897C000.00000004.00001000.00020000.00000000.sdmpfalse
    		high
    https://github.com/pyca/cryptography/issues/8996Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmpfalse
      		high
      https://linuxreviews.org/HOWTO_change_the_mouse_speed_in_XAimbot.exe, 00000000.00000003.1728020864.0000020132761000.00000004.00000020.00020000.00000000.sdmpfalse
      • 0%, Virustotal, Browse
      • Avira URL Cloud: safe
      		unknown
      https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/ConnectionAimbot.exe, 00000000.00000003.1673490397.0000020132761000.00000004.00000020.00020000.00000000.sdmp, http-2.9.8.tm.0.drfalse
        		high
        https://github.com/pyca/cryptographyAimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drfalse
          		high
          https://www.python.org/download/releases/2.3/mro/.Aimbot.exe, 00000001.00000002.2909009086.000001C688900000.00000004.00001000.00020000.00000000.sdmpfalse
            		high
            https://cryptography.io/METADATA.0.drfalse
              		high
              https://github.com/python/cpython/blob/839d7893943782ee803536a47f1d4de160314f85/Lib/importlib/readerAimbot.exe, 00000001.00000002.2908766495.000001C687021000.00000004.00000020.00020000.00000000.sdmpfalse
                		high
                https://github.com/python/cpython/issues/86361.Aimbot.exe, 00000001.00000002.2909511969.000001C688E9A000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000003.1736464563.000001C688FDD000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000001.00000003.1736537132.000001C688F6D000.00000004.00000020.00020000.00000000.sdmpfalse
                  		high
                  https://github.com/pyca/cryptography/Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drfalse
                    		high
                    https://www.apache.org/licenses/Aimbot.exe, 00000000.00000003.1664416001.0000020132760000.00000004.00000020.00020000.00000000.sdmp, LICENSE.APACHE.0.drfalse
                      		high
                      https://github.com/pyca/cryptography/workflows/CI/badge.svg?branch=mainAimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drfalse
                        		high
                        https://cryptography.io/en/latest/faq/#why-can-t-i-import-my-pem-fileAimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmpfalse
                          		high
                          https://github.com/tensorflow/datasets/blob/master/tensorflow_datasets/core/utils/resource_utils.py#Aimbot.exe, 00000001.00000002.2908766495.000001C687021000.00000004.00000020.00020000.00000000.sdmpfalse
                            		high
                            https://datatracker.ietf.org/doc/html/rfc5246#section-7.4.1.4.1Aimbot.exe, 00000001.00000002.2910091904.000001C6894FB000.00000004.00001000.00020000.00000000.sdmpfalse
                              		high
                              https://github.com/pyca/cryptography/actions?query=workflow%3ACIAimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drfalse
                                		high
                                https://cryptography.io/en/latest/installation/Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drfalse
                                  		high
                                  https://github.com/Unidata/MetPy/blob/a3424de66a44bf3a92b0dcacf4dff82ad7b86712/src/metpy/plots/wx_syAimbot.exe, 00000001.00000002.2908766495.000001C687021000.00000004.00000020.00020000.00000000.sdmpfalse
                                    		high
                                    https://www.apache.org/licenses/LICENSE-2.0Aimbot.exe, 00000000.00000003.1664472258.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1664373166.000002013276D000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1664416001.0000020132760000.00000004.00000020.00020000.00000000.sdmp, LICENSE.APACHE.0.drfalse
                                      		high
                                      https://www.python.org/psf/license/Aimbot.exe, 00000001.00000002.2915072045.00007FFDFB989000.00000008.00000001.01000000.00000004.sdmpfalse
                                        		high
                                        https://docs.python.org/3.11/library/binascii.html#binascii.a2b_base64Aimbot.exe, 00000001.00000002.2909205336.000001C688A10000.00000004.00000020.00020000.00000000.sdmpfalse
                                          		high
                                          https://img.shields.io/pypi/v/cryptography.svgAimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drfalse
                                            		high
                                            http://cacerts.digicert.coAimbot.exe, 00000000.00000002.2908628806.000002013276E000.00000004.00000020.00020000.00000000.sdmp, Aimbot.exe, 00000000.00000003.1723516414.0000020132761000.00000004.00000020.00020000.00000000.sdmpfalse
                                            • URL Reputation: safe
                                            • URL Reputation: safe
                                            		unknown
                                            http://www.zlib.net/DAimbot.exe, 00000001.00000002.2916314500.00007FFE13228000.00000008.00000001.01000000.0000000A.sdmpfalse
                                              		high
                                              https://cryptography.io/en/latest/changelog/Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drfalse
                                                		high
                                                https://cryptography.io/en/latest/security/Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drfalse
                                                  		high
                                                  https://cffi.readthedocs.io/en/latest/using.html#callbacksAimbot.exe, Aimbot.exe, 00000001.00000002.2916044592.00007FFE126DD000.00000002.00000001.01000000.0000000C.sdmpfalse
                                                    		high
                                                    https://www.openssl.org/HAimbot.exe, 00000001.00000002.2913429275.00007FFDFAB9A000.00000002.00000001.01000000.00000010.sdmpfalse
                                                      		high
                                                      https://github.com/pyca/cryptography/issues/9253Aimbot.exe, 00000001.00000002.2913893772.00007FFDFB0E8000.00000002.00000001.01000000.0000000B.sdmpfalse
                                                        		high
                                                        https://mail.python.org/mailman/listinfo/cryptography-devAimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drfalse
                                                          		high
                                                          https://peps.python.org/pep-0205/Aimbot.exe, 00000001.00000002.2909951399.000001C6890D8000.00000004.00001000.00020000.00000000.sdmpfalse
                                                            		high
                                                            https://www.python.org/psf/license/)Aimbot.exe, 00000001.00000002.2914645148.00007FFDFB812000.00000002.00000001.01000000.00000004.sdmpfalse
                                                              		high
                                                              https://github.com/python/cpython/blob/839d7893943782ee803536a47f1d4de160314f85/Lib/importlib/abc.pyAimbot.exe, 00000001.00000002.2908766495.000001C687021000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                		high
                                                                https://cryptography.ioAimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drfalse
                                                                  		high
                                                                  https://github.com/pyca/cryptography/issuesMETADATA.0.drfalse
                                                                    		high
                                                                    https://readthedocs.org/projects/cryptography/badge/?version=latestAimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drfalse
                                                                      		high
                                                                      https://peps.python.org/pep-0263/Aimbot.exe, 00000001.00000002.2914645148.00007FFDFB812000.00000002.00000001.01000000.00000004.sdmpfalse
                                                                        		high
                                                                        https://pypi.org/project/cryptography/Aimbot.exe, 00000000.00000003.1664574476.0000020132763000.00000004.00000020.00020000.00000000.sdmp, METADATA.0.drfalse
                                                                          		high

                                                                          World Map of Contacted IPs

                                                                          ⊘No contacted IP infos

                                                                          General Information

                                                                          Joe Sandbox version:40.0.0 Tourmaline
                                                                          Analysis ID:1431572
                                                                          Start date and time:2024-04-25 13:22:06 +02:00
                                                                          Joe Sandbox product:CloudBasic
                                                                          Overall analysis duration:0h 8m 8s
                                                                          Hypervisor based Inspection enabled:false
                                                                          Report type:full
                                                                          Cookbook file name:default.jbs
                                                                          Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                                                          Number of analysed new started processes analysed:7
                                                                          Number of new started drivers analysed:0
                                                                          Number of existing processes analysed:0
                                                                          Number of existing drivers analysed:0
                                                                          Number of injected processes analysed:0
                                                                          Technologies:
                                                                          • HCA enabled
                                                                          • EGA enabled
                                                                          • AMSI enabled
                                                                          Analysis Mode:default
                                                                          Analysis stop reason:Timeout
                                                                          Sample name:Aimbot.exe
                                                                          Detection:SUS
                                                                          Classification:sus32.winEXE@3/951@0/0
                                                                          EGA Information:
                                                                          • Successful, ratio: 100%
                                                                          HCA Information:
                                                                          • Successful, ratio: 76%
                                                                          • Number of executed functions: 85
                                                                          • Number of non-executed functions: 198
                                                                          Cookbook Comments:
                                                                          • Found application associated with file extension: .exe

                                                                          Warnings

                                                                          • Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
                                                                          • Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
                                                                          • Not all processes where analyzed, report is missing behavior information
                                                                          • Report size exceeded maximum capacity and may have missing disassembly code.
                                                                          • Report size getting too big, too many NtCreateFile calls found.
                                                                          • Report size getting too big, too many NtQueryVolumeInformationFile calls found.

                                                                          Simulations

                                                                          Behavior and APIs

                                                                          ⊘No simulations

                                                                          Joe Sandbox View / Context

                                                                          IPs

                                                                          ⊘No context

                                                                          Domains

                                                                          ⊘No context

                                                                          ASNs

                                                                          ⊘No context

                                                                          JA3 Fingerprints

                                                                          ⊘No context

                                                                          Dropped Files

                                                                          MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                          C:\Users\user\AppData\Local\Temp\_MEI73442\_cffi_backend.cp312-win_amd64.pydSecuriteInfo.com.Win64.Evo-gen.10533.31255.exeGet hashmaliciousUnknownBrowse
                                                                            SecuriteInfo.com.Python.Stealer.1447.10844.3562.exeGet hashmaliciousPython Stealer, Creal StealerBrowse
                                                                              SecuriteInfo.com.Win64.Evo-gen.32605.13708.exeGet hashmaliciousUnknownBrowse
                                                                                SecuriteInfo.com.FileRepMalware.1994.17999.exeGet hashmaliciousTrap StealerBrowse
                                                                                  MDE_File_Sample_1e64554c1e3e257c1c52d34ca908eb9958a6bbf7.zipGet hashmaliciousUnknownBrowse
                                                                                    MDE_File_Sample_1e64554c1e3e257c1c52d34ca908eb9958a6bbf7.zipGet hashmaliciousPython StealerBrowse
                                                                                      60_seconds_setup.exeGet hashmaliciousTrap StealerBrowse
                                                                                        Explorer.exeGet hashmaliciousUnknownBrowse
                                                                                          SecuriteInfo.com.Trojan.GenericKD.70641791.20493.31768.exeGet hashmaliciousPython Stealer, CStealerBrowse
                                                                                            SecuriteInfo.com.FileRepMalware.20476.21704.exeGet hashmaliciousUnknownBrowse
                                                                                              C:\Users\user\AppData\Local\Temp\_MEI73442\VCRUNTIME140.dllValoClient.exeGet hashmaliciousPython Stealer, CStealerBrowse
                                                                                                SecuriteInfo.com.Win64.Malware-gen.26781.23689.exeGet hashmaliciousUnknownBrowse
                                                                                                  SecuriteInfo.com.Win64.Evo-gen.10533.31255.exeGet hashmaliciousUnknownBrowse
                                                                                                    TiKj3IVDj4.exeGet hashmaliciousMint StealerBrowse
                                                                                                      TiKj3IVDj4.exeGet hashmaliciousMint StealerBrowse
                                                                                                        https://developers.yubico.com/yubikey-manager-qt/Releases/yubikey-manager-qt-1.2.6-win64.exeGet hashmaliciousUnknownBrowse
                                                                                                          SecuriteInfo.com.Python.Stealer.1447.10844.3562.exeGet hashmaliciousPython Stealer, Creal StealerBrowse
                                                                                                            SecuriteInfo.com.FileRepMalware.12911.13114.exeGet hashmaliciousUnknownBrowse
                                                                                                              SecuriteInfo.com.W64.S-19146458.Eldorado.2165.28638.exeGet hashmaliciousUnknownBrowse
                                                                                                                SecuriteInfo.com.W64.S-19146458.Eldorado.2165.28638.exeGet hashmaliciousUnknownBrowse
                                                                                                                  C:\Users\user\AppData\Local\Temp\_MEI73442\_bz2.pydValoClient.exeGet hashmaliciousPython Stealer, CStealerBrowse
                                                                                                                    SecuriteInfo.com.Win64.Evo-gen.10533.31255.exeGet hashmaliciousUnknownBrowse

                                                                                                                      Created / dropped Files

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\VCRUNTIME140.dll

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):119192
                                                                                                                      Entropy (8bit):6.6016214745004635
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho
                                                                                                                      MD5:BE8DBE2DC77EBE7F88F910C61AEC691A
                                                                                                                      SHA1:A19F08BB2B1C1DE5BB61DAF9F2304531321E0E40
                                                                                                                      SHA-256:4D292623516F65C80482081E62D5DADB759DC16E851DE5DB24C3CBB57B87DB83
                                                                                                                      SHA-512:0DA644472B374F1DA449A06623983D0477405B5229E386ACCADB154B43B8B083EE89F07C3F04D2C0C7501EAD99AD95AECAA5873FF34C5EEB833285B598D5A655
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Joe Sandbox View:
                                                                                                                      • Filename: ValoClient.exe, Detection: malicious, Browse
                                                                                                                      • Filename: SecuriteInfo.com.Win64.Malware-gen.26781.23689.exe, Detection: malicious, Browse
                                                                                                                      • Filename: SecuriteInfo.com.Win64.Evo-gen.10533.31255.exe, Detection: malicious, Browse
                                                                                                                      • Filename: TiKj3IVDj4.exe, Detection: malicious, Browse
                                                                                                                      • Filename: TiKj3IVDj4.exe, Detection: malicious, Browse
                                                                                                                      • Filename: , Detection: malicious, Browse
                                                                                                                      • Filename: SecuriteInfo.com.Python.Stealer.1447.10844.3562.exe, Detection: malicious, Browse
                                                                                                                      • Filename: SecuriteInfo.com.FileRepMalware.12911.13114.exe, Detection: malicious, Browse
                                                                                                                      • Filename: SecuriteInfo.com.W64.S-19146458.Eldorado.2165.28638.exe, Detection: malicious, Browse
                                                                                                                      • Filename: SecuriteInfo.com.W64.S-19146458.Eldorado.2165.28638.exe, Detection: malicious, Browse
                                                                                                                      Reputation:moderate, very likely benign file
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........N.../c../c../c._]b./c..W.../c../b./c../c../c...`./c...g./c...f./c...c./c....../c...a./c.Rich./c.........................PE..d.....cW.........." ...&. ...d......................................................-.....`A.........................................e..4...4m...........................O...........N..p............................L..@............0...............................text...&........................... ..`fothk........ ...................... ..`.rdata..\C...0...D...$..............@..@.data...p............h..............@....pdata...............l..............@..@_RDATA...............x..............@..@.rsrc................z..............@..@.reloc...............~..............@..B................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\_bz2.pyd

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):85272
                                                                                                                      Entropy (8bit):6.581027304618609
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:1536:Va1z78QpNWk5qkCFM7Q4SPogYzR8WkiHH9IjCVz7SyqxJ:Va1zg5kWFqQ4Xz+Wkq9IjCVze
                                                                                                                      MD5:223FD6748CAE86E8C2D5618085C768AC
                                                                                                                      SHA1:DCB589F2265728FE97156814CBE6FF3303CD05D3
                                                                                                                      SHA-256:F81DC49EAC5ECC528E628175ADD2FF6BDA695A93EA76671D7187155AA6326ABB
                                                                                                                      SHA-512:9C22C178417B82E68F71E5B7FE7C0C0A77184EE12BD0DC049373EACE7FA66C89458164D124A9167AE760FF9D384B78CA91001E5C151A51AD80C824066B8ECCE6
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Joe Sandbox View:
                                                                                                                      • Filename: ValoClient.exe, Detection: malicious, Browse
                                                                                                                      • Filename: SecuriteInfo.com.Win64.Evo-gen.10533.31255.exe, Detection: malicious, Browse
                                                                                                                      Reputation:low
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......o~..+...+...+..."g..!...-...)...-.i.(...-...&...-...#...-.../...D...(...`g..)...+...t...D...#...D...*...D.k.*...D...*...Rich+...........................PE..d....K.f.........." ...&.....^...............................................`.......b....`.............................................H............@.......0..8......../...P..........T...........................p...@............................................text............................... ..`.rdata...>.......@..................@..@.data........ ......................@....pdata..8....0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\_cffi_backend.cp312-win_amd64.pyd

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):182784
                                                                                                                      Entropy (8bit):6.193615170968096
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3072:YRAMUp3K6YoDssyudy4VcRG+nR3hnW3mjwwOdkS9S7iSSTLkK/jftw3buz:Y6MyK65ssy+MG+LnSUwjD9zSSTLL/jl8
                                                                                                                      MD5:0572B13646141D0B1A5718E35549577C
                                                                                                                      SHA1:EEB40363C1F456C1C612D3C7E4923210EAE4CDF7
                                                                                                                      SHA-256:D8A76D1E31BBD62A482DEA9115FC1A109CB39AF4CF6D1323409175F3C93113A7
                                                                                                                      SHA-512:67C28432CA8B389ACC26E47EB8C4977FDDD4AF9214819F89DF07FECBC8ED750D5F35807A1B195508DD1D77E2A7A9D7265049DCFBFE7665A7FD1BA45DA1E4E842
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Joe Sandbox View:
                                                                                                                      • Filename: SecuriteInfo.com.Win64.Evo-gen.10533.31255.exe, Detection: malicious, Browse
                                                                                                                      • Filename: SecuriteInfo.com.Python.Stealer.1447.10844.3562.exe, Detection: malicious, Browse
                                                                                                                      • Filename: SecuriteInfo.com.Win64.Evo-gen.32605.13708.exe, Detection: malicious, Browse
                                                                                                                      • Filename: SecuriteInfo.com.FileRepMalware.1994.17999.exe, Detection: malicious, Browse
                                                                                                                      • Filename: MDE_File_Sample_1e64554c1e3e257c1c52d34ca908eb9958a6bbf7.zip, Detection: malicious, Browse
                                                                                                                      • Filename: MDE_File_Sample_1e64554c1e3e257c1c52d34ca908eb9958a6bbf7.zip, Detection: malicious, Browse
                                                                                                                      • Filename: 60_seconds_setup.exe, Detection: malicious, Browse
                                                                                                                      • Filename: Explorer.exe, Detection: malicious, Browse
                                                                                                                      • Filename: SecuriteInfo.com.Trojan.GenericKD.70641791.20493.31768.exe, Detection: malicious, Browse
                                                                                                                      • Filename: SecuriteInfo.com.FileRepMalware.20476.21704.exe, Detection: malicious, Browse
                                                                                                                      Reputation:moderate, very likely benign file
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........(...I.C.I.C.I.C.1MC.I.C.<.B.I.C.&#C.I.C.<.B.I.C.<.B.I.C.<.B.I.C.1.B.I.C.4.B.I.C.I.C I.C.<.B.I.C.1KC.I.C.<.B.I.C.<!C.I.C.<.B.I.CRich.I.C................PE..d...g..e.........." .........@......`........................................@............`..........................................w..l....w....... ..........l............0.......]...............................]..8............................................text............................... ..`.rdata..............................@..@.data...h].......0...|..............@....pdata..l...........................@..@.rsrc........ ......................@..@.reloc.......0......................@..B........................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\_decimal.pyd

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):251672
                                                                                                                      Entropy (8bit):6.565757128183933
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6144:1pR/rTVB5s99Rvft6yrsIzepnbux9qWM53pLW1Ad+ppp39PPPF8Sstvt:djLyvftDFzZUTK8SUvt
                                                                                                                      MD5:3055EDF761508190B576E9BF904003AA
                                                                                                                      SHA1:F0DC8D882B5CD7955CC6DFC8F9834F70A83C7890
                                                                                                                      SHA-256:E4104E47399D3F635A14D649F61250E9FD37F7E65C81FFE11F099923F8532577
                                                                                                                      SHA-512:87538FE20BD2C1150A8FEFD0478FFD32E2A9C59D22290464BF5DFB917F6AC7EC874F8B1C70D643A4DC3DD32CBE17E7EA40C0BE3EA9DD07039D94AB316F752248
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Reputation:low
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........hW.....................f.......f.......f.......f.......f......................f.......f.......f.......f.......f......Rich............PE..d...yK.f.........." ...&.p...<......................................................i ....`..........................................D..P....E..................`'......./......T.......T...........................@...@............................................text...9o.......p.................. ..`.rdata..H............t..............@..@.data...X*...`...$...L..............@....pdata..`'.......(...p..............@..@.rsrc...............................@..@.reloc..T...........................@..B........................................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\_hashlib.pyd

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):65816
                                                                                                                      Entropy (8bit):6.241463396742061
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:1536:6PSs3+S7z1FBV8HEmFRqeVIjOIf7Sy0xs:7szBVWEm/fVIjOIft
                                                                                                                      MD5:EEDB6D834D96A3DFFFFB1F65B5F7E5BE
                                                                                                                      SHA1:ED6735CFDD0D1EC21C7568A9923EB377E54B308D
                                                                                                                      SHA-256:79C4CDE23397B9A35B54A3C2298B3C7A844454F4387CB0693F15E4FACD227DD2
                                                                                                                      SHA-512:527BD7BB2F4031416762595F4CE24CBC6254A50EAF2CC160B930950C4F2B3F5E245A486972148C535F8CD80C78EC6FA8C9A062085D60DB8F23D4B21E8AE4C0AD
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Reputation:low
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......~z.A:...:...:...3ca.>...<...8...<...6...<...2...<...9...U...8...qc..8.......9...:.......U...;...U...;...U...;...U...;...Rich:...........................PE..d....K.f.........." ...&.T..........L@..............................................lg....`.............................................P.............................../......X...@}..T............................|..@............p..(............................text...wS.......T.................. ..`.rdata..&O...p...P...X..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..X...........................@..B........................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\_lzma.pyd

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):160024
                                                                                                                      Entropy (8bit):6.841300813767097
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3072:EwpwQ7a8+OsGqtCXJznfF9mNo+pxAbm19IjZ1Tv:EwpV7a8FdNYO+pmC1i
                                                                                                                      MD5:05E8B2C429AFF98B3AE6ADC842FB56A3
                                                                                                                      SHA1:834DDBCED68DB4FE17C283AB63B2FAA2E4163824
                                                                                                                      SHA-256:A6E2A5BB7A33AD9054F178786A031A46EA560FAEEF1FB96259331500AAE9154C
                                                                                                                      SHA-512:BADEB99795B89BC7C1F0C36BECC7A0B2CE99ECFD6F6BB493BDA24B8E57E6712E23F4C509C96A28BC05200910BEDDC9F1536416BBC922331CAE698E813CBB50B3
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Reputation:low
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........3..MRu.MRu.MRu.D*..IRu.K.t.ORu.K.p.ARu.K.q.ERu.K.v.NRu.".t.NRu..*t.ORu.MRt.(Ru.".x.wRu.".u.LRu."..LRu.".w.LRu.RichMRu.........................PE..d....K.f.........." ...&.f...........8..............................................`3....`......................................... %..L...l%..x....p.......P.......B.../......4.......T...............................@............................................text....d.......f.................. ..`.rdata..............j..............@..@.data...h....@......................@....pdata.......P......."..............@..@.rsrc........p.......6..............@..@.reloc..4............@..............@..B................................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\_socket.pyd

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):83224
                                                                                                                      Entropy (8bit):6.336512797446254
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:1536:rGkFyhCF5VK8+1j50VnWZyJwe9/s+S+pzj18/n1IsJw4YhIjLwYX7Sy4xU:rsYn1qFyJwe9/sT+pzjU1IwwDhIjLwaT
                                                                                                                      MD5:DC06F8D5508BE059EAE9E29D5BA7E9EC
                                                                                                                      SHA1:D666C88979075D3B0C6FD3BE7C595E83E0CB4E82
                                                                                                                      SHA-256:7DAFF6AA3851A913ED97995702A5DFB8A27CB7CF00FB496597BE777228D7564A
                                                                                                                      SHA-512:57EB36BC1E9BE20C85C34B0A535B2349CB13405D60E752016E23603C4648939F1150E4DBEBC01EC7B43EB1A6947C182CCB8A806E7E72167AD2E9D98D1FD94AB3
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......D.i....}...}...}..}...}.0.|...}.0.|...}.0.|...}.0.|...}o0.|...}...}...}K..|...}o0.|...}o0.|...}o0.}...}o0.|...}Rich...}........PE..d....K.f.........." ...&.v...........-.......................................`............`.............................................P............@.......0.........../...P..........T...............................@............................................text....u.......v.................. ..`.rdata...x.......z...z..............@..@.data...............................@....pdata.......0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B................................................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\_tkinter.pyd

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):64280
                                                                                                                      Entropy (8bit):6.281608660509971
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:1536:8y4xyiZ1dTb/5p81CanoBZVIjOSW67SyWxs:n0yirVbBppanoBZVIjOSnl
                                                                                                                      MD5:1DF0201667B4718637318DBCDC74A574
                                                                                                                      SHA1:FD44A9B3C525BEFFBCA62C6ABE4BA581B9233DB2
                                                                                                                      SHA-256:70439EE9A05583D1C4575DCE3343B2A1884700D9E0264C3ADA9701829483A076
                                                                                                                      SHA-512:530431E880F2BC193FAE53B6C051BC5F62BE08D8CA9294F47F18BB3390DCC0914E8E53D953EEE2FCF8E1EFBE17D98EB60B3583BCCC7E3DA5E21CA4DC45ADFAF4
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............og..og..og......og...f..og...b..og...c..og...d..og...f..og...f..og.G.f..og..of..og...j..og...g..og....og...e..og.Rich.og.................PE..d....K.f.........." ...&.h...f......................................................<_....`.............................................P................................/......$.......T...............................@...............p............................text....f.......h.................. ..`.rdata...@.......B...l..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..$...........................@..B................................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\base_library.zip

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Zip archive data, at least v2.0 to extract, compression method=store
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1333651
                                                                                                                      Entropy (8bit):5.5868779115750264
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12288:uttcY+bS4OmE1jc+fYNXPh26UZWAzDX7jOIqL3CjHgopRdmoPFHz1dcfsFvaYcIe:uttcY+NHSPD/e2cqRdmoPxzQIaYcIe
                                                                                                                      MD5:8DAD91ADD129DCA41DD17A332A64D593
                                                                                                                      SHA1:70A4EC5A17ED63CAF2407BD76DC116ACA7765C0D
                                                                                                                      SHA-256:8DE4F013BFECB9431AABAA97BB084FB7DE127B365B9478D6F7610959BF0D2783
                                                                                                                      SHA-512:2163414BC01FC30D47D1DE763A8332AFE96EA7B296665B1A0840D5197B7E56F4963938E69DE35CD2BF89158E5E2240A1650D00D86634AC2A5E2AD825455A2D50
                                                                                                                      Malicious:false
                                                                                                                      Preview:PK..........!.x[_C............_collections_abc.pyc......................................Z.....d.Z.d.d.l.m.Z.m.Z...d.d.l.Z...e.e.e.............Z...e.d.........Z.d...Z...e.e.........Z.[.g.d...Z.d.Z...e...e.d.................Z...e...e...e.........................Z...e...e.i.j%..........................................Z...e...e.i.j)..........................................Z...e...e.i.j-..........................................Z...e...e.g.................Z...e...e...e.g.........................Z...e...e...e.d.........................Z...e...e...e.d.d.z...........................Z...e...e...e.........................Z...e...e.d.................Z ..e...e.d.................Z!..e...e...e"........................Z#..e.i.j%..................................Z$..e.i.j)..................................Z%..e.i.j-..................................Z&..e.e.jN..........................Z(..e...d...................Z)d...Z*..e*........Z*..e.e*........Z+e*jY............................[*d...Z-..e-........

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info\INSTALLER

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4
                                                                                                                      Entropy (8bit):1.5
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:Mn:M
                                                                                                                      MD5:365C9BFEB7D89244F2CE01C1DE44CB85
                                                                                                                      SHA1:D7A03141D5D6B1E88B6B59EF08B6681DF212C599
                                                                                                                      SHA-256:CEEBAE7B8927A3227E5303CF5E0F1F7B34BB542AD7250AC03FBCDE36EC2F1508
                                                                                                                      SHA-512:D220D322A4053D84130567D626A9F7BB2FB8F0B854DA1621F001826DC61B0ED6D3F91793627E6F0AC2AC27AEA2B986B6A7A63427F05FE004D8A2ADFBDADC13C1
                                                                                                                      Malicious:false
                                                                                                                      Preview:pip.

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info\LICENSE

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):197
                                                                                                                      Entropy (8bit):4.61968998873571
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:hWDncJhByZmJgXPForADu1QjygQuaAJygT2d5GeWreLRuOFEXAYeBKmJozlMHuO:h9Co8FyQjkDYc5tWreLBF/pn2mH1
                                                                                                                      MD5:8C3617DB4FB6FAE01F1D253AB91511E4
                                                                                                                      SHA1:E442040C26CD76D1B946822CAF29011A51F75D6D
                                                                                                                      SHA-256:3E0C7C091A948B82533BA98FD7CBB40432D6F1A9ACBF85F5922D2F99A93AE6BB
                                                                                                                      SHA-512:77A1919E380730BCCE5B55D76FBFFBA2F95874254FAD955BD2FE1DE7FC0E4E25B5FDAAB0FEFFD6F230FA5DC895F593CF8BFEDF8FDC113EFBD8E22FADAB0B8998
                                                                                                                      Malicious:false
                                                                                                                      Preview:This software is made available under the terms of *either* of the licenses.found in LICENSE.APACHE or LICENSE.BSD. Contributions to cryptography are made.under the terms of *both* these licenses..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info\LICENSE.APACHE

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):11360
                                                                                                                      Entropy (8bit):4.426756947907149
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:nUDG5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEnQHbHR:UIvlKM1zJlFvmNz5VrlkTS0QHt
                                                                                                                      MD5:4E168CCE331E5C827D4C2B68A6200E1B
                                                                                                                      SHA1:DE33EAD2BEE64352544CE0AA9E410C0C44FDF7D9
                                                                                                                      SHA-256:AAC73B3148F6D1D7111DBCA32099F68D26C644C6813AE1E4F05F6579AA2663FE
                                                                                                                      SHA-512:F451048E81A49FBFA11B49DE16FF46C52A8E3042D1BCC3A50AAF7712B097BED9AE9AED9149C21476C2A1E12F1583D4810A6D36569E993FE1AD3879942E5B0D52
                                                                                                                      Malicious:false
                                                                                                                      Preview:. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that control, are controlled by, or are under common. control with that entity. For the purposes of this definition,. "control" means (i) the power, direct or indirect, to cause the. direction or management of such entity, whether by contract or. otherwise, or (ii) ownership of fifty percent (50%) or more of the. outstanding shares, or (iii) beneficial ow

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info\LICENSE.BSD

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1532
                                                                                                                      Entropy (8bit):5.058591167088024
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:MjUnoorbOFFTJJyRrYFTjzMbmqEvBTP4m96432s4EOkUTKQROJ32s3yxsITf+3tY:MkOFJSrYJsaN5P406432svv32s3EsIqm
                                                                                                                      MD5:5AE30BA4123BC4F2FA49AA0B0DCE887B
                                                                                                                      SHA1:EA5B412C09F3B29BA1D81A61B878C5C16FFE69D8
                                                                                                                      SHA-256:602C4C7482DE6479DD2E9793CDA275E5E63D773DACD1ECA689232AB7008FB4FB
                                                                                                                      SHA-512:DDBB20C80ADBC8F4118C10D3E116A5CD6536F72077C5916D87258E155BE561B89EB45C6341A1E856EC308B49A4CB4DBA1408EABD6A781FBE18D6C71C32B72C41
                                                                                                                      Malicious:false
                                                                                                                      Preview:Copyright (c) Individual contributors..All rights reserved...Redistribution and use in source and binary forms, with or without.modification, are permitted provided that the following conditions are met:.. 1. Redistributions of source code must retain the above copyright notice,. this list of conditions and the following disclaimer... 2. Redistributions in binary form must reproduce the above copyright. notice, this list of conditions and the following disclaimer in the. documentation and/or other materials provided with the distribution... 3. Neither the name of PyCA Cryptography nor the names of its contributors. may be used to endorse or promote products derived from this software. without specific prior written permission...THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND.ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED.WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOS

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info\METADATA

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5430
                                                                                                                      Entropy (8bit):5.111831778200942
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:DxZpqZink/QIHQIyzQIZQILuQIR8vtklGovuxNx6rIWwCvCCcT+vIrrr9B+M6VwP:xJnkoBs/stL18cT+vIrrxsM6VwDjyeyM
                                                                                                                      MD5:AD313397AABF8AF5D234DF73C901CB4D
                                                                                                                      SHA1:B213A420B73EACF37409BC428812B3E17F1C12C9
                                                                                                                      SHA-256:65479522961A5B9B1C4811232C4133DDC8BDA9BBBC7562B81EF76857A2A2475A
                                                                                                                      SHA-512:468BD32AABA49839D4A4752108A378954900037588B7095B318179D64F76F4302ADEBCFA1664CEE5CC390AD0EEA79A611A7B5C372548FEA22DF77C2A459DA2AF
                                                                                                                      Malicious:false
                                                                                                                      Preview:Metadata-Version: 2.1..Name: cryptography..Version: 42.0.5..Summary: cryptography is a package which provides cryptographic recipes and primitives to Python developers...Author-email: The Python Cryptographic Authority and individual contributors <cryptography-dev@python.org>..License: Apache-2.0 OR BSD-3-Clause..Project-URL: homepage, https://github.com/pyca/cryptography..Project-URL: documentation, https://cryptography.io/..Project-URL: source, https://github.com/pyca/cryptography/..Project-URL: issues, https://github.com/pyca/cryptography/issues..Project-URL: changelog, https://cryptography.io/en/latest/changelog/..Classifier: Development Status :: 5 - Production/Stable..Classifier: Intended Audience :: Developers..Classifier: License :: OSI Approved :: Apache Software License..Classifier: License :: OSI Approved :: BSD License..Classifier: Natural Language :: English..Classifier: Operating System :: MacOS :: MacOS X..Classifier: Operating System :: POSIX..Classifier: Operating Syst

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info\RECORD

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:CSV text
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):15325
                                                                                                                      Entropy (8bit):5.563847623401295
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:GXPJ25R5jF4esCVqhOZ4Ko09vZ6s7B0Ppz+NXwvn5Zn+:GXQ5bCsxo6vZ6s7B0Ppz+9wvny
                                                                                                                      MD5:E6B75CE246EFE869513E6AEF89C70270
                                                                                                                      SHA1:E9C5F5F2215CB0BC3BE30F3B4B965353F885B16C
                                                                                                                      SHA-256:788F299DF61F4B6721532CEE20E39D62B65F906C4C9A6DD4D04504537061E52C
                                                                                                                      SHA-512:A38B01AAA18EF93DDAABB8E0ACC409EF953FDE06CB38EC40BFEDB2F352CB3A0199D3EA1B869A4DB1521CFD8D9FBB9239DA1252917DABA1BF9205845F3F59D458
                                                                                                                      Malicious:false
                                                                                                                      Preview:cryptography-42.0.5.dist-info/INSTALLER,sha256=zuuue4knoyJ-UwPPXg8fezS7VCrXJQrAP7zeNuwvFQg,4..cryptography-42.0.5.dist-info/LICENSE,sha256=Pgx8CRqUi4JTO6mP18u0BDLW8amsv4X1ki0vmak65rs,197..cryptography-42.0.5.dist-info/LICENSE.APACHE,sha256=qsc7MUj20dcRHbyjIJn2jSbGRMaBOuHk8F9leaomY_4,11360..cryptography-42.0.5.dist-info/LICENSE.BSD,sha256=YCxMdILeZHndLpeTzaJ15eY9dz2s0eymiSMqtwCPtPs,1532..cryptography-42.0.5.dist-info/METADATA,sha256=ZUeVIpYaW5scSBEjLEEz3ci9qbu8dWK4HvdoV6KiR1o,5430..cryptography-42.0.5.dist-info/RECORD,,..cryptography-42.0.5.dist-info/REQUESTED,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0..cryptography-42.0.5.dist-info/WHEEL,sha256=ZzJfItdlTwUbeh2SvWRPbrqgDfW_djikghnwfRmqFIQ,100..cryptography-42.0.5.dist-info/top_level.txt,sha256=KNaT-Sn2K4uxNaEbe6mYdDn3qWDMlp4y-MtWfB73nJc,13..cryptography/__about__.py,sha256=Q_dIPaB2u54kbfNQMzqmbel-gbG6RC5vWzO6OSFDGqM,445..cryptography/__init__.py,sha256=iVPlBlXWTJyiFeRedxcbMPhyHB34viOM10d72vGnWuE,364..cryptography/__pycache__/_

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info\WHEEL

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):100
                                                                                                                      Entropy (8bit):5.0203365408149025
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:RtEeX7MWcSlVlbY3KgP+tkKciH/KQLn:RtBMwlVCxWKTQLn
                                                                                                                      MD5:C48772FF6F9F408D7160FE9537E150E0
                                                                                                                      SHA1:79D4978B413F7051C3721164812885381DE2FDF5
                                                                                                                      SHA-256:67325F22D7654F051B7A1D92BD644F6EBAA00DF5BF7638A48219F07D19AA1484
                                                                                                                      SHA-512:A817107D9F70177EA9CA6A370A2A0CB795346C9025388808402797F33144C1BAF7E3DE6406FF9E3D8A3486BDFAA630B90B63935925A36302AB19E4C78179674F
                                                                                                                      Malicious:false
                                                                                                                      Preview:Wheel-Version: 1.0.Generator: bdist_wheel (0.42.0).Root-Is-Purelib: false.Tag: cp39-abi3-win_amd64..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography-42.0.5.dist-info\top_level.txt

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):13
                                                                                                                      Entropy (8bit):3.2389012566026314
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:cOv:Nv
                                                                                                                      MD5:E7274BD06FF93210298E7117D11EA631
                                                                                                                      SHA1:7132C9EC1FD99924D658CC672F3AFE98AFEFAB8A
                                                                                                                      SHA-256:28D693F929F62B8BB135A11B7BA9987439F7A960CC969E32F8CB567C1EF79C97
                                                                                                                      SHA-512:AA6021C4E60A6382630BEBC1E16944F9B312359D645FC61219E9A3F19D876FD600E07DCA6932DCD7A1E15BFDEAC7DBDCEB9FFFCD5CA0E5377B82268ED19DE225
                                                                                                                      Malicious:false
                                                                                                                      Preview:cryptography.

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\cryptography\hazmat\bindings\_rust.pyd

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7218176
                                                                                                                      Entropy (8bit):6.56234593155449
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:98304:1CPfKk+AGdmA+xiIfIBE7S2ohqc/3J2y:gPfr3GdmAwjABE7S2ogiJ
                                                                                                                      MD5:12A7C0D35CCBD002150BB29DDD7E8440
                                                                                                                      SHA1:F16D9A4654DC76B3CFADA387FF7BDDDB0B18B79A
                                                                                                                      SHA-256:7E22D579AC503B959268964102C03D4E96C8A9B74186158B8C82FDC8CF9D9522
                                                                                                                      SHA-512:C9E5E68DE8F51F91CBBA839B4FECE1DB4DA7480890A6C7318A78DEAA30191FCB8913BA447F45D4AE93B986F3246F09F8CC721E781CE020110A3BB5628B3EF9F7
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........r.Fs..Fs..Fs..O...Ts.....Ds.....Ws.....Ns.....Bs..|...Ds..Fs..gq.....Ws..)...0p.....Gs..Fs...s.....Gs.....Gs..RichFs..........................PE..d....A.e.........." ...'.jS...........R.......................................n...........`.........................................`.h.p.....h.|............Pj..M............m......7c.T....................8c.(....6c.@.............S..............................text....hS......jS................. ..`.rdata........S......nS.............@..@.data....!... i.......i.............@....pdata...M...Pj..N....i.............@..@.reloc........m......Dm.............@..B................................................................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\libcrypto-3.dll

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5191960
                                                                                                                      Entropy (8bit):5.962142634441191
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:98304:n3+pefu6fSar+SJ8aqfPomg1CPwDvt3uFlDCE:3G+u6fb+SJ8aqfwmg1CPwDvt3uFlDCE
                                                                                                                      MD5:E547CF6D296A88F5B1C352C116DF7C0C
                                                                                                                      SHA1:CAFA14E0367F7C13AD140FD556F10F320A039783
                                                                                                                      SHA-256:05FE080EAB7FC535C51E10C1BD76A2F3E6217F9C91A25034774588881C3F99DE
                                                                                                                      SHA-512:9F42EDF04C7AF350A00FA4FDF92B8E2E6F47AB9D2D41491985B20CD0ADDE4F694253399F6A88F4BDD765C4F49792F25FB01E84EC03FD5D0BE8BB61773D77D74D
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............l..l..l......l...m..l...i..l...h..l...o..l..m.y.l...m...l...o..l...h.l...l..l......l...n..l.Rich.l.........PE..d......e.........." ...%..7..4......v.........................................O.......P...`.........................................P.H.0....kN.@.....N.|.....K.d.....O../....N....P.C.8.............................C.@............`N..............................text.....7.......7................. ..`.rdata....... 7.......7.............@..@.data....n....K..<....J.............@....pdata..0.....K......4K.............@..@.idata...%...`N..&....N.............@..@.00cfg..u.....N.......N.............@..@.rsrc...|.....N......0N.............@..@.reloc........N......8N.............@..B................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\python3.dll

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):68376
                                                                                                                      Entropy (8bit):6.149155712539885
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:dHmHXV1EbYGVXq6KC/prVHBN0cW18itCQDFPnOMFn+gikF/nFX14uewjBcCCC0y3:dHmHXDmF61JFn+/O4hIjL017Sy/bxe
                                                                                                                      MD5:79B02450D6CA4852165036C8D4EAED1F
                                                                                                                      SHA1:CE9FF1B302426D4C94A2D3EA81531D3CB9E583E4
                                                                                                                      SHA-256:D2E348E615A5D3B08B0BAC29B91F79B32F0C1D0BE48976450042462466B51123
                                                                                                                      SHA-512:47044D18DB3A4DD58A93B43034F4FAFA66821D157DCFEFB85FCA2122795F4591DC69A82EB2E0EBD9183075184368850E4CAF9C9FEA0CFE6F766C73A60FFDF416
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........^..?e..?e..?e...m..?e...e..?e......?e...g..?e.Rich.?e.........................PE..d...fK.f.........." ...&.............................................................t....`.........................................`...H................................/..............T............................................................................rdata..............................@..@.rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\python312.dll

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6928664
                                                                                                                      Entropy (8bit):5.765764546579782
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:49152:77dFcaC296MwQx0AWOO5JqSEShouly4XUV/x3aOvi5lnX79DxW/En8tdFNPhD2SI:7Z+aCnAh8lRA4jvE0ivHHDMiEBaw
                                                                                                                      MD5:3C388CE47C0D9117D2A50B3FA5AC981D
                                                                                                                      SHA1:038484FF7460D03D1D36C23F0DE4874CBAEA2C48
                                                                                                                      SHA-256:C98BA3354A7D1F69BDCA42560FEEC933CCBA93AFCC707391049A065E1079CDDB
                                                                                                                      SHA-512:E529C5C1C028BE01E44A156CD0E7CAD0A24B5F91E5D34697FAFC395B63E37780DC0FAC8F4C5D075AD8FE4BD15D62A250B818FF3D4EAD1E281530A4C7E3CE6D35
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........ ._.A...A...A.......A.......A.......A.......A.......A...9e..A...9...A...A...@......cA.......A.......A.......A..Rich.A..........PE..d...cK.f.........." ...&..(..*B.....8.........................................j.....$cj...`.........................................0nN.d....;O...... i......._.TI....i../...0i..Z....2.T.....................H.(...`.2.@............0(..............................text...r.(.......(................. ..`.rdata...0'..0(..2'...(.............@..@.data....D...pO......PO.............@....pdata..TI...._..J....^.............@..@PyRuntim......b......"a.............@....rsrc........ i......$h.............@..@.reloc...Z...0i..\....h.............@..B........................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\select.pyd

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):30488
                                                                                                                      Entropy (8bit):6.576230704358061
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:vNnMgHqxp1GPn5hIjQGl5YiSyv38aAMxkE7:vNnMgKxp1U5hIjQGr7Sy/8Yxn
                                                                                                                      MD5:92B440CA45447EC33E884752E4C65B07
                                                                                                                      SHA1:5477E21BB511CC33C988140521A4F8C11A427BCC
                                                                                                                      SHA-256:680DF34FB908C49410AC5F68A8C05D92858ACD111E62D1194D15BDCE520BD6C3
                                                                                                                      SHA-512:40E60E1D1445592C5E8EB352A4052DB28B1739A29E16B884B0BA15917B058E66196988214CE473BA158704837B101A13195D5E48CB1DC2F07262DFECFE8D8191
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&.tb..'b..'b..'k.V'`..'d(.&`..'d(.&n..'d(.&j..'d(.&f..'.(.&`..'b..' ..')..&g..'.(.&c..'.(.&c..'.(:'c..'.(.&c..'Richb..'........PE..d....K.f.........." ...&.....2............................................................`..........................................@..L...,A..x....p.......`.......H.../......L....3..T............................2..@............0...............................text............................... ..`.rdata.......0......................@..@.data...X....P.......6..............@....pdata.......`.......8..............@..@.rsrc........p.......<..............@..@.reloc..L............F..............@..B................................................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl86t.dll

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1816344
                                                                                                                      Entropy (8bit):6.495083998132025
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24576:bAZ2kQrvqkPY6i6ktWc2uMOxmWu1/0lglMkgshwlfjwtorWy2eMdPhOC9JlQ5ZDZ:bA0W9jEoSy2nd9JlQjaq5vWHZ7XM2eDj
                                                                                                                      MD5:21DC82DD9CC445F92E0172D961162222
                                                                                                                      SHA1:73BC20B509E1545B16324480D9620AE25364EBF1
                                                                                                                      SHA-256:C2966941F116FAB99F48AB9617196B43A5EE2FD94A8C70761BDA56CB334DAA03
                                                                                                                      SHA-512:3051A9D723FB7FC11F228E9F27BD2644AC5A0A95E7992D60C757240577B92FC31FA373987B338E6BC5707317D20089DF4B48D1B188225FF370AD2A68D5FF7BA6
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Preview:MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......1.y+u..xu..xu..x...yw..x...xv..x...yx..x...y}..x...yq..x..yw..x|..xg..x...yt..x...yx..xu..x]..x...y...x...yt..x...xt..x...yt..xRichu..x........................PE..d...1,.c.........." ...!..................................................................`..............................................`.. _..h.......8................/..........................................`...@............0...............................text............................... ..`.rdata..|L...0...N..................@..@.data...."...........f..............@....pdata...............n..............@..@.rsrc...8............f..............@..@.reloc...............j..............@..B................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl8\8.4\platform-1.0.19.tm

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):11707
                                                                                                                      Entropy (8bit):5.03328629946697
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:rXlm2LnoZ7k2mOEhYoKVtWD2xLsmF+MNlPQ4lJ+B0O0DgryYY/+zy7go:rXlm2Lng7kvF2VtWD2xLeMNT+B0O0Urk
                                                                                                                      MD5:A0B269D76DB613C2D927EFA84FEE88E2
                                                                                                                      SHA1:F9C7AD375F4D4223F0668FA1E2C4E5A83CAC2D03
                                                                                                                      SHA-256:32348D51F3637F375B056FE99E9B4D89D85D45DB907847DC370BD72812A2E2FE
                                                                                                                      SHA-512:5427762147825DC2ED3FEEE4011BBF2100932A4D93F3242CCAD15499C9DC39F42A82AEB42ED5DB5839560CD7AAE5D30621AC3694552FFC650A1F572CEE32FA54
                                                                                                                      Malicious:false
                                                                                                                      Preview:# -*- tcl -*-..# ### ### ### ######### ######### #########..## Overview....# Heuristics to assemble a platform identifier from publicly available..# information. The identifier describes the platform of the currently..# running tcl shell. This is a mixture of the runtime environment and..# of build-time properties of the executable itself...#..# Examples:..# <1> A tcl shell executing on a x86_64 processor, but having a..# wordsize of 4 was compiled for the x86 environment, i.e. 32..# bit, and loaded packages have to match that, and not the..# actual cpu...#..# <2> The hp/solaris 32/64 bit builds of the core cannot be..# distinguished by looking at tcl_platform. As packages have to..# match the 32/64 information we have to look in more places. In..# this case we inspect the executable itself (magic numbers,..# i.e. fileutil::magic::filetype)...#..# The basic information used comes out of the 'os' and 'machine'..# entries of the 'tcl_platform' array. A number of general and

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl8\8.4\platform\shell-1.1.4.tm

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Tcl script, ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6218
                                                                                                                      Entropy (8bit):4.843141834641668
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:PV5U+VLnNUPVvH+knNUPVUHD5ngWftN+IgMufIdqi+g0SYiCXVDjqL:Nm6MFXN5uwq51iCFD2
                                                                                                                      MD5:8ABC3029963E433D1D9865AAA7E1057B
                                                                                                                      SHA1:A88091DC98B2FD0AE3A258B59F8BE43F41F04323
                                                                                                                      SHA-256:0A6B4B109CFDFC4B40FBDEFDB2282F9B1AF3CC2F9624DD39958EEBD78781AFB2
                                                                                                                      SHA-512:D5068375615A2200DDC13EEB852B2E21B7E4AA416FB7A0E97C98B8B106D7701792C523739E8BF266D2ABE411D4298A0B5B3884CFB9DF820FD4A2B61B22F9DECF
                                                                                                                      Malicious:false
                                                                                                                      Preview:..# -*- tcl -*-..# ### ### ### ######### ######### #########..## Overview....# Higher-level commands which invoke the functionality of this package..# for an arbitrary tcl shell (tclsh, wish, ...). This is required by a..# repository as while the tcl shell executing packages uses the same..# platform in general as a repository application there can be..# differences in detail (i.e. 32/64 bit builds).....# ### ### ### ######### ######### #########..## Requirements....package require platform..namespace eval ::platform::shell {}....# ### ### ### ######### ######### #########..## Implementation....# -- platform::shell::generic....proc ::platform::shell::generic {shell} {.. # Argument is the path to a tcl shell..... CHECK $shell.. LOCATE base out.... set code {}.. # Forget any pre-existing platform package, it might be in.. # conflict with this one... lappend code {package forget platform}.. # Inject our platform package.. lappend code [list source $base]..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl8\8.5\msgcat-1.6.1.tm

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Tcl script, ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):35136
                                                                                                                      Entropy (8bit):4.945501767273492
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:m3xQvCzasI/rHPG2yfkZ0Kbh91iQ3Lnq5MIVYB8mbgijsPIWtw4qvUm:4xQvCzasIDHPG2yW0kJ32imXmUij6JjG
                                                                                                                      MD5:BD4FF2A1F742D9E6E699EEEE5E678AD1
                                                                                                                      SHA1:811AD83AFF80131BA73ABC546C6BD78453BF3EB9
                                                                                                                      SHA-256:6774519F179872EC5292523F2788B77B2B839E15665037E097A0D4EDDDD1C6FB
                                                                                                                      SHA-512:B77E4A68017BA57C06876B21B8110C636F9BA1DD0BA9D7A0C50096F3F6391508CF3562DD94ACEAF673113DBD336109DA958044AEFAC0AFB0F833A652E4438F43
                                                                                                                      Malicious:false
                                                                                                                      Preview:# msgcat.tcl --..#..#.This file defines various procedures which implement a..#.message catalog facility for Tcl programs. It should be..#.loaded with the command "package require msgcat"...#..# Copyright (c) 2010-2015 Harald Oehlmann...# Copyright (c) 1998-2000 Ajuba Solutions...# Copyright (c) 1998 Mark Harrison...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES.....package require Tcl 8.5-..# When the version number changes, be sure to update the pkgIndex.tcl file,..# and the installation directory in the Makefiles...package provide msgcat 1.6.1....namespace eval msgcat {.. namespace export mc mcexists mcload mclocale mcmax mcmset mcpreferences mcset\.. mcunknown mcflset mcflmset mcloadedlocales mcforgetpackage\... mcpackageconfig mcpackagelocale.... # Records the list of locales to search.. variable Loclist {}.... # List of currently loaded locales.. variable LoadedLoc

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl8\8.5\tcltest-2.5.5.tm

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Tcl script, Unicode text, UTF-8 text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):107674
                                                                                                                      Entropy (8bit):4.841458743618635
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3072:74s6YTLsaoi4N8uBPM5PP9AlGXJL/ciBh:7N6Y9oi4N8uBPM5PP9AYXJL/ciBh
                                                                                                                      MD5:655EC828777244F9F048E0D08203482F
                                                                                                                      SHA1:790446D04FE7BE12FD5DCF6E6FBD4C5A08C45C98
                                                                                                                      SHA-256:35A88F56DF57E6AC6F2CCC4D193210FBB9BD224AC99670603E077DDF8C5610BC
                                                                                                                      SHA-512:C249CAA5DA76A0B0876DD1BD201FF2D249D4FCD8467992C9DE51BA5A1C5471F98C10D69C46DF5B25DBA7941F4301B446D90CBF17BCCFB8B0ED27B22BF4DA20F3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# tcltest.tcl --..#..#.This file contains support code for the Tcl test suite. It..# defines the tcltest namespace and finds and defines the output..# directory, constraints available, output and error channels,..#.etc. used by Tcl tests. See the tcltest man page for more..#.details...#..# This design was based on the Tcl testing approach designed and..# initially implemented by Mary Ann May-Pumphrey of Sun..#.Microsystems...#..# Copyright . 1994-1997 Sun Microsystems, Inc...# Copyright . 1998-1999 Scriptics Corporation...# Copyright . 2000 Ajuba Solutions..# Contributions from Don Porter, NIST, 2002. (not subject to US copyright)..# All rights reserved.....package require Tcl 8.5-..;# -verbose line uses [info frame]..namespace eval tcltest {.... # When the version number changes, be sure to update the pkgIndex.tcl file,.. # and the install directory in the Makefiles. When the minor version.. # changes (new feature) be sure to update the man page

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl8\8.6\http-2.9.8.tm

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Tcl script, ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):118419
                                                                                                                      Entropy (8bit):4.888789841897662
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:1536:RYY1IO/KuUhIW17zr1DLJuuBuFsj6aIsGc3e6xGxjndp72y4ebBxIQ30Ik:RbyOCuUv9r5LJmsjlxTxGxjndpCBeAQ0
                                                                                                                      MD5:ACB85FEB97B27F1362E1D76B686D498F
                                                                                                                      SHA1:92C370F838BD67C72E153FBF7AD05E26FF40A393
                                                                                                                      SHA-256:7A30E7A49C1F6939537EB7A80CF2F5BC7A4969F2B2AD99BA4E26DB85BBC2FCC7
                                                                                                                      SHA-512:EA504863386817E1B21549376148FD05C7EAF74F91A3A8DA97EFCF3784530ED3CF1910DF9B2431EC47D1175759CDEB1A0E9E9E02BBA94EC2123EAFB7CBD2B90A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# http.tcl --..#..#.Client-side HTTP for GET, POST, and HEAD commands. These routines can..#.be used in untrusted code that uses the Safesock security policy...#.These procedures use a callback interface to avoid using vwait, which..#.is not defined in the safe base...#..# See the file "license.terms" for information on usage and redistribution of..# this file, and for a DISCLAIMER OF ALL WARRANTIES.....package require Tcl 8.6-..# Keep this in sync with pkgIndex.tcl and with the install directories in..# Makefiles..package provide http 2.9.8....namespace eval http {.. # Allow resourcing to not clobber existing data.... variable http.. if {![info exists http]} {...array set http {... -accept */*... -pipeline 1... -postfresh 0... -proxyhost {}... -proxyport {}... -proxyfilter http::ProxyRequired... -repost 0... -urlencoding utf-8... -zip 1...}...# We need a useragent string of this style or various servers will...# refuse to send us compressed content

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\auto.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):21523
                                                                                                                      Entropy (8bit):4.827830596623684
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:UqT9XC9VZv9QXCTxsCTHI7672ORgS0mzBvxFRTX7Xvt3wBTnFXhCUvuyqz:LT9XC9VZviXCVsCLI7JlmzBvTxvt3gTW
                                                                                                                      MD5:08EDF746B4A088CB4185C165177BD604
                                                                                                                      SHA1:395CDA114F23E513EEF4618DA39BB86D034124BF
                                                                                                                      SHA-256:517204EE436D08EFC287ABC97433C3BFFCAF42EC6592A3009B9FD3B985AD772C
                                                                                                                      SHA-512:C1727E265A6B0B54773C886A1BCE73512E799BA81A4FCEEEB84CDC33F5505A5E0984E96326A78C46BF142BC4652A80E213886F60EB54ADF92E4DFFE953C87F6B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# auto.tcl --..#..# utility procs formerly in init.tcl dealing with auto execution of commands..# and can be auto loaded themselves...#..# Copyright (c) 1991-1993 The Regents of the University of California...# Copyright (c) 1994-1998 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution of..# this file, and for a DISCLAIMER OF ALL WARRANTIES...#....# auto_reset --..#..# Destroy all cached information for auto-loading and auto-execution, so that..# the information gets recomputed the next time it's needed. Also delete any..# commands that are listed in the auto-load index...#..# Arguments:..# None.....proc auto_reset {} {.. global auto_execs auto_index auto_path.. if {[array exists auto_index]} {...foreach cmdName [array names auto_index] {... set fqcn [namespace which $cmdName]... if {$fqcn eq ""} {....continue... }... rename $fqcn {}...}.. }.. unset -nocomplain auto_execs auto_index ::tcl::auto_oldpath.. if {

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\clock.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):133439
                                                                                                                      Entropy (8bit):5.044814789288095
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3072:Cbn4IAhYvuCg9epsArAzqpSMpWzP7ejMiIAxBPqGYkPAPaZpHYM8EN4LhVLlarXL:Cbn4IM9epsArSqpSMpWzP7ejM/eBPqG3
                                                                                                                      MD5:88BB44A1364147FDD80F9FD78FBCEF61
                                                                                                                      SHA1:2C3454D2669F0CA83FECF17976D599C85B86E615
                                                                                                                      SHA-256:1947F8B188AB4AB6AA72EA68A58D2D9ADD0894FDF320F6B074EAE0F198368FB7
                                                                                                                      SHA-512:010B13E8A2D50521B5D7ADCC5F32F7CDE3F12E1053961C575D967DC6CFD368640BF45D23832E5E9C3868CDCA9FE0505698F949C5557D4169353634C94AA196B5
                                                                                                                      Malicious:false
                                                                                                                      Preview:#----------------------------------------------------------------------..#..# clock.tcl --..#..#.This file implements the portions of the [clock] ensemble that are..#.coded in Tcl. Refer to the users' manual to see the description of..#.the [clock] command and its subcommands...#..#..#----------------------------------------------------------------------..#..# Copyright (c) 2004-2007 Kevin B. Kenny..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#..#----------------------------------------------------------------------....# We must have message catalogs that support the root locale, and we need..# access to the Registry on Windows systems.....uplevel \#0 {.. package require msgcat 1.6.. if { $::tcl_platform(platform) eq {windows} } {...if { [catch { package require registry 1.1 }] } {... namespace eval ::tcl::clock [list variable NoRegistry {}]...}.. }..}....# Put the library directory in

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\ascii.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):2.1033474959326957
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:5c2VBUvEWVrVJ/eyN9j2iV2NdWWT0VbusV7EV7KVAMmVZyd851VFpsGkliX:5HVBUlJvRj7SOVbusZhAMiZyi77qsX
                                                                                                                      MD5:9E3A454FA480E9A99D2D5ACDAA775233
                                                                                                                      SHA1:493637BB570A5C96BB62F998BD0391FB59AFC5F0
                                                                                                                      SHA-256:FB87BF197F4F485B08EA81F7534BC07D9C3A538D022424BE11011A1FE3C413FD
                                                                                                                      SHA-512:EDFCB2BB6AB052D28D5CEBD08AD57F36D3A4CB83D557B1359B0ADE1266E24D8F3CE87B8240881396A5BA4FB45F8B74014784E8885CDB86680D98977CC0D130F0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: ascii, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\big5.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):94389
                                                                                                                      Entropy (8bit):3.3217406555698195
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:UAHU3LIkZlmXrd/uQ0ao98zgKSTEvZPHb6qRL5NpiadDp0ZBFR6YR/fd:UVduBGf94gFMT6q95GDRBfd
                                                                                                                      MD5:41A874778111CC218BD421CF9C795EC2
                                                                                                                      SHA1:80857D106F71199CE187833D38DB091A819A520C
                                                                                                                      SHA-256:AD1ED201B69855BFD353BF969DFC55576DA35A963ABF1BF7FC6D8B5142A61A61
                                                                                                                      SHA-512:4244624124F86A3EFAB4C70B115A46C8ADF02D708860FA5F327CDBFA24BC3F9EFAD0C6EE58DE96B0B6BBC4CF6D99B322BB8657129007C86D6482F41C1503AAD4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: big5, multi-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cns11643.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):98634
                                                                                                                      Entropy (8bit):2.438904802083714
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:MPFOsOKqBLPf62X4lgQeLHj6RHUn0TQb8G47Ianrd28gr:MPAsknjX4OQe7aoMMarAFr
                                                                                                                      MD5:B6A7C59E6A48D91CC2DBCB2BBA7E4510
                                                                                                                      SHA1:16A9338F18202B26981F2028BEA412DD03BB0FF2
                                                                                                                      SHA-256:8924545CC92584169138AADB64683C07BBF846A57014C2E668D23B63F43F3610
                                                                                                                      SHA-512:3D644CF394A528A8699BE3679F787A4E1DAD657C04B810580A4C520F2C043471640FBE080AC46DFD3924C47A73BEE12A6AC69D291D09EB791AD0D64A73750B43
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cns11643, double-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp1250.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.3578844928761034
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CqHVBUlJvRj7SOVbusZhAMiZyi77q8ujr4z8tjsuVO6ys2K:JMlBVnrAMiwMm8ujr4z8emTys2K
                                                                                                                      MD5:9568EDE60D3F917F1671F5A625A801C4
                                                                                                                      SHA1:4F5B3308FE7F6845B46779DECF9B395E47AC7396
                                                                                                                      SHA-256:E2991A6F7A7A4D8D3C4C97947298FD5BACB3EAA2F898CEE17F5E21A9861B9626
                                                                                                                      SHA-512:9C32BE3E25FC2211CE91F7B9AE1F9EBA20071272BE2BBBA63A8B6E3CD6543C4C32CD62C4C4D153C94F5BE212E974A61EEFD70DDC005F1688D09D9D56E8E298A8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp1250, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp1251.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.358948900439905
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CTHVBUlJvRj7SOVbusZhAMiZyi77qpREwKsF/+++SAJlz9aRme3cJI:wMlBVnrAMiwMmpKwKm/EYnsJI
                                                                                                                      MD5:83DAF47FD1F87B7B1E9E086F14C39E5B
                                                                                                                      SHA1:77AE330512EBFEF430A02213644BD1CFCE174298
                                                                                                                      SHA-256:0AA66DFF8A7AE570FEE83A803F8F5391D9F0C9BD6311796592D9B6E8E36BE6FC
                                                                                                                      SHA-512:D7CE2F44EDFE1DA6D3E07E9A41BB08AD42430BAAFADD09FD217F4B524323A01A1F4913B640C552D38AAEBFF75B0D50ED7A813A2A57C4019311158890C0162DF9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp1251, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp1252.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.292994562910468
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:C4HVBUlJvRj7SOVbusZhAMiZyi77qdmV/rcwvGNNlkL+rSMH+tKv:rMlBVnrAMiwMmd2r/okLz0
                                                                                                                      MD5:E9117326C06FEE02C478027CB625C7D8
                                                                                                                      SHA1:2ED4092D573289925A5B71625CF43CC82B901DAF
                                                                                                                      SHA-256:741859CF238C3A63BBB20EC6ED51E46451372BB221CFFF438297D261D0561C2E
                                                                                                                      SHA-512:D0A39BC41ADC32F2F20B1A0EBAD33BF48DFA6ED5CC1D8F92700CDD431DB6C794C09D9F08BB5709B394ACF54116C3A1E060E2ABCC6B503E1501F8364D3EEBCD52
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp1252, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp1253.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.422723556981327
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CRHVBUlJvRj7SOVbusZhAMiZyi77qduWn4T5K9QQSqiWeIDDdn:CMlBVnrAMiwMmduWnSKyQSqiWeIVn
                                                                                                                      MD5:441B86A0DE77F25C91DF1CD4685F651D
                                                                                                                      SHA1:D1E429916BC9423F55EEC8F17941521E9FE9D32B
                                                                                                                      SHA-256:5B8D47451F847C1BDE12CACA3739CA29860553C0B6399EE990D51B26F9A69722
                                                                                                                      SHA-512:35DF342DDA4E8790C6D53762465DF8B93B49B7B7E211D7A5753078EF559C9C9383EFF7285A90FF5C0020FBB16AF380EE3C8643F4CEB1E41917E72021079D722F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp1253, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp1254.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.307590929679485
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CWHVBUlJvRj7SOVbusZhAMiZyi77qdjrcFvGNNlkBSMH+tA/b:lMlBVnrAMiwMmdjriokgzAD
                                                                                                                      MD5:5FA9162BEC5A4DEA97B5EA2840CFB065
                                                                                                                      SHA1:F26858E3D2FB928F39CA87CBB8446AF099570CAD
                                                                                                                      SHA-256:31639CA96A4D3602D59BD012540FE179917E0561CB11A0D0B61F1B950EB76911
                                                                                                                      SHA-512:3CE7BEABBE1A0CB946149D263D3317A8B791F6D72C49DEC4621E27F50CC359D8FA3EE97C03FF05D44E47DAA59DB87F219386467614B8B3FF8CC21AB3E3BED5E6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp1254, single-byte..S..003F 0 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..20AC0081201A0192201E20262020202102C62030016020390152008D008E008F..009020182019201C201D20222013201402DC21220161203A0153009D009E0178..00A000A100A200A300A400A500A600A700A800A900AA00AB00AC00AD00AE00AF..00B000B100B200B300B400B500B600B700B800B900BA00BB00BC00BD00BE00BF..00C000C100C200C300C400C500C600C700C800C900CA00CB00CC00CD00CE00CF..011E00D100D200D300D400D500D600D700D800D900DA00DB00DC0130015E00DF..00E000E100E200E300E40

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp1255.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.3385880810272774
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CfHVBUlJvRj7SOVbusZhAMiZyi77qdIn2hEeGlRhv6Mw6Kcv:MMlBVnrAMiwMmdInSEdhvrj7
                                                                                                                      MD5:6DEA4179969D6C81C66C3B0F91B39769
                                                                                                                      SHA1:7E2722576BFFABC3258C5EDB2D99FA2468D6A4B0
                                                                                                                      SHA-256:47576CAE321C80E69C7F35205639680BF28010111E86E228ED191B084FAC6B91
                                                                                                                      SHA-512:91CC626B6454517F06FB3616E9ED623D1A2A4BFE74AFA9885F00F6AEC835D8825A5587091B9D9AB0E5ABDA291FA3FE7CE87E2618E21EB2974D9118AE27B8A2FF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp1255, single-byte..S..003F 0 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..20AC0081201A0192201E20262020202102C62030008A2039008C008D008E008F..009020182019201C201D20222013201402DC2122009A203A009C009D009E009F..00A000A100A200A320AA00A500A600A700A800A900D700AB00AC00AD00AE00AF..00B000B100B200B300B400B500B600B700B800B900F700BB00BC00BD00BE00BF..05B005B105B205B305B405B505B605B705B805B9000005BB05BC05BD05BE05BF..05C005C105C205C305F005F105F205F305F40000000000000000000000000000..05D005D105D205D305D40

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp1256.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.4033510023542655
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:C0HVBUlJvRj7SOVbusZhAMiZyi77q30pPE7Lym4cwGm+AMZjyG/JQIG/Y:XMlBVnrAMiwMm30FQLym4ys6Jg/Y
                                                                                                                      MD5:D50DFAFEE5C605C5C00A25A9EEE4D4CF
                                                                                                                      SHA1:7D51BC17931D3D809716C06E7F07C6011286A144
                                                                                                                      SHA-256:29340EA8E5AD3532BF67FA77CC852F055081B1238925CB109908AA72804CCC04
                                                                                                                      SHA-512:D0A9B422A1061D6239E442767069B987E33239FCBA9BACE677923888F5F8BD1DCAABC71B83A985A0A86A15DCC44316781665BBFBF24558FCB94FDA6783285BCB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp1256, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp1257.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.344584404753015
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CNHVBUlJvRj7SOVbusZhAMiZyi77q8uWTfNL4wIBUioGndt:uMlBVnrAMiwMm8uWJDNIt
                                                                                                                      MD5:CC3D24543FDD4644BBBD4AAB30CA71BC
                                                                                                                      SHA1:8E2658E7F782F005411BCB8423BDFC3C68BDED14
                                                                                                                      SHA-256:C15AB85438728BF2C60D72B1A66AF80E8B1CE3CF5EB08BA6421FF1B2F73ACDF4
                                                                                                                      SHA-512:5ECABF820098F7D24AB806ADD9CA3E1087C29914FB2DE6BA3DC656234202DE3FDF80A7E9ED433CCB2149FF07184F74884CEB37A1B689E9E0C1402916F3E13AFE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp1257, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp1258.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.2984943182702593
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CKlHVBUlJvRj7SOVbusZhAMiZyi77qdIQ2jFvGNNykoxWi3/i:xMlBVnrAMiwMmdIQufkoxn3q
                                                                                                                      MD5:12BCEAE6B6A5FAE5AE9C42F5998BA485
                                                                                                                      SHA1:C9620DA0C763D2C3770386E69EE7E421BD1BA965
                                                                                                                      SHA-256:29D93DEE7C01B2264778BC6B75F6EF76EA6AC53E9F4A334D83707229E7F482D2
                                                                                                                      SHA-512:714BAF58462FB0E84A32D82C8FC2D63EDF78DF8CCE578391E2521737F94F860B5CCFE41B481E1D09879A6811FCFD8B98A2724DB1D15749BD5293A9B33BCAD071
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp1258, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp437.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.515546664597914
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CFyHVBUlJvRj7SOVbusZhAMiZyi77qZpuHVBIqE18wDyV8mK:wyMlBVnrAMiwMm+VhE1LmK
                                                                                                                      MD5:CE6D8A6542DC12D1783084FA4B2B63EA
                                                                                                                      SHA1:5039A350C8E3E2C6F353B438B41BD0B6A7AB8069
                                                                                                                      SHA-256:E5613C04D3D2EE44CCAD85AE53A37C257674491C540836E5D942BBCC4E4A8DB4
                                                                                                                      SHA-512:E8C5CFB747486BBE0E567B6E87B59D5246D749A80C8F64F6669227C7FD849886F98A1F94451922AC099409AC14890F1A8B1E5F25EA584FDB1522ACE3AD0BE6A6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp437, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp737.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.6177058818384693
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CjHVBUlJvRj7SOVbusZhAMiZyi77qSKOQFhWehDrq18wDyVKockoiH:WMlBVnrAMiwMmSKOQFhWeh3q1odH
                                                                                                                      MD5:8EF3CBCA101F5777846D12D3C96A0A7D
                                                                                                                      SHA1:5EC5418B861894E0F18EA15AA4414019815E2EA2
                                                                                                                      SHA-256:A0415F14F5D72AD24E9C3A5C91517A0E3D22E1ADBC3505C0C6E918B961F7A07D
                                                                                                                      SHA-512:FB14C88E61E5459B4A8706751D88D0A261AC6B4171F72912D87CE78A2BC97A821CCF5B53676FB229C08F9E557BE624F4DC649B722A906B9B7944ED2D5E7F9065
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp737, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp775.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.451057608106102
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CsOHVBUlJvRj7SOVbusZhAMiZyi77qoo9ecL067J4ZNUPVw3PfA:AMlBVnrAMiwMm59T067KDLPo
                                                                                                                      MD5:9656761FA02EA24773EAD3E5C4BDB975
                                                                                                                      SHA1:366228F25392708FA799E9CC0830CE9917EF6CA7
                                                                                                                      SHA-256:C3C6542E902DEC2C44DDCFD8B5CB7ABF309B0413A7CED1614DC0B20CF7C5E35F
                                                                                                                      SHA-512:A6A44B9A2193D75764DC284BE53264E57BFEB2A221FD54B4577DD90752F69A45E6B9D293108A7AB895F347A24FD10AAE84954A043AB1F466F485D707D7412380
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp775, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp850.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.3718781469586827
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:C9HVBUlJvRj7SOVbusZhAMiZyi77qZpuHVBc+myS5LeQDTVwA:EMlBVnrAMiwMm+VeyS5SQn/
                                                                                                                      MD5:2169EE726DCC011E6C3505D586C88FC3
                                                                                                                      SHA1:094252AD0634787E2D7F0D28A448437054D359C7
                                                                                                                      SHA-256:13DF611F429A9B331DA1B34F3C718CCCAF0BD4AB44F71A9C632197987B4D643B
                                                                                                                      SHA-512:BC5831EF1C131095A22C76FFCB5C4217081AF796B60455BE2DE2E2689CFE1033F07E8B45449F77E7804A7D52CBCFB916B0B4639828E65B14475BB3367F47C8EE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp850, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp852.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.4509005787389877
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CPHVBUlJvRj7SOVbusZhAMiZyi77q7EUsOtycwQIc+922V:mMlBVnrAMiwMmwvOtycwQIc+9R
                                                                                                                      MD5:48402B424B5101BDEEB0192BBA96DB7D
                                                                                                                      SHA1:C9EB93A37AF70F4134AA9CF05D914A30FB3201DD
                                                                                                                      SHA-256:F3A18A8C7934F6586F023477E08D3F9D5EAD9A45E9E58A3F8D018AF9BB13F868
                                                                                                                      SHA-512:4EE615605BFF3D94A7FC4FE23D8288F0F20F6792C8C69ECACABAE82F1A334D8417C5DFFC0DA3702E2DB09B7BE1E5FF19C6A0F460C9A5EC84D1856BB9C8061CA5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp852, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp855.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.4277025591531864
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CoHVBUlJvRj7SOVbusZhAMiZyi77qLHVWjwk/rMZC032SLnD2JbD:hMlBVnrAMiwMmx8whM03VLDy
                                                                                                                      MD5:8B8AA56F83BA750EB73FAE542E76FF1A
                                                                                                                      SHA1:2F3C3BA4B854A7D6B0A3D27BC519EE66A042E05A
                                                                                                                      SHA-256:E64FD2E639DA6F654D9BFBB2266F9432259A6A55941622F5CDDC3797E382EB0A
                                                                                                                      SHA-512:8B4061176663F7AC01B3969D25F680B5870A8EAD864CFAD897F18E75409CE721E6CC367A88EBABAF72E77D4542EE1894F2A6EE47A43FB3D4C650CFA18DFD3D71
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp855, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp857.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.364496856690505
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CaHVBUlJvRj7SOVbusZhAMiZyi77qZpu6uUV5Dw5LeBCVHjzA:jMlBVnrAMiwMmyUVFw5SYdI
                                                                                                                      MD5:BA52A031DE1B1A6ED1C41BED8946750C
                                                                                                                      SHA1:BD54C0E2F62FD36675892A61FD8B340A56845D20
                                                                                                                      SHA-256:B6CD5C6F2B54D89142679D599ED0A5DEE6955A3B3F6B6673E46AFE7A5A303CDC
                                                                                                                      SHA-512:5F915AABE39F31CE9337B4B9B0239DF8ADA898D2D9F111DD09D97689DB89CF45B093AC187FC28484CFB213D14B0D8F58C5668D0A59726282D6F52D5D24697816
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp857, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp860.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.506813480871637
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CMHVBUlJvRj7SOVbusZhAMiZyi77qij4Axlt49Y18wDyV8mK:VMlBVnrAMiwMm/g+9Y1LmK
                                                                                                                      MD5:C416471B57FB894DC45D30C31B4BD2E2
                                                                                                                      SHA1:BA378F8122280992AE51245A06814D8155564220
                                                                                                                      SHA-256:804EFA345C5BBBAD2449C318A7A3F5B31F4234712AAD23DC49B3FB5AA33B7A57
                                                                                                                      SHA-512:E7CDE706CFE573525C2DE319AD5783AE9D97C4F6D28B14A77A729F281540B0DAFAD4C14879EF76473BFDEBC38499C65CA228470983F2D1BC31938A91A2486522
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp860, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp861.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.5174672833207183
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:ClHVBUlJvRj7SOVbusZhAMiZyi77qZpORVPnA2Gm18wDyV8mK:8MlBVnrAMiwMmiVPAA1LmK
                                                                                                                      MD5:4997979FD1692063E2B9AA9870E0BE4C
                                                                                                                      SHA1:919012354B99BBEF4C85517E89A2C9CD340FCE49
                                                                                                                      SHA-256:4B7E76AEB75289FACA76434EA6E9874E9504AD2BC3D8D47550EADBCC8294857E
                                                                                                                      SHA-512:C122A1AE2DE79CB97E5989535B7478A76D905CDE60B01F80F5B84EDB9DF08BE6829E1811AF19608971DA048B8DA24F40DE0217A8054AC612EC2D8B3560500FBE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp861, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp862.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.5573268031592717
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CdMHVBUlJvRj7SOVbusZhAMiZyi77q36AqE18wDyV8mK:iMMlBVnrAMiwMmq3E1LmK
                                                                                                                      MD5:9B4D1B95B20BD67555517DCC3007B22A
                                                                                                                      SHA1:2C0D6121DB49CDAB6FBAA81398BE2E44BE4E1110
                                                                                                                      SHA-256:6C15CB256B1C22170292589C6F589E64E164EB36EC7E84F0BD48149BABB7C5FC
                                                                                                                      SHA-512:34C3E401364D579E8AC7A4E1F1F7A29A84C62E1D5146D7664832639EA3997227DC4BAF1B64DC605E6574D680E61B55D0C69C329E35B1BEC41501FC68C5B634B7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp862, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp863.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.518080906819747
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CXHVBUlJvRj7SOVbusZhAMiZyi77qwGuXVFq5EC18wDyV8mK:eMlBVnrAMiwMmw3VFu1LmK
                                                                                                                      MD5:C93CCDF65F7F349F22855745660F02AE
                                                                                                                      SHA1:604888B1FB3C57DF47277CDD1153597BA89E8C36
                                                                                                                      SHA-256:232D6FE34D7151920232EAAE9C515F36400AB64136DCC5B802D6245AC6F5D56B
                                                                                                                      SHA-512:D5B65AE7353F694A37AF29177BF1A95477918FC5A002C2FE199624BD5B391698807BAECF54225BC40F62B3CA7912C7066A4AAF01B9E3E399133831CAA342BF4F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp863, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp864.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.72017408907567
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CwHVBUlJvRj7YOVbusZhAMiZyi77qcHj92OibcDQAyUjSG:5MlrVnrAMiwMmSsNcDQvcSG
                                                                                                                      MD5:146E0D1779D50E070E0EF875E8374DF8
                                                                                                                      SHA1:B51E5598712598BC387DD79AE80BD879F139140D
                                                                                                                      SHA-256:81BEBFD9A61E9F17495763B68D57742FAB2A1A43871015699A2C8E5FDED4EC19
                                                                                                                      SHA-512:1F0DAD8E77712C5A018894332BE72FF5C546C92F481421CCB8553AD6F1E9A18617765C8CEE4187265CCCB1AB073E221289D34C9AB1F0501231D52C81FC1C932B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp864, single-byte..S..003F 0 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..00200021002200230024066A0026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..00B000B72219221A259225002502253C2524252C251C25342510250C25142518..03B2221E03C600B100BD00BC224800AB00BBFEF7FEF8009B009CFEFBFEFC009F..00A000ADFE8200A300A4FE8400000000FE8EFE8FFE95FE99060CFE9DFEA1FEA5..0660066106620663066406650666066706680669FED1061BFEB1FEB5FEB9061F..00A2FE80FE81FE83FE85FECAFE8BFE8DFE91FE93FE97FE9BFE9FFEA3FEA7FEA9..FEABFEADFEAFFEB3FEB7FEBBFEBFFEC1FEC5FECBFECF00A600AC00F700D7FEC9..0640FED3FED7FEDBFEDFFE

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp865.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.5193842128126676
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CsKHVBUlJvRj7SOVbusZhAMiZyi77qZpuHVBnAFj18wDyV8mK:gMlBVnrAMiwMm+VRAFj1LmK
                                                                                                                      MD5:150B2E00B3F84F8075F3653ED7A4C8E0
                                                                                                                      SHA1:7131DC656EFE1F2277B19DA72F0EEB46B4EC54A0
                                                                                                                      SHA-256:ADA1A52064EE93EBE6F8A5D101D01F8776038E12F21A5CA1C006EE833577C705
                                                                                                                      SHA-512:AC56EEB0220826BF8FF6CA52768DB63961AAC46095A2F3EEBA11B5973CC92AF52DFBBE9E85A0DD04CAB8998212FA2599EDD83BAAA7FB2D394E330FF2F7C015DB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp865, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp866.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.5038992968715266
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CCHVBUlJvRj7SOVbusZhAMiZyi77qb+SAJlz9aRme3cB18wDyVNZkR:bMlBVnrAMiwMm8YnsB1wZy
                                                                                                                      MD5:FC33B5F773E87696A69E8798446E9772
                                                                                                                      SHA1:4FC5589C1DD88BB8171758BC173A63B3A5687AE5
                                                                                                                      SHA-256:32A45DEBA933C7ED99141535087A4C99BA79802175E3F762ACA6EB941157F85A
                                                                                                                      SHA-512:332D2FEC532192F58F792441E61D675A8692C36BECF768D07F64B8C31561CC1A2DF402625A4719E758A9B59DE4228FFE9F94F067E7DC0D82F9DA2D6500E50304
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp866, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp869.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.5261138894265507
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CtHVBUlJvRj7SOVbusZhAMiZyi77qii+lh2o5+hdVMQFhWgCDrKE:EMlBVnrAMiwMmXY2o5+hdVMQFhWf3f
                                                                                                                      MD5:4A2C66AA630D4AE2BF1E7546DCE2DAE5
                                                                                                                      SHA1:FABB672957D21CA2B4E0EACA5FCE6093BAACF77A
                                                                                                                      SHA-256:AFE6ED6EB5D07C45B6B928A48BC5EF57EFCF61602D36FF9FBDE4A8EA3FA6DF75
                                                                                                                      SHA-512:A548002EB7AF8735DBBBCC9883B44B326F261C02A3C7CE65C373755DD92212A66740112EAE0FC556CAD5B86911709C6DF12167DC5B6AD1E01C6F1EB5AB16DB37
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp869, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp874.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1110
                                                                                                                      Entropy (8bit):3.33737382140564
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CSyHVBUlJvRj7SOVbusZhAMiZyi77qVQEHmEU4AyqU+TWwdd:CMlBVnrAMiwMmWr4AyqUSd
                                                                                                                      MD5:FC8C876B4738236FC71A1AF96E4566D0
                                                                                                                      SHA1:DDFDC3F62D99A6BD705CF0719B50F66449C8808A
                                                                                                                      SHA-256:4F05F31CA026BBFEEEE49ED86504CB060784137A9CFAE0E5954D276E837AB5DE
                                                                                                                      SHA-512:5BF58A810E029840825FFF3318E90415E6F2B7E46032FD428B4971923D41A64C127A6F438E4894E80EC9604CD34F1D47B4F9A02ABAB3E7D6351611811DC1F2B9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp874, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp932.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):49008
                                                                                                                      Entropy (8bit):3.5144574650895364
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:R/RPrUHiJrKWkyY/W2wHiwWnwWOORY+gutSY83+JRS:RVUidzJCurDGSYvW
                                                                                                                      MD5:EF4508C84A025095B183E6BAD67B1ECD
                                                                                                                      SHA1:D12D5381D50D578AA8687671DC542C462A7F490D
                                                                                                                      SHA-256:6D1B512110BEAF2CD1296AC878F51D567848AB4A1CED4F18C72806BB136B3D23
                                                                                                                      SHA-512:E695E7E6F4A11D5E8D62982E26B69B87DB2F1F3D6B6DCCD5F1DF51879F5C4533265CBD7B785E1F2652D8CA3FC913D4F862E7575F67C636314A6E6956FD96E023
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp932, multi-byte..M..003F 0 46..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..0080000000000000000000850086000000000000000000000000000000000000..0000000000000000000000000000000000000000000000000000000000000000..0000FF61FF62FF63FF64FF65FF66FF67FF68FF69FF6AFF6BFF6CFF6DFF6EFF6F..FF70FF71FF72FF73FF74FF75FF76FF77FF78FF79FF7AFF7BFF7CFF7DFF7EFF7F..FF80FF81FF82FF83FF84FF85FF86FF87FF88FF89FF8AFF8BFF8CFF8DFF8EFF8F..FF90FF91FF92FF93FF94FF95FF96FF97FF98FF99FF9AFF9BFF9CFF9DFF9EFF9F..0000000000000000000000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp936.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):134671
                                                                                                                      Entropy (8bit):3.5217328918779645
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:1536:+CwDua7D90Jz1aDJmnMfEGniOQdH6prJs3inqlW6/t9Qwf+zCt5:j1WVRpe3rpt9hf+Gt5
                                                                                                                      MD5:CF9CFD6329A4FB6C402052B9417DAC3A
                                                                                                                      SHA1:75CE13FE1E5898D47B67F951C0C228851F1CC04D
                                                                                                                      SHA-256:B6EC2BE0504CA62B9D1B6857F6BAA13FFAC5A567D4432F4EAB98ADC830F5D9C3
                                                                                                                      SHA-512:7E19607EEA5342ECFE92D56DAAE82827DE147AE5AFDA8E9D67FD0970F528902CDE20A8A07CF2F341B926E59BB4FF792872976F1C7C5CD351959A71A8B6A1924A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp936, multi-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp949.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):132551
                                                                                                                      Entropy (8bit):3.100976362851161
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:1536:2UO8ecy5KnSMsDlOmNpkQ4oQHnTApv+ngLbiyEY:2U/etc/sBRZp//r
                                                                                                                      MD5:03E19A4DE3490A7DC50D04EC1F558835
                                                                                                                      SHA1:9DFECAE08C98109EAA358F5920AED647888F722B
                                                                                                                      SHA-256:477F8B79B67F4A22C963EE65B9B387DBD8E4B8F62D800B0A51D2276580C6ADBB
                                                                                                                      SHA-512:7D6AD30AF75A3AA6332A860C6ABF87BF725EB6B4AF3B37699043A10EF3235471C63D0ECB4D437D5AD9438DF5DA646EB55117A9BB8B55EF6868F71E49035C18B7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp949, multi-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\cp950.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):93330
                                                                                                                      Entropy (8bit):3.319807723045599
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:aAHU3LIkZlmXrd/uQ0ao98ggKSTEvZPHb6qRL5NpiadDp0ZBFR6YR/fW:aVduBGf9PgFMT6q95GDRBfW
                                                                                                                      MD5:1D84B025DAB127F2073947D764D307B6
                                                                                                                      SHA1:4E3D3CBD96D084836F1FE6F2AA497E3FAA463B9B
                                                                                                                      SHA-256:F80E05533D1A1494C32F9412E9AD2D9C11FAF9AE0668A6F9D1FA5CEEDC6870E2
                                                                                                                      SHA-512:188D649F9717F20524AFF47F85C3B23AEC3E7825BF54975285D06C17587D581DC24A3F6A7CAB1703DE7AD5521FE2FE2572DE627A81E6A48049A47BB219ED4AF8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: cp950, multi-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\dingbats.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1113
                                                                                                                      Entropy (8bit):3.7780987266961663
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:vJMHkUlJvRjmf9RCsUBOdXsCbbNviANpk3m1XFAoE4xSF5HrBPkdn:vKvlA9RCs6CXrViAN51XFA9eSvdPKn
                                                                                                                      MD5:90FE0C57BBC6C2D8A3324DEB7FD45F3D
                                                                                                                      SHA1:06B95BE43E4C859A0F1B01384EDD26500C6C1F9E
                                                                                                                      SHA-256:EB9B262E4D179268E6F017C0D4EF0E7034E31A5B4893595D150640CA1F6A1C45
                                                                                                                      SHA-512:6A5E67D9F3EC6046C42793E1437B8A6E50EBD72D8EC67FEFEB6DAD6FAB6A5B5C74F939363587D5A6529E217AF54FB8A9CF0F768E114DD931C57887451CACE56E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: dingbats, single-byte..S..003F 1 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..00202701270227032704260E2706270727082709261B261E270C270D270E270F..2710271127122713271427152716271727182719271A271B271C271D271E271F..2720272127222723272427252726272726052729272A272B272C272D272E272F..2730273127322733273427352736273727382739273A273B273C273D273E273F..2740274127422743274427452746274727482749274A274B25CF274D25A0274F..27502751275225B225BC25C6275625D727582759275A275B275C275D275E007F..0080008100820083008400850086008700880089008A008B008C008D008E008F..0090009100920093009400950096009700980099009A009B009C009D009E009F..0000276127622763276427652766276726632666266526602460246124622463..2464246524662467246824692776277727782779277A277B277C277D277E277F..2780278127822783278427852786278727882789278A278B278C278D278E278F..2790279127922793279421922194219527982799279A279B279C279D279E279F..27A027A127A227A327A

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\ebcdic.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1073
                                                                                                                      Entropy (8bit):3.0039861897954805
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:XXBcIhJZDgEoQkNCGz0Jyh9lZk3Vmd2QhZLXPiALV3d:dTcNCJEhfZk3Vzox/iqVN
                                                                                                                      MD5:F7B3771D43BDE6AFF897683BED2FE6AD
                                                                                                                      SHA1:E70C2C0902413536CB6163752D70F3AE4AF6A967
                                                                                                                      SHA-256:165BE658AB7D61FFC3DF1E2F1438C2F9FCEE6808A756316302157F44E6D3ACD7
                                                                                                                      SHA-512:F87DC718EB2DD95237B144FDA090BB636121B9479E492AC94E4F7EBDD88171F070B9E9F6165BDA7B7E2BA2A3E6188B1108D8F91AA5F142CCCFDAD317628DD941
                                                                                                                      Malicious:false
                                                                                                                      Preview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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\euc-cn.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):86971
                                                                                                                      Entropy (8bit):2.3925661740847697
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:UHivP+bFFScXEBFhHeUrUFESCeYjN7GC0nYX:I7FFX2nHeUr8ESCDlX
                                                                                                                      MD5:C5AA0D11439E0F7682DAE39445F5DAB4
                                                                                                                      SHA1:73A6D55B894E89A7D4CB1CD3CCFF82665C303D5C
                                                                                                                      SHA-256:1700AF47DC012A48CEC89CF1DFAE6D1D0D2F40ED731EFF6CA55296A055A11C00
                                                                                                                      SHA-512:EEE6058BD214C59BCC11E6DE7265DA2721C119CC9261CFD755A98E270FF74D2D73E3E711AA01A0E3414C46D82E291EF0DF2AD6C65CA477C888426D5A1D2A3BC5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: euc-cn, multi-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\euc-jp.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):83890
                                                                                                                      Entropy (8bit):2.350315390677456
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:2GhX8nuQ635vlHptHzh0abNQPQA0OMS2HhFV3:2GikvRpMuNQ4P73
                                                                                                                      MD5:F2DE0AE66A4E5DD51CC64B08D3709AAB
                                                                                                                      SHA1:97558A51A6DD6C56FC7A42A4204141A5639021FD
                                                                                                                      SHA-256:A3C916BA16BCAC9FAA5A1CCC62ACA61452D581CD8BA3EE07EC39122C697274C9
                                                                                                                      SHA-512:0EAA90100527FF150D2653D7BB57647D69E592BE53B714DDD867114CFCC71E3A76882772F4FAECE040DF09FA8971D1C22DECC497E589B4CA827A6890497A48D9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: euc-jp, multi-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\euc-kr.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):95451
                                                                                                                      Entropy (8bit):2.4080588863614136
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:4/vO7UlClqAd8XfpUqv+mCoKRuLbtMjnIxz0DY:4nO4N9fpv+ngLbiyEY
                                                                                                                      MD5:103843B3A57168BD574F6CACC550D439
                                                                                                                      SHA1:982652EA2B0DCFBB55970E019A4EDFBFCFAF9C24
                                                                                                                      SHA-256:5448643398685456A11CBB93AF2321F70B8659E2FFF3CCC534B4D53BD2F38C89
                                                                                                                      SHA-512:27A8DE6F97DB4A96E5D0132692A32A99DAB8A6C98973A0C4E50A219F2D2F364E63D657E5E8478B2706CA33C45C376F55B5BFCC9459E06AEA88BFCD4F0E32525C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: euc-kr, multi-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\gb12345.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):88033
                                                                                                                      Entropy (8bit):2.3790651802316996
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:o4Is/C+0IwpRK1CkinIKUyNiNBzxOC4T/:LIsR0/RKckiIgNiDtOxT
                                                                                                                      MD5:1A8E55DEA98B6D5EAC731ED233D3AD7C
                                                                                                                      SHA1:1335FC0FC2AAE7E7F5EC42AC17A4168368B4A64D
                                                                                                                      SHA-256:B4894AEDD2D5B5AE54B6D2840F7C89A88E9308EFD288F179E65936E172EF4B0D
                                                                                                                      SHA-512:9DDCE366BA1196EB9FB913ACFDE8516BC9BB8D51894866D2E7E8CB313DC4D6C6D33C5A9E78142E83594DC423D10DA6F8DE211E69844B939198BC7DB9AED808F0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: gb12345, double-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\gb1988.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.270324851474969
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:qrmHVBUlJvRj76OVbusZhAMiZyi77qN8VmKfkiJt0RMFS:qSMlZVnrAMiwMmNPYPFS
                                                                                                                      MD5:D06664ACAA478BDEB42B63941109A4E3
                                                                                                                      SHA1:4A6196FCC1BDE988C1A23EAA69745A9979F1AEFF
                                                                                                                      SHA-256:ACD50951F81566C8D823670F9957B2479102EB5AE4CF558453E1D8436A9E31FF
                                                                                                                      SHA-512:CB51A36B851FFDB5C6F9B9D0333EEA6A14CEF3796E0A60530198C16999D64E638047E873333630360299C9126F79CEDDA2D9F169028CED1FC04B1D3C55FFFC5B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: gb1988, single-byte..S..003F 0 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..002000210022002300A500250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D203E007F..0080008100820083008400850086008700880089008A008B008C008D008E008F..0090009100920093009400950096009700980099009A009B009C009D009E009F..0000FF61FF62FF63FF64FF65FF66FF67FF68FF69FF6AFF6BFF6CFF6DFF6EFF6F..FF70FF71FF72FF73FF74FF75FF76FF77FF78FF79FF7AFF7BFF7CFF7DFF7EFF7F..FF80FF81FF82FF83FF84FF85FF86FF87FF88FF89FF8AFF8BFF8CFF8DFF8EFF8F..FF90FF91FF92FF93FF94FF95FF96FF97FF98FF99FF9AFF9BFF9CFF9DFF9EFF9F..000000000000000000000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\gb2312-raw.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):85912
                                                                                                                      Entropy (8bit):2.3945751552930936
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:D47/S+i8vdx3Tz+hpHcBrQqKtrebjMIGCx8jE:0c873T6DHcBrbKtrVlE
                                                                                                                      MD5:9357E05C74D6A124825F46A42B280C14
                                                                                                                      SHA1:E5106ABE12D991AFE514F41E3B9E239202A4ADFE
                                                                                                                      SHA-256:C445E4C9F676AE997D2DDA2BBC107B746F3547D85F39479951C56F46275EE355
                                                                                                                      SHA-512:B2187D70A92FB38572BA46F3C3443233BEED1A4ABBFBA1B860F4BBAE6B3D8C16B8C9F52A20DAA12B2B8B40972E52F816860427B743530177E4CF0D8BA34EF381
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: gb2312, double-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\gb2312.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):86971
                                                                                                                      Entropy (8bit):2.3925661740847697
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:UHivP+bFFScXEBFhHeUrUFESCeYjN7GC0nYX:I7FFX2nHeUr8ESCDlX
                                                                                                                      MD5:C5AA0D11439E0F7682DAE39445F5DAB4
                                                                                                                      SHA1:73A6D55B894E89A7D4CB1CD3CCFF82665C303D5C
                                                                                                                      SHA-256:1700AF47DC012A48CEC89CF1DFAE6D1D0D2F40ED731EFF6CA55296A055A11C00
                                                                                                                      SHA-512:EEE6058BD214C59BCC11E6DE7265DA2721C119CC9261CFD755A98E270FF74D2D73E3E711AA01A0E3414C46D82E291EF0DF2AD6C65CA477C888426D5A1D2A3BC5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: euc-cn, multi-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso2022-jp.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):204
                                                                                                                      Entropy (8bit):4.949409835601965
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SOd5MNXVSVLqRIBXS4ovLE9sDXMVyXK9ow1Deq9Ts5dRPMSXcRA0kcR4X9cL+TXI:SVNFS0oyisLMsXK9okTw/BDSVKNw
                                                                                                                      MD5:D3AC33390D31705FA4486D0B455247DF
                                                                                                                      SHA1:2EE8613DC04A6FA84AB38FD5F3A2AA3FE330625B
                                                                                                                      SHA-256:98074C85650A420A095ADA9138DA3A8A0AA4027BE47EA1E97A596F319EB084E9
                                                                                                                      SHA-512:CB265B753C84968E2D1D6E706906DA9A7BB796D08F626290BCCA8F089771AFD176A9DC912773E8BA390D2AEC08592AD535C7D254E1DF92CF04848601481D4EFE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso2022-jp, escape-driven..E..name..iso2022-jp..init..{}..final..{}..ascii..\x1b(B..jis0201..\x1b(J..jis0208..\x1b$B..jis0208..\x1b$@..jis0212..\x1b$(D..gb2312..\x1b$A..ksc5601..\x1b$(C..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso2022-kr.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):122
                                                                                                                      Entropy (8bit):4.978693690727393
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SOd5MNXVTEXIBXS4ovLE9sDXNvdwUHEQwqc6XWxVUNOov:SVNFSoyisL/Zzc6mYNHv
                                                                                                                      MD5:057CB0AA9872AC3910184F67AC6621BC
                                                                                                                      SHA1:BBA47F9D76B6690C282724C3423BD94E2C320A04
                                                                                                                      SHA-256:234811FC8B0F8FF2B847D9CC3982F1699DF1D21A43C74DCE45BA855D22520007
                                                                                                                      SHA-512:019F187D2D16FB51BF627ACB7E67778857E56D4C160E0E5ACA6ABC05EC5FDB624CE2715CB9E0DAD73BFF9D697982BE0D539BC55BCCD368FC7C8EE0FFC04E9F61
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso2022-kr, escape-driven..E..name..iso2022-kr..init..\x1b$)C..final..{}..iso8859-1.\x0f..ksc5601..\x0e..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso2022.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):240
                                                                                                                      Entropy (8bit):4.95909788984399
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SVNFUXoyisLNcs9ozc6W4Twk0sRBDSVKN6tWIHRy:oUYcLNcTzczbwRYRy
                                                                                                                      MD5:BB186D4BE3FA67DD3E2DEE82DD8BD628
                                                                                                                      SHA1:93CE8627038780CFFF8C06E746DD5FB2B041115C
                                                                                                                      SHA-256:741B4C842557EED2952936204D0AE9C35FA3A0F02F826D94C50C46976291797C
                                                                                                                      SHA-512:4921E7AA3DB8E33609603FE129B97275DFF80CFB06648D2068FA7950246C67B9B530B74827638F69F4DFB8F55CDD4AA952EA72EAEB6ABB527D52F20C6B46FB51
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso2022, escape-driven..E..name..iso2022..init..{}..final..{}..iso8859-1.\x1b(B..jis0201..\x1b(J..gb1988..\x1b(T..jis0208..\x1b$B..jis0208..\x1b$@..jis0212..\x1b$(D..gb2312..\x1b$A..ksc5601..\x1b$(C..jis0208..\x1b&@\x1b$B..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-1.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1114
                                                                                                                      Entropy (8bit):3.236046263464657
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:iyHVBUlJvRj7SOVbusZhAMiZyi77qimmvGNNlkL+rSMH+tKv:iyMlBVnrAMiwMmTmokLz0
                                                                                                                      MD5:3538A970CD098BF5CE59005FE87B6626
                                                                                                                      SHA1:285A96CC40D7CCE104FB4B407C7F0C400AA8F9CB
                                                                                                                      SHA-256:A9CB4F4CA111608F882729BC5EB1C2F15530C515EF02DD2CA62F2D8DC5A210CF
                                                                                                                      SHA-512:A6A6F2D8B5C22E240D195D168A604887062508FF3340D24E13BFCBD6C2E687347F2CFE724FA2ED12F36915B55EE2CFD901EC3F08E2B0A2FFD3BC2A98BBD12A50
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-1, single-byte..S..003F 0 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..0080008100820083008400850086008700880089008A008B008C008D008E008F..0090009100920093009400950096009700980099009A009B009C009D009E009F..00A000A100A200A300A400A500A600A700A800A900AA00AB00AC00AD00AE00AF..00B000B100B200B300B400B500B600B700B800B900BA00BB00BC00BD00BE00BF..00C000C100C200C300C400C500C600C700C800C900CA00CB00CC00CD00CE00CF..00D000D100D200D300D400D500D600D700D800D900DA00DB00DC00DD00DE00DF..00E000E100E200E300

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-10.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1115
                                                                                                                      Entropy (8bit):3.319750415373386
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:jHVBUlJvRj7SOVbusZhAMiZyi77qimXG2yM6q7KytC:jMlBVnrAMiwMmTXG2gytC
                                                                                                                      MD5:CBDE40170FECD2496A9DA3CF770FAB7B
                                                                                                                      SHA1:3E1D74DF6AFEB6CDE8ECBDAC8F81F2F9C64150DE
                                                                                                                      SHA-256:48F4A239C25354F0E9F83A39F15D4632BB18A9C33E60C671C67307159917ECED
                                                                                                                      SHA-512:A26B56A4CFE29E5A0A0B3A55283A7767397693388E2DEEC342C69B6F718FAE2407EB8D5ADE538FAE6947CBB8B052943C3A52F2D046ABAC7A3DAA86D730DC293F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-10, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-11.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1115
                                                                                                                      Entropy (8bit):3.3206399689840476
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:6HVBUlJvRj7SOVbusZhAMiZyi77qimwHmEU4AyqU+TWwdd:6MlBVnrAMiwMmTf4AyqUSd
                                                                                                                      MD5:E2A0BCB83BFC3F435CDCFC20D5CF2E0C
                                                                                                                      SHA1:CFD18B5B5DB4EE46E63D912B8FD66D513C4C8D39
                                                                                                                      SHA-256:21E769C5A66E4D12D6E7DB24022E92AF1EC0D0331FE3C8C605654F239C0F3640
                                                                                                                      SHA-512:C86F9180F2F4A177F1EA10E26B0903ABEAFDDE0317C332A48F8D1BB586DAC91C68800E2E4FA2CD739C435419B106CBA4BEFC049F2BCD720E9FC2C0AE8436CFAC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-11, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-13.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1115
                                                                                                                      Entropy (8bit):3.338879965076632
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:olHVBUlJvRj7SOVbusZhAMiZyi77qim2w4kBUioGnd2:olMlBVnrAMiwMmT/WNI2
                                                                                                                      MD5:21CEBB723D47B1450A7FB21A82470B97
                                                                                                                      SHA1:A40FD3AFE1ECE89E3F682D527D281BC563DB3892
                                                                                                                      SHA-256:3271D39D7B4DCD841E8E5D5153D1B8837718B88FEFEC73DC37D314816EEFE5E5
                                                                                                                      SHA-512:3A0E033A4D93C679215F672C6C4FE425D63E1DE157AA671E7400639165EC3EB498E4EEB030D6FB8FF8BE2FD8C986D341036A8CED9FA094D092CF2822D5DC065B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-13, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-14.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1115
                                                                                                                      Entropy (8bit):3.3670559016263915
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:vHVBUlJvRj7SOVbusZhAMiZyi77qimhw6COlk1fKMH+tiH:vMlBVnrAMiwMmT/tlkQz0
                                                                                                                      MD5:FDAA88946DE4EB4E6D37F2B6AFCF6CAF
                                                                                                                      SHA1:56FC4773941E7457EA04EDA92C883642DE45D100
                                                                                                                      SHA-256:F0A5675027FB1CA34B4E4128D24C2968CD275890569A32A86AFA4994CE4983E0
                                                                                                                      SHA-512:92658A6FEB42A41B3CFFC377C4A9A3F6780A79FC596D3FEDBA6D3B3D75A9F40E859A2CE8DC579A278BAEEDEEFA2408E2B7853D99D5C2D14AACF63C521FE2BB86
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-14, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-15.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1115
                                                                                                                      Entropy (8bit):3.260398494526282
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:mHVBUlJvRj7SOVbusZhAMiZyi77qimmRf4kL+rSMH+tKv:mMlBVnrAMiwMmTmCkLz0
                                                                                                                      MD5:D779D5E2A0083C616A226B2D82ABF0EB
                                                                                                                      SHA1:D1657DB5E2989EBA80BAB98A1E1217CFFFBB19DB
                                                                                                                      SHA-256:C74E8E23A0FF0D5DEA7C318CA20DC817DA4E57B0DD61B3361FC0D5098A9316FE
                                                                                                                      SHA-512:26E62BE8AE793ED3B725BF0D1BABF4D6ED63A6F3772ABD48955FC4394BDE5A47614D1FF89A21A828676BF1302F3C9361B557B0FBF0DF8561FB7E66542FE94CDC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-15, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-16.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1115
                                                                                                                      Entropy (8bit):3.3065938185320918
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:dHVBUlJvRj7SOVbusZhAMiZyi77qim0SmmPkYTtyL:dMlBVnrAMiwMmTttPkYpyL
                                                                                                                      MD5:74FDEDDAF670023DA7751FB321E345A0
                                                                                                                      SHA1:0677FED67C1333A9A74D50642E5214701A57E2AF
                                                                                                                      SHA-256:640D977EC1D22B555C5075798DA009E3523E8F55F29BE22A3050CD1B4EF7B80E
                                                                                                                      SHA-512:AC02FD95159A856A9DDEF4E6A8216B958DC07311B553FF39403DC5B77E1AFF2A2C4C03F5F26A2BB7AD5DB6800BEE03E895554556DBBFBE89426286796ADE55AC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-16, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-2.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1114
                                                                                                                      Entropy (8bit):3.340505173539446
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:UHVBUlJvRj7SOVbusZhAMiZyi77qim/ssm5VO6ys2K:UMlBVnrAMiwMmT/ssYTys2K
                                                                                                                      MD5:9B87850646FFE79F3C8001CBCB5BB3A1
                                                                                                                      SHA1:8F97576F3FB3B5DBEF71DC2C9314AB5E530974D6
                                                                                                                      SHA-256:76949B03F57041B07F41902BD7505AB3594D79AA8F7BDEED5F0481004B10CBC3
                                                                                                                      SHA-512:101A28AF0799E7E0A5723E5DD76D5EF0FEEF584AC479A88F499CB3B7D2AA93767D72F8E51C76F7547F08FF8DD3CBBA7FF444BD07F99A92755526E75C596109EF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-2, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-3.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1114
                                                                                                                      Entropy (8bit):3.2507537230559977
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:tHVBUlJvRj7SOVbusZhAMiZyi77qimw2g0kgTJMkFtoD:tMlBVnrAMiwMmTo0kgTJDoD
                                                                                                                      MD5:CBD0B9CDCD9BC3D5F2429A760CF98D2F
                                                                                                                      SHA1:6DEF0343E0357E0671002A5D2F0BFC2E00C8BCF9
                                                                                                                      SHA-256:1F51E7BDA64D466C16FEE9A120BBE3353A10CEB9DAB119FFA326779BA78D8C5D
                                                                                                                      SHA-512:88DB6D23B53F4A78133C794ED42FA3F29A4ABAD35DE4B022040FA187AA59B00664CC13F47AFF4507D72F4CB2166F026144213EE760AB0FD67CDD2FA5906F434A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-3, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-4.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1114
                                                                                                                      Entropy (8bit):3.3413832766873073
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:KHVBUlJvRj7SOVbusZhAMiZyi77qimX4AsD/njR7Ky8hA:KMlBVnrAMiwMmTXBs3EyuA
                                                                                                                      MD5:8B620EDECAC2DF15A024C2CE15FB64A5
                                                                                                                      SHA1:65C5EE5D08964E37393E6A78ABA0DB16D51240E2
                                                                                                                      SHA-256:66B3CF994F0B5E0103D13E812958320AFB555C91E3F81B579D4CBF231E6A0805
                                                                                                                      SHA-512:93391325405D3AEA0A913F5EA8EA0391920D10F234C26AB1DA70992702889A3AF7B85E11A1FCA554690942B238CE313DD460798E59C5B1F4069036E7B0F24F44
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-4, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-5.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1114
                                                                                                                      Entropy (8bit):3.342721205983665
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:zHVBUlJvRj7SOVbusZhAMiZyi77qimq5+SAJlz9aRme3cJbx:zMlBVnrAMiwMmTqeYnsJbx
                                                                                                                      MD5:6FBEFDC3DEC612B7B2CC903D8C53F45B
                                                                                                                      SHA1:14EC3C166DC411149C32C262DBE8E327F6186669
                                                                                                                      SHA-256:3130BF26DA0C840C1E02203A90C3B1C38966FB203130E2FBB3DD7CB3865A3539
                                                                                                                      SHA-512:F3F15AD8B6C9D9B4C9C994FE3235B4463E59BE7DCE79CF3F7AA77905D6F4DC2C4AABB79B440767DB13D357B13F09EA34983FCA7BC92D0AFA15FB6CBEDDD04E38
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-5, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-6.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1114
                                                                                                                      Entropy (8bit):2.992219341429816
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:YHVBUlJvRj7SOVbusZhAMiZyi77qimEZjyG/KE:YMlBVnrAMiwMmTEs6KE
                                                                                                                      MD5:52F025D943A45EE840D9C3DFD06E4D79
                                                                                                                      SHA1:571EA14B49FA6150BFD2ABA79E52799955D9FA10
                                                                                                                      SHA-256:CB71909BF01A3A7A4C7396359DA06D206B58A42AD68192CE37169D6640D46E13
                                                                                                                      SHA-512:77FF9DC785A63CA59A7D58BB25C7D2C16F364E525F9B939177385EF80F7DE37734C8774F1BC829CF0270FD66257A4D31689654C8037DB0A86A0291FFDE637B90
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-6, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-7.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1114
                                                                                                                      Entropy (8bit):3.393893260854861
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:TMyHVBUlJvRj7SOVbusZhAMiZyi77qim2OBHK9QQSqiWeIDDdn:TlMlBVnrAMiwMmT1hKyQSqiWeIVn
                                                                                                                      MD5:4BFB0A35D971A9D4C5EA8D8099E93C37
                                                                                                                      SHA1:8FED2CBB1343E5B4442748242B5F89A76110592D
                                                                                                                      SHA-256:76F6BC85FC9CB89BC3F94D36275AB23C740BA17FD36EC8907479DA3A885415EA
                                                                                                                      SHA-512:C9CE1E9EA57A1DEF62BBC60A115C06325C6EE8F92021695459E1ADAF1193A559BC5F0229191BFC2E344296DC137583ED4A9A61A65890F99F4CF97B3864C7AF0F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-7, single-byte..S..003F 0 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..0080008100820083008400850086008700880089008A008B008C008D008E008F..0090009100920093009400950096009700980099009A009B009C009D009E009F..00A02018201900A320AC20AF00A600A700A800A9037A00AB00AC00AD00002015..00B000B100B200B303840385038600B703880389038A00BB038C00BD038E038F..0390039103920393039403950396039703980399039A039B039C039D039E039F..03A003A1000003A303A403A503A603A703A803A903AA03AB03AC03AD03AE03AF..03B003B103B203B303

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-8.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1114
                                                                                                                      Entropy (8bit):3.0494739426493567
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:uHVBUlJvRj7SOVbusZhAMiZyi77qimieGlnvs26Kcv:uMlBVnrAMiwMmTirv87
                                                                                                                      MD5:5F69EAF54E7A1E8AC81C9E734DBE90D8
                                                                                                                      SHA1:BA509C88A4FC03922EF5CDC887FAA7B594A9BC5A
                                                                                                                      SHA-256:865E3665743B5FABA3E1AD6AA55515A666BD05DA6266879D9B66C98905DAFF3C
                                                                                                                      SHA-512:D9924FBE59CB571AF721CA602DBE58CAD0D9310610EDF544F8FC0FBF3D1CE4E99597D0198E4E7C802107012786346FE4C1B9C6C3A76D5F60B9A83981B0EDA24D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-8, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\iso8859-9.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1114
                                                                                                                      Entropy (8bit):3.2591070910715714
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:XHVBUlJvRj7SOVbusZhAMiZyi77qimmvGNNlkBSMH+tA/b:XMlBVnrAMiwMmTmokgzAD
                                                                                                                      MD5:0B99E605E73B7D8DEFD8D643F5729748
                                                                                                                      SHA1:F30E7CCBCD9C539126E8D6CA0886E4B2BD54E05D
                                                                                                                      SHA-256:CF51E867DDE2F19553D98FEEC45A075C4B4F480FB1EDADB3D8DAD1EBEA9299F3
                                                                                                                      SHA-512:DA0487CD7F2143195E80697C17FFDB61AFD464C888DDF84813B2B5D1BAB24D96466DA7A7F77C8E4A9D0D53F34D72928923380AFC1B92A96C0A3BFF46006A4E19
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: iso8859-9, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\jis0201.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1112
                                                                                                                      Entropy (8bit):3.2708615484795676
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:zBHVBUlJvRj7SOVbusZhAMiZyi77qN8VmKfkiJt0RMFS:zBMlBVnrAMiwMmNPYPFS
                                                                                                                      MD5:4E21F24F8D9CC5DF16B29CACD997AC69
                                                                                                                      SHA1:064E723EFB82EF1C303E5267496304288821E404
                                                                                                                      SHA-256:61B14A7C312366F79BB45F02C6B7EE362E6F51CBAD5E479E563C7F7E785DB654
                                                                                                                      SHA-512:AF8FAEB47EFB51F2537139F7C4254ABED119E477FD2B5E83B90B7A903B43C4E02DDF43A7DDB044A0A9601E9F9ADE91B02EE7C0EC87FF5DDCF9951B9601A90435
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: jis0201, single-byte..S..003F 0 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D203E007F..0080008100820083008400850086008700880089008A008B008C008D008E008F..0090009100920093009400950096009700980099009A009B009C009D009E009F..0000FF61FF62FF63FF64FF65FF66FF67FF68FF69FF6AFF6BFF6CFF6DFF6EFF6F..FF70FF71FF72FF73FF74FF75FF76FF77FF78FF79FF7AFF7BFF7CFF7DFF7EFF7F..FF80FF81FF82FF83FF84FF85FF86FF87FF88FF89FF8AFF8BFF8CFF8DFF8EFF8F..FF90FF91FF92FF93FF94FF95FF96FF97FF98FF99FF9AFF9BFF9CFF9DFF9EFF9F..00000000000000000000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\jis0208.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):81772
                                                                                                                      Entropy (8bit):2.3571626869060776
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:AigXM6CwL/9pV7Hl6+Yko9gZxErA3/MS/8xqg8:AZ/tp1Hl2KZxUfr8
                                                                                                                      MD5:F0661E22C7455994AA1F6EC1EDA401B4
                                                                                                                      SHA1:928B2AC46A9FDE61A81F56BE225E6138B40C22E5
                                                                                                                      SHA-256:F6B1C6AC5F5FC4E990A7A1AAC16A406012040936431BEFE7D2B6CD1DA9E422C4
                                                                                                                      SHA-512:917CC58678A9E9F5CBE860D30828846ABA4EA8CDFAB7DD1AE6A66C47ECBB85CF67DD97BC3E6F95341DD30F4E757B2CEA571708D5B4CED18A29F19904C3138AE0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: jis0208, double-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\jis0212.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):72133
                                                                                                                      Entropy (8bit):2.3455261548208055
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:9F/D7CH2puD5CdzU3nAkP5dHn7s391fmOarFaVQ:H/D7CHbozU3nAk3H7sXm3FgQ
                                                                                                                      MD5:07CE2C135BE17DBAFA558AA5949A53DB
                                                                                                                      SHA1:5D9DBEFCCB44E76C1A4E61360C6FCED8DCC8EF4D
                                                                                                                      SHA-256:785CFC5F5D9CB06DB8061730AB0016A0F70D0B59F6787D2A3CBB8D5779C99706
                                                                                                                      SHA-512:E954D7198D58ACEDEB4C8E5F466107767C3DA43763A5F6CDDFCF567226F9B22B4C2DE27564F28CD125D7F1BA7CB9C6DE6DEC4065EC2676572C793BE458FDDD9D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: jis0212, double-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\koi8-r.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.531149521168141
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:KcJ5mHVBUlJvRj7SOVbusZhAMiZyi77qpSzIa9qVRS3YcEchJh3MAxSl:KmmMlBVnrAMiwMmAzIxVgBE6cAxQ
                                                                                                                      MD5:96F54CC639ACA8E466FB8058144C9350
                                                                                                                      SHA1:0B9530D6080F2BAACABD5AA0D48BFF316FCCEF64
                                                                                                                      SHA-256:0E43244BFC4F33FACB844B9E00270A1A4C24DC59B8A9B95104E2D788BB2F59FD
                                                                                                                      SHA-512:5B7859325E5E34C9D4558B1198795BB9C6A8EF783EB97193EA80BA76C38AFE9BDD1B526B77401DF5456B7A0E85E942191FFD4B4F2B9F0C8168A7093EE452802E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: koi8-r, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\koi8-u.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.5076564572101714
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:K+HVBUlJvRj7SOVbusZhAMiZyi77qpSzIaU3dmVRS3YcEchJh3MAxSl:K+MlBVnrAMiwMmAzI/EVgBE6cAxQ
                                                                                                                      MD5:4B755EF2288DFC4009759F8935479D68
                                                                                                                      SHA1:C3BDF0D9DF316DE8919DAA4329275C5AA81D61B4
                                                                                                                      SHA-256:ED04D5B977B8C8944D8760B713FF061292DA5634BCBB67CDFB1C3A6FF5378C81
                                                                                                                      SHA-512:3F1E1CC47327054FB9C54157ED10514230F10BFCD4BD9FDAFA02D7B238137DC7442CA2661B0739D8EEA3181E187D3B639A2C8118A0DE272C96000908121B6CFB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: koi8-u, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\ksc5601.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):94393
                                                                                                                      Entropy (8bit):2.4104200953565513
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:XbjO7Uw6uKdosXRxps9a+ut/BmZPwkpT9A0T03o:XfO4ZBRxpV+4wPwKloo
                                                                                                                      MD5:366C09E4A4CC10006E593F5B3F3461D7
                                                                                                                      SHA1:A0DABFBEEB66E26FB342844EA41772D7A1D19C24
                                                                                                                      SHA-256:9B27FE7E7054F36E279993F19E52E18AC03360D117AE80C42B4E984A97C590AA
                                                                                                                      SHA-512:670F32D698C7992038E736D3AD40098D8589C0C5A1379E32A0F02A02FAF251B1312CAD131DDADC3F80B23A3821A91689F2E310309028BDDDF227D532EB505A20
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: ksc5601, double-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\macCentEuro.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1116
                                                                                                                      Entropy (8bit):3.4295694929963667
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:8jHVBUlJvRj7SOVbusZhAMiZyi77qHVPJSf2FcVDu1LEe4qPPMl2J89:8jMlBVnrAMiwMmHEmJ4IMgi9
                                                                                                                      MD5:10850BCFB943318284D6191494EBD7D5
                                                                                                                      SHA1:237D5DDF7969A422991F17021244D13A2BB0DE92
                                                                                                                      SHA-256:81ECA6840B87F2DEF9FCDD171A55C2D71A49386D88401CE927AE57D7DDD7AAAA
                                                                                                                      SHA-512:D797781C228B70D2D83DB8ABA08F840CE49846C9473CC89A2E316900D9E08A63142E68AD9ABBB2EF67BF9F1D392772FAB36CCC09632022A1437AE27C11F2284F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: macCentEuro, single-byte..S..003F 0 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..00C40100010100C9010400D600DC00E10105010C00E4010D0106010700E90179..017A010E00ED010F01120113011600F3011700F400F600F500FA011A011B00FC..202000B0011800A300A7202200B600DF00AE00A92122011900A822600123012E..012F012A22642265012B0136220222110142013B013C013D013E0139013A0145..0146014300AC221A01440147220600AB00BB202600A00148015000D50151014C..20132014201C201D2018201900F725CA014D0154015501582039203A01590156..01570160201A201E

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\macCroatian.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1116
                                                                                                                      Entropy (8bit):3.3992482002374516
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:8ULyHVBUlJvRj7SOVbusZhAMiZyi77qsTMdKxOZwwL+KR5D/jlJy6QWky:8ULyMlBVnrAMiwMmOsL+KR5DblE85
                                                                                                                      MD5:A60FBDE33D13C732095713D1AB6713AB
                                                                                                                      SHA1:4B0EB443F2D0E4B8DB7D0435F9311E5F9A625123
                                                                                                                      SHA-256:BBE6F5EBB5EAB08C91DF7D524FAF39B03AA8B9F84C67ABA0553A84EC56668CB9
                                                                                                                      SHA-512:3EEBA6BA3FCD875AFBD5DF41EDC21E872416A48D03343232904CC99CAF913045DAF7B1A1ACD0949EF794AD7B6C9AE8F93808423FFC4B67718E732B2FF5D9B6D7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: macCroatian, single-byte..S..003F 0 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..00C400C500C700C900D100D600DC00E100E000E200E400E300E500E700E900E8..00EA00EB00ED00EC00EE00EF00F100F300F200F400F600F500FA00F900FB00FC..202000B000A200A300A7202200B600DF00AE0160212200B400A82260017D00D8..221E00B122642265220600B522022211220F0161222B00AA00BA03A9017E00F8..00BF00A100AC221A01922248010600AB010C202600A000C000C300D501520153..01102014201C201D2018201900F725CAF8FF00A9204420AC2039203A00C600BB..201300B7201A201E

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\macCyrillic.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1116
                                                                                                                      Entropy (8bit):3.4178221849964903
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:8dHVBUlJvRj7SOVbusZhAMiZyi77qb+SAJlz9a4piS1yk+5yye3cJY:8dMlBVnrAMiwMm8Y6zUk+UVsJY
                                                                                                                      MD5:C390D66441AC61CCF0A685CA5EE0BC1C
                                                                                                                      SHA1:FCAE825B54400B9D736EF22A613E359E3F0FA6C2
                                                                                                                      SHA-256:76EFE571ADDA7AED467F146CB0BD3A2351F2A720508EA0642C419F5347789CAA
                                                                                                                      SHA-512:C891DB15E0F600965885DE6745EDD2A4E3A6A20CA30A9AAE89CBD8C429F8455C4AF7F2FC053FB3D730D8544AB6A6E78E769DB93DAD7B29868B746FA10373F021
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: macCyrillic, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\macDingbats.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1116
                                                                                                                      Entropy (8bit):3.870022681111701
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:87JMHkUlJvRjmf9RCsUBOdXsCbbNviANpkDP1XFAoE4xSF5HrBPkdn:87KvlA9RCs6CXrViANUP1XFA9eSvdPKn
                                                                                                                      MD5:DCE78527E3A7B7CB1DE9EE5FAF12AFC6
                                                                                                                      SHA1:20F4A3F4DB6B3422C04EBB6B21A568E4C173F9C1
                                                                                                                      SHA-256:062E31D48DC33160999074E49205E08C3655DFF91C2C87F254522E6EBCE2DD96
                                                                                                                      SHA-512:627F5FD2F12B341F2D7EE9032946FE057C4AC74D99687178CEA98B3E150307BB6AA2495B0FA46400760D467E2BF589BE31E998E25CE1D1E8465DA61F22047345
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: macDingbats, single-byte..S..003F 1 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..00202701270227032704260E2706270727082709261B261E270C270D270E270F..2710271127122713271427152716271727182719271A271B271C271D271E271F..2720272127222723272427252726272726052729272A272B272C272D272E272F..2730273127322733273427352736273727382739273A273B273C273D273E273F..2740274127422743274427452746274727482749274A274B25CF274D25A0274F..27502751275225B225BC25C6275625D727582759275A275B275C275D275E007F..F8D7F8D8F8D9F8DAF8DBF8DCF8DDF8DEF8DFF8E0F8E1F8E2F8E3F8E4008E008F..0090009100920093009400950096009700980099009A009B009C009D009E009F..0000276127622763276427652766276726632666266526602460246124622463..2464246524662467246824692776277727782779277A277B277C277D277E277F..2780278127822783278427852786278727882789278A278B278C278D278E278F..2790279127922793279421922194219527982799279A279B279C279D279E279F..27A027A127A227A3

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\macGreek.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1113
                                                                                                                      Entropy (8bit):3.4954458011071323
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:8dOHVBUlJvRj7SOVbusZhAMiZyi77qJlbaBMD2aSY5us36Ekp1ysOSU2imR:8kMlBVnrAMiwMm7aKPVusqx1ysOJjmR
                                                                                                                      MD5:0CC92F685A4132BE4B030006670D81CE
                                                                                                                      SHA1:13B1074A90055E9EA061A6206A9C004DA29967A9
                                                                                                                      SHA-256:1AABE561B5C944ABD11C293D4ACAC0F3A4A5A9E84A0342D066F4E3E992348895
                                                                                                                      SHA-512:E1AF3D47D681CD68B6063DEC1241631CABE86FE835232FA73D855AC74D0175540D46511282BE7198A67A37970A5D05CDECF55C10424ED9C1413C108F116094D9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: macGreek, single-byte..S..003F 0 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..00C400B900B200C900B300D600DC038500E000E200E4038400A800E700E900E8..00EA00EB00A3212200EE00EF202200BD203000F400F600A600AD00F900FB00FC..2020039303940398039B039E03A000DF00AE00A903A303AA00A7226000B000B7..039100B12264226500A503920395039603970399039A039C03A603AB03A803A9..03AC039D00AC039F03A1224803A400AB00BB202600A003A503A7038603880153..20132015201C201D2018201900F70389038A038C038E03AD03AE03AF03CC038F..03CD03B103B203C803B

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\macIceland.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1115
                                                                                                                      Entropy (8bit):3.3991839018654573
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:8KHVBUlJvRj7SOVbusZhAMiZyi77qscqMVmOZmk/LYRldjY/g4JyMWG:8KMlBVnrAMiwMmzqi/LYRlYBEXG
                                                                                                                      MD5:747ADBE54D6992467415E322326FA1B9
                                                                                                                      SHA1:5E3967B5DDF3A6DBF07E90ED6B9B9C2F3F3F35FE
                                                                                                                      SHA-256:6FD08CE6FBA521D51E8058DE5C2DBD6583B80306A8BE7D015361F76314E70A35
                                                                                                                      SHA-512:A04B946993985BF1F8FBA3A7A9AD3838F43F8F27F69B1FB1015D9DC8612AAFCE24E30CBC1FCABBDFB359FD487D51F70F18DA0CDA4A87749A2C82309CEB054849
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: macIceland, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\macJapan.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):48813
                                                                                                                      Entropy (8bit):3.3767502114972077
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:K/RPrUHiJrKWkyY/W2wHiwWnwWOORY+gutSJi:KVUidzJCurDGSk
                                                                                                                      MD5:3DCD22325E0194AAD4959C939B1DE24D
                                                                                                                      SHA1:ABEF1372FBDA83714CE29E015D9A198D4B37B21C
                                                                                                                      SHA-256:47007D9EBF4D34C6CE3599E50AFC7C1CF8129B88994DE2C2A857C09003F9CD2B
                                                                                                                      SHA-512:B8ADFD2315EA38E5F7D4DED219759380069AAB539F1B5AAA5626CE32428CBBEB5E8215AD8351E023BCF72FA4DC30AB40CF59D6D45E33B6D1A6B41BEBFD4BD4C2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: macJapan, multi-byte..M..003F 0 46..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..0080000000000000000000000000000000000000000000000000000000000000..0000000000000000000000000000000000000000000000000000000000000000..00A0FF61FF62FF63FF64FF65FF66FF67FF68FF69FF6AFF6BFF6CFF6DFF6EFF6F..FF70FF71FF72FF73FF74FF75FF76FF77FF78FF79FF7AFF7BFF7CFF7DFF7EFF7F..FF80FF81FF82FF83FF84FF85FF86FF87FF88FF89FF8AFF8BFF8CFF8DFF8EFF8F..FF90FF91FF92FF93FF94FF95FF96FF97FF98FF99FF9AFF9BFF9CFF9DFF9EFF9F..0000000000000000000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\macRoman.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1113
                                                                                                                      Entropy (8bit):3.4060725247347516
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:8THVBUlJvRj7SOVbusZhAMiZyi77qsTMVmOZmk/LYRldjBpmg4JyMWG:8TMlBVnrAMiwMmOi/LYRlTsBEXG
                                                                                                                      MD5:34691FADC788B85D98F63159640C7DD0
                                                                                                                      SHA1:C8B3D084D3E831EFF6ECEF71B2029545F214C3D4
                                                                                                                      SHA-256:C83D971D6BC0284EF323C197896E38C57A5FF44784E451EC2997EDA70C0DD85C
                                                                                                                      SHA-512:77D5676F9B7AF7FD1D612A1C426889D8F2C0191887E180B78C4AA42202928A1B3078B76BD3C5F5ABB2A5CE1AE913E3CA6EFDE0483D2A2B0EFC173EF25EAE1D67
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: macRoman, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\macRomania.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1115
                                                                                                                      Entropy (8bit):3.412326247178521
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:8tHVBUlJvRj7SOVbusZhAMiZyi77qsTMVZ5OZwYRldj/T9g4JyMWG:8tMlBVnrAMiwMmOA7YRlFT9BEXG
                                                                                                                      MD5:04E25073BFB0019D8381B72F7B433F00
                                                                                                                      SHA1:B63B0AD9F10A44B0DDD12A3BDBCDEB2992D6D385
                                                                                                                      SHA-256:0B805DAF21D37D702617A8C72C7345F857695108D905FF378791F291CEA150F0
                                                                                                                      SHA-512:0514EC054676C15C65B01B02747CDBAD79BC89FD1A24A17797A8729752FB748FEDBE920E7BBFF41A6DA4BA99002E3B8DB674D53E30485DC36F6BF737EAF11702
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: macRomania, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\macThai.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1112
                                                                                                                      Entropy (8bit):3.6062142626989004
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:88HVBUlJvRj7SOVbusZhAMiZyi77qqJipJwHmEU4AyqU+TpH:88MlBVnrAMiwMmqJ8Jf4AyqUe
                                                                                                                      MD5:06DC6BA6E4A75CD7FF2D7A4248912C61
                                                                                                                      SHA1:23FB16763A8F11EF48E805E4F453C2F812D48FC4
                                                                                                                      SHA-256:A1802A2FEB01B255EC7C17425EEE4525372DF8CE226F4047D149172EB438F913
                                                                                                                      SHA-512:41A487EC5C36C17B2746C5DC770882A836E6E75CF6A14C31595EB211022F0476BD3B953497C447F21554769F127C3A56E5B6EF8FB3C20A8AFF8C67E0CC94359D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: macThai, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\macTurkish.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1115
                                                                                                                      Entropy (8bit):3.422718883614008
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:8QjHVBUlJvRj7SOVbusZhAMiZyi77qsTMVmOZmk/LYRldD8g4JyS:88MlBVnrAMiwMmOi/LYRlWBES
                                                                                                                      MD5:4EA94A0DB35BED2081A2CC9D627A8180
                                                                                                                      SHA1:AB2AC3ADA19F3F656780FF876D5B536A8DCE92C6
                                                                                                                      SHA-256:AFB66138EBE9B87D8B070FE3B6E7D1A05ED508571E9E5B166C3314069D59B4E4
                                                                                                                      SHA-512:7888F560D3728732BE1B7DCE49ECB61F3399CEF11191F4116C891E1D147B2A90ED8FB4A5E7B51904A001C47750BD9EB1B15EA5BA5B4EC5D69CDE7704B69529AD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: macTurkish, single-byte..S..003F 0 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..00C400C500C700C900D100D600DC00E100E000E200E400E300E500E700E900E8..00EA00EB00ED00EC00EE00EF00F100F300F200F400F600F500FA00F900FB00FC..202000B000A200A300A7202200B600DF00AE00A9212200B400A8226000C600D8..221E00B12264226500A500B522022211220F03C0222B00AA00BA03A900E600F8..00BF00A100AC221A01922248220600AB00BB202600A000C000C300D501520153..20132014201C201D2018201900F725CA00FF0178011E011F01300131015E015F..202100B7201A201E2

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\macUkraine.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1115
                                                                                                                      Entropy (8bit):3.4157626428238723
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:8TzHVBUlJvRj7SOVbusZhAMiZyi77qb+SAJlz9a4piS1yk+5yye3cJd:8PMlBVnrAMiwMm8Y6zUk+UVsJd
                                                                                                                      MD5:A5B48D6F2678579CBE6EA094A4655071
                                                                                                                      SHA1:A13A41D530B21CE8443AFD7E811286537C5BA9C7
                                                                                                                      SHA-256:F7E11736C9FF30102B31EC72272754110193B347433F4B364921E8F131C92BF0
                                                                                                                      SHA-512:612F9D528CE940B5CA9E67CB127013A104655207511F4CF39C8696A127E6A8F4867F5603DCFB78C25A55668C6EE70F2997A8D1626F6F1DD44B19260967F17097
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: macUkraine, single-byte..S..003F 0 1..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..0410041104120413041404150416041704180419041A041B041C041D041E041F..0420042104220423042404250426042704280429042A042B042C042D042E042F..202000B0049000A300A7202200B6040600AE00A9212204020452226004030453..221E00B122642265045600B504910408040404540407045704090459040A045A..0458040500AC221A01922248220600AB00BB202600A0040B045B040C045C0455..20132014201C201D2018201900F7201E040E045E040F045F211604010451044F..04300431043204330

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\shiftjis.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):42552
                                                                                                                      Entropy (8bit):3.5565924983274857
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:w/RPrUHiJrwWkyY/W2wHiwWnwWOORY+gutSX:wVUid5JCurDGSX
                                                                                                                      MD5:EEB45AF9D7104872FE290D1EC18AB169
                                                                                                                      SHA1:A80CF4EA46301F0B8B4F0BC306270D7103753871
                                                                                                                      SHA-256:4A15ED210126BCDAE32543F60EB1A0677F985F32D49FCE923B9FAE8C5BCF3DA4
                                                                                                                      SHA-512:C359042B04441AA50E536B23EEA0C6C7B2C1893DFB9CDB5459D3B46945D3BB50FD7A32A4F4E26A83622E76D3D2BB0DBBC3D1F3FB87AAF40520A243165B82AB34
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: shiftjis, multi-byte..M..003F 0 40..00..0000000100020003000400050006000700080009000A000B000C000D000E000F..0010001100120013001400150016001700180019001A001B001C001D001E001F..0020002100220023002400250026002700280029002A002B002C002D002E002F..0030003100320033003400350036003700380039003A003B003C003D003E003F..0040004100420043004400450046004700480049004A004B004C004D004E004F..0050005100520053005400550056005700580059005A005B005C005D005E005F..0060006100620063006400650066006700680069006A006B006C006D006E006F..0070007100720073007400750076007700780079007A007B007C007D007E007F..0080000000000000000000850086008700000000000000000000000000000000..0000000000000000000000000000000000000000000000000000000000000000..0000FF61FF62FF63FF64FF65FF66FF67FF68FF69FF6AFF6BFF6CFF6DFF6EFF6F..FF70FF71FF72FF73FF74FF75FF76FF77FF78FF79FF7AFF7BFF7CFF7DFF7EFF7F..FF80FF81FF82FF83FF84FF85FF86FF87FF88FF89FF8AFF8BFF8CFF8DFF8EFF8F..FF90FF91FF92FF93FF94FF95FF96FF97FF98FF99FF9AFF9BFF9CFF9DFF9EFF9F..0000000000000000000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\symbol.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):3.73983895892791
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:SdHkUlJvRjvRV7ZQsoRmSds2AsSemxUs+Jw1Viv6ObTXyn:avlJV7ZQsoRmosGSPxU/JOm6wTXyn
                                                                                                                      MD5:D59E748D863A5FAEF0CEEC2564E041A3
                                                                                                                      SHA1:4FFF3BE37F50C090FFC581F1C7769E20281E90C3
                                                                                                                      SHA-256:9660537A7B62996478555C6F57C1962C78FB3972F19370B2E395C44842818A1F
                                                                                                                      SHA-512:BF8FD0CF1CC55564C46976F53F441B26819ADBA7AB7BB04FF3FF5A313366FC3049DF29A839CCCB05EDEF4A7ECBB49FFCA62518EDA90AF2D7781874A8435073AE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: symbol, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\encoding\tis-620.enc

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1112
                                                                                                                      Entropy (8bit):3.0553142874336943
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:ZlHVBUlJvRj7SOVbusZhAMiZyi77qsDHmEU4AyqU+TWwdd:PMlBVnrAMiwMmss4AyqUSd
                                                                                                                      MD5:467A67DE6809B796B914F5BFF98EF46D
                                                                                                                      SHA1:C62418071A6C9CB0DCE3F67E130BFD2FB7AB0B58
                                                                                                                      SHA-256:50B62381D6EDD4219F4292BFDC365954491B23360DE7C08033E7218A3D29C970
                                                                                                                      SHA-512:BF98305AA7D759A087B9EABDC404714D8DC6B4F1BEED4ED0E1FFE646641E1AECA307673D64CF95FD09546D977B3409D6C04F56DCCA1D6332B0D9B6DD460B77A9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Encoding file: tis-620, single-byte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

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\history.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8235
                                                                                                                      Entropy (8bit):4.855903177272536
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:Hf8PxPu7pUHBpqyzmY5rEk/fvs+AokFlTGHts1H/tsEGZPBtsLIVn++G:H6Pu7ELJTtyli8Ozz+L
                                                                                                                      MD5:8609B624CD3EC63DD02DBF89455C3A9B
                                                                                                                      SHA1:B3E1843E34C38AA668FFDDF435A1A65D55449CA0
                                                                                                                      SHA-256:5123DB837EADF45712EA7D449BC40BFD3E8E16D3D71E7D0CE9A32F164973D767
                                                                                                                      SHA-512:B20B75473F34209888F38EE570B8A96061760E88466DFC2EC55C814968DC7F67D92D255E8635188B60455B88F2D1D517747613AD0F366D60412D2D6ECE231B0E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# history.tcl --..#..# Implementation of the history command...#..# Copyright (c) 1997 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution of..# this file, and for a DISCLAIMER OF ALL WARRANTIES...#.....# The tcl::history array holds the history list and some additional..# bookkeeping variables...#..# nextid.the index used for the next history list item...# keep..the max size of the history list..# oldest.the index of the oldest item in the history.....namespace eval ::tcl {.. variable history.. if {![info exists history]} {...array set history {... nextid.0... keep.20... oldest.-20...}.. }.... namespace ensemble create -command ::tcl::history -map {...add.::tcl::HistAdd...change.::tcl::HistChange...clear.::tcl::HistClear...event.::tcl::HistEvent...info.::tcl::HistInfo...keep.::tcl::HistKeep...nextid.::tcl::HistNextID...redo.::tcl::HistRedo.. }..}.....# history --..#..#.This is the main history command. See the

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\http1.0\http.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):10066
                                                                                                                      Entropy (8bit):4.806771544139381
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:kipkqA3KsZMAikGJ4kIWPa95KTBoF7dg/8YNkgQ4id:TkqWKsZ8kGJ4kIWPaDFzTd
                                                                                                                      MD5:C2092F8CA2D761DFA8C461076D956374
                                                                                                                      SHA1:90B4648B3BC81C30465B0BE83A5DB4127A1392FB
                                                                                                                      SHA-256:8C474095A3ABA7DF5B488F3D35240D6DE729E57153980C2A898728B8C407A727
                                                                                                                      SHA-512:09CE408886E2CEADDF70786A15D63AF9A930E70CAC4286AC9DDD2094C8EDCF97A2ADC2D3D2659B123F88719340D3B00D9F96E9BC7C8B55192735C290E7D24683
                                                                                                                      Malicious:false
                                                                                                                      Preview:# http.tcl..# Client-side HTTP for GET, POST, and HEAD commands...# These routines can be used in untrusted code that uses the Safesock..# security policy...# These procedures use a callback interface to avoid using vwait,..# which is not defined in the safe base...#..# See the http.n man page for documentation....package provide http 1.0....array set http {.. -accept */*.. -proxyhost {}.. -proxyport {}.. -useragent {Tcl http client package 1.0}.. -proxyfilter httpProxyRequired..}..proc http_config {args} {.. global http.. set options [lsort [array names http -*]].. set usage [join $options ", "].. if {[llength $args] == 0} {...set result {}...foreach name $options {... lappend result $name $http($name)...}...return $result.. }.. regsub -all -- - $options {} options.. set pat ^-([join $options |])$.. if {[llength $args] == 1} {...set flag [lindex $args 0]...if {[regexp -- $pat $flag]} {... return $http($flag)...} else {... return -code er

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\http1.0\pkgIndex.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):746
                                                                                                                      Entropy (8bit):4.711041943572035
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:jHx5XRsLzhjJS42wbGlTULuUAZb3KykszLl7+HkuRz20JSv6C3l5kMn:bHRsRJS42wbGlTUcZ+yk2Lli1z2jxXkM
                                                                                                                      MD5:A387908E2FE9D84704C2E47A7F6E9BC5
                                                                                                                      SHA1:F3C08B3540033A54A59CB3B207E351303C9E29C6
                                                                                                                      SHA-256:77265723959C092897C2449C5B7768CA72D0EFCD8C505BDDBB7A84F6AA401339
                                                                                                                      SHA-512:7AC804D23E72E40E7B5532332B4A8D8446C6447BB79B4FE32402B13836079D348998EA0659802AB0065896D4F3C06F5866C6B0D90BF448F53E803D8C243BBC63
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Tcl package index file, version 1.0..# This file is generated by the "pkg_mkIndex" command..# and sourced either when an application starts up or..# by a "package unknown" script. It invokes the..# "package ifneeded" command to set up package-related..# information so that packages will be loaded automatically..# in response to "package require" commands. When this..# script is sourced, the variable $dir must contain the..# full path name of this file's directory.....package ifneeded http 1.0 [list tclPkgSetup $dir http 1.0 {{http.tcl source {httpCopyDone httpCopyStart httpEof httpEvent httpFinish httpMapReply httpProxyRequired http_code http_config http_data http_formatQuery http_get http_reset http_size http_status http_wait}}}]..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\init.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Tcl script, ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):25633
                                                                                                                      Entropy (8bit):4.885492991636381
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:cXugPHudKlExBG+Xg3Qonlm6ofRRECLSQDjr5vkhzx/i:hgGdKli4eonlm6offLzehNi
                                                                                                                      MD5:FE92C81BB4ACDDA00761C695344D5F1E
                                                                                                                      SHA1:A87E1516FBD1F9751EC590273925CBC5284B16BD
                                                                                                                      SHA-256:7A103A85413988456C2AD615C879BBCB4D91435BCFBBE23393E0EB52B56AF6E2
                                                                                                                      SHA-512:C983076E420614D12AB2A7342F6F74DD5DCDAD21C7C547F660E73B74B3BE487A560ABD73213DF3F58BE3D9DBD061A12D2956CA85A58D7B9D9E40D9FA6E6C25EB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# init.tcl --..#..# Default system startup file for Tcl-based applications. Defines..# "unknown" procedure and auto-load facilities...#..# Copyright (c) 1991-1993 The Regents of the University of California...# Copyright (c) 1994-1996 Sun Microsystems, Inc...# Copyright (c) 1998-1999 Scriptics Corporation...# Copyright (c) 2004 Kevin B. Kenny. All rights reserved...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....# This test intentionally written in pre-7.5 Tcl..if {[info commands package] == ""} {.. error "version mismatch: library\nscripts expect Tcl version 7.5b1 or later but the loaded version is\nonly [info patchlevel]"..}..package require -exact Tcl 8.6.13....# Compute the auto path to use in this interpreter...# The values on the path come from several locations:..#..# The environment variable TCLLIBPATH..#..# tcl_library, which is the directory containing this init.tcl script...# [t

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\af.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1038
                                                                                                                      Entropy (8bit):4.10054496357204
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:4EnLB383Hcm0hH9BncmtR7tK9dUVxMmALfpKIdzVJLd3xfjTuLM+vzkHWZ6tH9H0:4aR838HH9ekCkMmEfpK2xx2jiWZ0VbY
                                                                                                                      MD5:DA8BA1C3041998F5644382A329C3C867
                                                                                                                      SHA1:CA0BD787A51AD9EDC02EDD679EEEEB3A2932E189
                                                                                                                      SHA-256:A1EACA556BC0CFBD219376287C72D9DBBFAB76ECF9BF204FD02D40D341BAF7DA
                                                                                                                      SHA-512:4F086396405FDFE7FBDA7614D143DE9DB41F75BDBD3DB18B1EE9517C3DCCED238DD240B4B64829FD04E50F602DBF371D42A321D04C4C48E4B8B2A067CA1BAF2E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset af DAYS_OF_WEEK_ABBREV [list \.. "So"\.. "Ma"\.. "Di"\.. "Wo"\.. "Do"\.. "Vr"\.. "Sa"].. ::msgcat::mcset af DAYS_OF_WEEK_FULL [list \.. "Sondag"\.. "Maandag"\.. "Dinsdag"\.. "Woensdag"\.. "Donderdag"\.. "Vrydag"\.. "Saterdag"].. ::msgcat::mcset af MONTHS_ABBREV [list \.. "Jan"\.. "Feb"\.. "Mar"\.. "Apr"\.. "Mei"\.. "Jun"\.. "Jul"\.. "Aug"\.. "Sep"\.. "Okt"\.. "Nov"\.. "Des"\.. ""].. ::msgcat::mcset af MONTHS_FULL [list \.. "Januarie"\.. "Februarie"\.. "Maart"\.. "April"\.. "Mei"\.. "Junie"\.. "Julie"\.. "Augustus"\.. "September"\.. "Oktober"\.. "November"\.. "Desember"\.. ""].. ::msgcat::mcset af AM "VM

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\af_za.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.925537696653838
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xouFygMouFqF3v6ay/5ouFy9+3vR6HyFvn:4EnLB383RAgeYF3v6ay/RAI3voSVn
                                                                                                                      MD5:1B9DCD1C6FCDDC95AE820EA8DA5E15B8
                                                                                                                      SHA1:E8160353FD415BAB9FD5ACCA14E087C5E6AE836E
                                                                                                                      SHA-256:1548988458BBF0DFCCC23B7487CEC0E9C64E4CC8E045723E50BEC37C454A8C81
                                                                                                                      SHA-512:532AF060B95AED5E381B161BE56BC88D91A8F3DF2ACFD835491991F99FE752ADB4A3F93AB6D4E68F7042C28A3C1DD87A6312DFD9FFFAFD6ECE3F1B76837C5B7F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset af_ZA DATE_FORMAT "%d %B %Y".. ::msgcat::mcset af_ZA TIME_FORMAT_12 "%l:%M:%S %P".. ::msgcat::mcset af_ZA DATE_TIME_FORMAT "%d %B %Y %l:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ar.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2018
                                                                                                                      Entropy (8bit):4.477377447232708
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83gr/fsS/Sm8p4M/n1KsPktE30AiJcAxi9CEzdEvSCHvMSV:43UkiSm8p3nX0EzdCSCPV
                                                                                                                      MD5:D264D01B46D96455715114CAEDF9F05E
                                                                                                                      SHA1:A3F68A4C6E69433BD53E52B73041575F3B3AC3F2
                                                                                                                      SHA-256:B69D0061A728D59F89FF8621312789CD9F540BF2E2ED297804D22F6278561D85
                                                                                                                      SHA-512:A4163DAA6821B293EADD5D499E0641A8B7C93180C710D6B364AE8681A8FF6F35EC948C8DDBE960A8466AF1ACABC15B0D465A08B084617E8005D708459F7E74D3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ar DAYS_OF_WEEK_ABBREV [list \.. "\u062d"\.. "\u0646"\.. "\u062b"\.. "\u0631"\.. "\u062e"\.. "\u062c"\.. "\u0633"].. ::msgcat::mcset ar DAYS_OF_WEEK_FULL [list \.. "\u0627\u0644\u0623\u062d\u062f"\.. "\u0627\u0644\u0627\u062b\u0646\u064a\u0646"\.. "\u0627\u0644\u062b\u0644\u0627\u062b\u0627\u0621"\.. "\u0627\u0644\u0623\u0631\u0628\u0639\u0627\u0621"\.. "\u0627\u0644\u062e\u0645\u064a\u0633"\.. "\u0627\u0644\u062c\u0645\u0639\u0629"\.. "\u0627\u0644\u0633\u0628\u062a"].. ::msgcat::mcset ar MONTHS_ABBREV [list \.. "\u064a\u0646\u0627"\.. "\u0641\u0628\u0631"\.. "\u0645\u0627\u0631"\.. "\u0623\u0628\u0631"\.. "\u0645\u0627\u064a"\.. "\u064a\u0648\u0646"\.. "\u064a\u0648\u0644"\.. "\u0623\u063a\u0633"\.. "\u0633\u0628\u062a"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ar_in.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):265
                                                                                                                      Entropy (8bit):4.872222510420193
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoKNvfcoKU3v6xyFjoKNo+3vfXM68vn:4EnLB3831vfD3v6g9F3vfc6+n
                                                                                                                      MD5:430498B4AB1E77C86BC1311A49747581
                                                                                                                      SHA1:684EAD965D9010C2A6E73DCACB2224FDE585F9FF
                                                                                                                      SHA-256:2E04B96DA002519D28125918A22FF2BB9659A668A7BCAD34D85DDDECEC8DC0B4
                                                                                                                      SHA-512:9F85A88A383DCFC54DAA6253D94C307A14B1CC91D5C97AF817B8122AF98025AB2430D0B2D656EBED09E78FB854D1F9CF99F3B791A6ECB7834112012739140126
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ar_IN DATE_FORMAT "%A %d %B %Y".. ::msgcat::mcset ar_IN TIME_FORMAT_12 "%I:%M:%S %z".. ::msgcat::mcset ar_IN DATE_TIME_FORMAT "%A %d %B %Y %I:%M:%S %z %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ar_jo.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1851
                                                                                                                      Entropy (8bit):4.08645484776227
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83sxS/Sm819+es/Ii/R91bpH0+U0c+es/Ii/R91bpH0+UO:43wiSm815MbJbHgMbJbp
                                                                                                                      MD5:5C62D606F4F14BC8994B28F9622D70DD
                                                                                                                      SHA1:E99F8CC5D330085545B05B69213E9D011D436990
                                                                                                                      SHA-256:5ADBB3D37C3369E5FC80D6A462C82598D5A22FAEF0E8DF6B3148231D2C6A7F73
                                                                                                                      SHA-512:81AC9200459B0896E27A028BD089A174F7F921B0367BC8FF1AB33D3E561417B6F8EC23DAB750ECB408AC8A11CDFDBFA4F890F9E723BB8607B017C9FEE00928A0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ar_JO DAYS_OF_WEEK_ABBREV [list \.. "\u0627\u0644\u0623\u062d\u062f"\.. "\u0627\u0644\u0627\u062b\u0646\u064a\u0646"\.. "\u0627\u0644\u062b\u0644\u0627\u062b\u0627\u0621"\.. "\u0627\u0644\u0623\u0631\u0628\u0639\u0627\u0621"\.. "\u0627\u0644\u062e\u0645\u064a\u0633"\.. "\u0627\u0644\u062c\u0645\u0639\u0629"\.. "\u0627\u0644\u0633\u0628\u062a"].. ::msgcat::mcset ar_JO MONTHS_ABBREV [list \.. "\u0643\u0627\u0646\u0648\u0646 \u0627\u0644\u062b\u0627\u0646\u064a"\.. "\u0634\u0628\u0627\u0637"\.. "\u0622\u0630\u0627\u0631"\.. "\u0646\u064a\u0633\u0627\u0646"\.. "\u0646\u0648\u0627\u0631"\.. "\u062d\u0632\u064a\u0631\u0627\u0646"\.. "\u062a\u0645\u0648\u0632"\.. "\u0622\u0628"\.. "\u0623\u064a\u0644\u0648\u0644"\.. "\u062a\u0634\u0631\u064a\u0646 \u0627\u0644\u0623\u0648\u064

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ar_lb.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1851
                                                                                                                      Entropy (8bit):4.083347689510237
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83LxS/Sm8S9+es/Ii/R91bpH0+U/c+es/Ii/R91bpH0+UO:431iSm8S5MbJbQgMbJbp
                                                                                                                      MD5:6FC1CC738207E2F8E0871103841BC0D4
                                                                                                                      SHA1:D2C62C7F6DA1EF399FCBE2BA91C9562C87E6152F
                                                                                                                      SHA-256:1FC13070CF661488E90FECE84274C46B1F4CC7E1565EAB8F829CCAA65108DFCA
                                                                                                                      SHA-512:E547D5CBB746654051AFDA21942075BC2224C2FF75D440C6C34C642AD24CF622E520FF919B8BD4AFC0116D9CE69B3ABA4E81EE247C1388F3C5741150201F5C60
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ar_LB DAYS_OF_WEEK_ABBREV [list \.. "\u0627\u0644\u0623\u062d\u062f"\.. "\u0627\u0644\u0627\u062b\u0646\u064a\u0646"\.. "\u0627\u0644\u062b\u0644\u0627\u062b\u0627\u0621"\.. "\u0627\u0644\u0623\u0631\u0628\u0639\u0627\u0621"\.. "\u0627\u0644\u062e\u0645\u064a\u0633"\.. "\u0627\u0644\u062c\u0645\u0639\u0629"\.. "\u0627\u0644\u0633\u0628\u062a"].. ::msgcat::mcset ar_LB MONTHS_ABBREV [list \.. "\u0643\u0627\u0646\u0648\u0646 \u0627\u0644\u062b\u0627\u0646\u064a"\.. "\u0634\u0628\u0627\u0637"\.. "\u0622\u0630\u0627\u0631"\.. "\u0646\u064a\u0633\u0627\u0646"\.. "\u0646\u0648\u0627\u0631"\.. "\u062d\u0632\u064a\u0631\u0627\u0646"\.. "\u062a\u0645\u0648\u0632"\.. "\u0622\u0628"\.. "\u0623\u064a\u0644\u0648\u0644"\.. "\u062a\u0634\u0631\u064a\u0646 \u0627\u0644\u0623\u0648\u064

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ar_sy.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1851
                                                                                                                      Entropy (8bit):4.084701680556524
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83lxS/Sm8M9+es/Ii/R91bpH0+UBc+es/Iv/I91bpH0+UO:43LiSm8M5MbJbSgMo0bp
                                                                                                                      MD5:8188C37CA44FEFFF8D895AAD503AD4F6
                                                                                                                      SHA1:C48F2E3B9FC055704D2DAFDC67E9D08EE6897D45
                                                                                                                      SHA-256:294F3E46C55453EDAD44567E1330F9B43E69A07FA0655B24DD2780A4490C1194
                                                                                                                      SHA-512:F86FCFC7C460473D46C472041AB2E1F9388CF34BCA9050295D1DAE454E35A2A0320D0C61D5E8CBB832AF74FFDD1A7511AF32EA2A53B481F39A1CBCF5F086D514
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ar_SY DAYS_OF_WEEK_ABBREV [list \.. "\u0627\u0644\u0623\u062d\u062f"\.. "\u0627\u0644\u0627\u062b\u0646\u064a\u0646"\.. "\u0627\u0644\u062b\u0644\u0627\u062b\u0627\u0621"\.. "\u0627\u0644\u0623\u0631\u0628\u0639\u0627\u0621"\.. "\u0627\u0644\u062e\u0645\u064a\u0633"\.. "\u0627\u0644\u062c\u0645\u0639\u0629"\.. "\u0627\u0644\u0633\u0628\u062a"].. ::msgcat::mcset ar_SY MONTHS_ABBREV [list \.. "\u0643\u0627\u0646\u0648\u0646 \u0627\u0644\u062b\u0627\u0646\u064a"\.. "\u0634\u0628\u0627\u0637"\.. "\u0622\u0630\u0627\u0631"\.. "\u0646\u064a\u0633\u0627\u0646"\.. "\u0646\u0648\u0627\u0631"\.. "\u062d\u0632\u064a\u0631\u0627\u0646"\.. "\u062a\u0645\u0648\u0632"\.. "\u0622\u0628"\.. "\u0623\u064a\u0644\u0648\u0644"\.. "\u062a\u0634\u0631\u064a\u0646 \u0627\u0644\u0623\u0648\u064

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\be.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2157
                                                                                                                      Entropy (8bit):4.27810535662921
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:43PI8IKQGQ8mA/XxQJxQnA9QJlPyI/tbCaQICMIcQ8InVI5tNIzQFIQQLtChjsI4:2PItK5BSb9ajfycCW5IzdQNxK
                                                                                                                      MD5:6334BDDFC1E0EAE4DBB2C90F85818FD8
                                                                                                                      SHA1:085EDC3D027D6B5A6A6A2561717EA89C8F8B8B39
                                                                                                                      SHA-256:A636A82C7D00CCDC0AF2496043FFA320F17B0D48A1232708810D3BB1453E881E
                                                                                                                      SHA-512:18ADB77314FCFD534E55B234B3A53A0BC572AB60B80D099D2F3B20E0C5FE66179FDC076AA43200DB3CA123BC6216989EC41448FA624D3BA9633413AD8AD6034C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset be DAYS_OF_WEEK_ABBREV [list \.. "\u043d\u0434"\.. "\u043f\u043d"\.. "\u0430\u0442"\.. "\u0441\u0440"\.. "\u0447\u0446"\.. "\u043f\u0442"\.. "\u0441\u0431"].. ::msgcat::mcset be DAYS_OF_WEEK_FULL [list \.. "\u043d\u044f\u0434\u0437\u0435\u043b\u044f"\.. "\u043f\u0430\u043d\u044f\u0434\u0437\u0435\u043b\u0430\u043a"\.. "\u0430\u045e\u0442\u043e\u0440\u0430\u043a"\.. "\u0441\u0435\u0440\u0430\u0434\u0430"\.. "\u0447\u0430\u0446\u0432\u0435\u0440"\.. "\u043f\u044f\u0442\u043d\u0456\u0446\u0430"\.. "\u0441\u0443\u0431\u043e\u0442\u0430"].. ::msgcat::mcset be MONTHS_ABBREV [list \.. "\u0441\u0442\u0434"\.. "\u043b\u044e\u0442"\.. "\u0441\u043a\u0432"\.. "\u043a\u0440\u0441"\.. "\u043c\u0430\u0439"\.. "\u0447\u0440\u0432"\.. "\u043b\u043f\u043d"

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\bg.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1871
                                                                                                                      Entropy (8bit):4.4251657008559935
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:43EUAIlnQf/QVdQ81mnEZqEavWQEQ3QvQrQL0QjQTtQDCQSY4tqP:27xMk+nEZqE3biIYbUi+C9y
                                                                                                                      MD5:E5225D6478C60E2502D18698BB917677
                                                                                                                      SHA1:52D611CB5351FB873D2535246B3A3C1A37094023
                                                                                                                      SHA-256:CFE4E44A3A751F113847667EC9EA741E762BBDE0D4284822CB337DF0F92C1ACA
                                                                                                                      SHA-512:59AB167177101088057BF4EE0F70262987A2177ECB72C613CCAAE2F3E8D8B77F07D15DA5BE3B8728E23C31A1C9736030AA4036A8CD00A24791751A298B3A88B3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset bg DAYS_OF_WEEK_ABBREV [list \.. "\u041d\u0434"\.. "\u041f\u043d"\.. "\u0412\u0442"\.. "\u0421\u0440"\.. "\u0427\u0442"\.. "\u041f\u0442"\.. "\u0421\u0431"].. ::msgcat::mcset bg DAYS_OF_WEEK_FULL [list \.. "\u041d\u0435\u0434\u0435\u043b\u044f"\.. "\u041f\u043e\u043d\u0435\u0434\u0435\u043b\u043d\u0438\u043a"\.. "\u0412\u0442\u043e\u0440\u043d\u0438\u043a"\.. "\u0421\u0440\u044f\u0434\u0430"\.. "\u0427\u0435\u0442\u0432\u044a\u0440\u0442\u044a\u043a"\.. "\u041f\u0435\u0442\u044a\u043a"\.. "\u0421\u044a\u0431\u043e\u0442\u0430"].. ::msgcat::mcset bg MONTHS_ABBREV [list \.. "I"\.. "II"\.. "III"\.. "IV"\.. "V"\.. "VI"\.. "VII"\.. "VIII"\.. "IX"\.. "X"\.. "XI"\.. "XII"\.. ""].. ::msgcat::mcset bg MO

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\bn.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2335
                                                                                                                      Entropy (8bit):4.107102006297273
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR835e/MWrD//6HFEVcVVcCVcTUTVckVEVcT7VcEEVcby/Vcn0VcMr/0VcM8VcQ:43ktX++QalMObalMZ6IE6V
                                                                                                                      MD5:5D25E7FC65824AC987535FEA14A4045C
                                                                                                                      SHA1:85C10F05823CD3263FC7B3EC38796BEC261B3716
                                                                                                                      SHA-256:890EA6521DEB1B3C3913CCD92562F6360E064DAEE2E2B0356A6DD97A46264A1F
                                                                                                                      SHA-512:5D8A88ACAEBBF3CD721F288FA0F1FEE517EE568CA5482E30CFA1E36CD37DF011C449090E2D9041F1D046A191F13D4C5C4B6F9E2F16FD259E63CE46ECC4E4F81F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset bn DAYS_OF_WEEK_ABBREV [list \.. "\u09b0\u09ac\u09bf"\.. "\u09b8\u09cb\u09ae"\.. "\u09ae\u0999\u0997\u09b2"\.. "\u09ac\u09c1\u09a7"\.. "\u09ac\u09c3\u09b9\u09b8\u09cd\u09aa\u09a4\u09bf"\.. "\u09b6\u09c1\u0995\u09cd\u09b0"\.. "\u09b6\u09a8\u09bf"].. ::msgcat::mcset bn DAYS_OF_WEEK_FULL [list \.. "\u09b0\u09ac\u09bf\u09ac\u09be\u09b0"\.. "\u09b8\u09cb\u09ae\u09ac\u09be\u09b0"\.. "\u09ae\u0999\u0997\u09b2\u09ac\u09be\u09b0"\.. "\u09ac\u09c1\u09a7\u09ac\u09be\u09b0"\.. "\u09ac\u09c3\u09b9\u09b8\u09cd\u09aa\u09a4\u09bf\u09ac\u09be\u09b0"\.. "\u09b6\u09c1\u0995\u09cd\u09b0\u09ac\u09be\u09b0"\.. "\u09b6\u09a8\u09bf\u09ac\u09be\u09b0"].. ::msgcat::mcset bn MONTHS_ABBREV [list \.. "\u099c\u09be\u09a8\u09c1\u09df\u09be\u09b0\u09c0"\.. "\u09ab\u09c7\u09ac\u09cd\u09b0\u09c1\u09df\u09be

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\bn_in.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):265
                                                                                                                      Entropy (8bit):4.868201122972066
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xovtvfluo/E3v6xyFjovto+3vflm68vn:4EnLB383UtvfltE3v6g8tF3vflm6+n
                                                                                                                      MD5:B91BB2ABC23B90962D2070B9588F2AB5
                                                                                                                      SHA1:CBB4E9CD600773792C6E9F3E6B27E99C1846B44F
                                                                                                                      SHA-256:B3D8A4632290B0F3DA690E47C1FDF06A8B9E171A96E938AFDB0DD52CF806CE54
                                                                                                                      SHA-512:932FC4B8C3CA72731187D56012AD7DD7777C4D447F16EEB17B9D68235C9590DF99992FD22B8D7C85A843A610F93CD36FAFA993C34C441255A1C0A93C73BC5FE4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset bn_IN DATE_FORMAT "%A %d %b %Y".. ::msgcat::mcset bn_IN TIME_FORMAT_12 "%I:%M:%S %z".. ::msgcat::mcset bn_IN DATE_TIME_FORMAT "%A %d %b %Y %I:%M:%S %z %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ca.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1152
                                                                                                                      Entropy (8bit):4.2880653012847985
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83FMVBNfPg+g+RjMu5+C6MB4zdiwvWvn:432g6jh65zd3gn
                                                                                                                      MD5:72DDD60C907DD235BCE4AB0A5AEE902C
                                                                                                                      SHA1:06150F793251687E6FBC3FDA3BC81BCBFC7DE763
                                                                                                                      SHA-256:3BE295DCC8FCDC767FED0C68E3867359C18E7E57D7DB6C07236B5BC572AD328E
                                                                                                                      SHA-512:3B0A85003692F1E46185D5CC09236D2DA5E6D29166C9812D07A7D6BF6AC6C3B0708F91C6899768D4DBA3528081B8B43E09F49622B70F1CF991AFAC5352B6BA37
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ca DAYS_OF_WEEK_ABBREV [list \.. "dg."\.. "dl."\.. "dt."\.. "dc."\.. "dj."\.. "dv."\.. "ds."].. ::msgcat::mcset ca DAYS_OF_WEEK_FULL [list \.. "diumenge"\.. "dilluns"\.. "dimarts"\.. "dimecres"\.. "dijous"\.. "divendres"\.. "dissabte"].. ::msgcat::mcset ca MONTHS_ABBREV [list \.. "gen."\.. "feb."\.. "mar\u00e7"\.. "abr."\.. "maig"\.. "juny"\.. "jul."\.. "ag."\.. "set."\.. "oct."\.. "nov."\.. "des."\.. ""].. ::msgcat::mcset ca MONTHS_FULL [list \.. "gener"\.. "febrer"\.. "mar\u00e7"\.. "abril"\.. "maig"\.. "juny"\.. "juliol"\.. "agost"\.. "setembre"\.. "octubre"\.. "novembre"\.. "desembre"\.. ""].. ::msg

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\cs.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1354
                                                                                                                      Entropy (8bit):4.466447248030554
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83U4nZ4yJTkkG3mYWEZqO1R3DNBEVG+PYhxrU4UF3ecCvt7/v3e6:43TJTGmnEZqE5/EVEDOGtDp
                                                                                                                      MD5:F32EAD82CC26754C5A8E092873A28DB3
                                                                                                                      SHA1:325124660F62242B24623B4B737CB4616F86CFF3
                                                                                                                      SHA-256:AFEA12A16A6FA750EA610245133B90F178BA714848F89AEC37429A3E7B06BE1A
                                                                                                                      SHA-512:04E335AAFBF4D169983635FC87BCFFE86FBA570A3E1820D20240EF7B47E7A3CD94AE3598543DCE92A1F82B5146CAAD982EFE9490EFD9E581D58515CFC3930581
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset cs DAYS_OF_WEEK_ABBREV [list \.. "Ne"\.. "Po"\.. "\u00dat"\.. "St"\.. "\u010ct"\.. "P\u00e1"\.. "So"].. ::msgcat::mcset cs DAYS_OF_WEEK_FULL [list \.. "Ned\u011ble"\.. "Pond\u011bl\u00ed"\.. "\u00dater\u00fd"\.. "St\u0159eda"\.. "\u010ctvrtek"\.. "P\u00e1tek"\.. "Sobota"].. ::msgcat::mcset cs MONTHS_ABBREV [list \.. "I"\.. "II"\.. "III"\.. "IV"\.. "V"\.. "VI"\.. "VII"\.. "VIII"\.. "IX"\.. "X"\.. "XI"\.. "XII"\.. ""].. ::msgcat::mcset cs MONTHS_FULL [list \.. "leden"\.. "\u00fanor"\.. "b\u0159ezen"\.. "duben"\.. "kv\u011bten"\.. "\u010derven"\.. "\u010dervenec"\.. "srpen"\.. "z\u00e1\u0159\u00ed"\.. "\u0159\u00edjen"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\da.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1208
                                                                                                                      Entropy (8bit):4.315504392809956
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83wV0tBVYuorIsmZ5meAxyISjTHU92WFVwpwvbvT:43w+DiuorreAY0zw8rT
                                                                                                                      MD5:27A6A8BE8903AEF9D0BE956906A89583
                                                                                                                      SHA1:EE29FDF67CB3AE150DF6BBBE603C1C3F5DA28641
                                                                                                                      SHA-256:0D422A991BCA13FE9033118691CFEDAB0F372222EBB0BC92BAF8E914EE816B84
                                                                                                                      SHA-512:0E702A679AD94BF479226B7DE32077562F3F95210F6453AE564138386DBB179941BA5359AEE9AC532F4A6E5BE745D6962D6B638A21DD48B865716F2FD2A0CB01
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset da DAYS_OF_WEEK_ABBREV [list \.. "s\u00f8"\.. "ma"\.. "ti"\.. "on"\.. "to"\.. "fr"\.. "l\u00f8"].. ::msgcat::mcset da DAYS_OF_WEEK_FULL [list \.. "s\u00f8ndag"\.. "mandag"\.. "tirsdag"\.. "onsdag"\.. "torsdag"\.. "fredag"\.. "l\u00f8rdag"].. ::msgcat::mcset da MONTHS_ABBREV [list \.. "jan"\.. "feb"\.. "mar"\.. "apr"\.. "maj"\.. "jun"\.. "jul"\.. "aug"\.. "sep"\.. "okt"\.. "nov"\.. "dec"\.. ""].. ::msgcat::mcset da MONTHS_FULL [list \.. "januar"\.. "februar"\.. "marts"\.. "april"\.. "maj"\.. "juni"\.. "juli"\.. "august"\.. "september"\.. "oktober"\.. "november"\.. "december"\.. ""].. ::msgcat::mcset da B

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\de.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1276
                                                                                                                      Entropy (8bit):4.349293509679722
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83cFNSsZKKgXum47fpK2OaSIui7dHqWZ0ZIBFJWJvvvWIn:43InZKKgXoOqx1W67W9XWIn
                                                                                                                      MD5:EE3963A5F7E29C05C9617BE3FD897114
                                                                                                                      SHA1:0F978CA174DF596817F872B5EF1B447B9DFE651C
                                                                                                                      SHA-256:4C27733502066E8391654D1D372F92BF0484C5A3821E121AE8AA5B99378C99AE
                                                                                                                      SHA-512:EA933709C68F8199858A1CC1FFDA67EE7458CC57A163E672535EB0B4C37BFDC200604C7506748DAC3158B6CA63C2F076A2C6252B2A596E59F83D3B1D4BC9C901
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset de DAYS_OF_WEEK_ABBREV [list \.. "So"\.. "Mo"\.. "Di"\.. "Mi"\.. "Do"\.. "Fr"\.. "Sa"].. ::msgcat::mcset de DAYS_OF_WEEK_FULL [list \.. "Sonntag"\.. "Montag"\.. "Dienstag"\.. "Mittwoch"\.. "Donnerstag"\.. "Freitag"\.. "Samstag"].. ::msgcat::mcset de MONTHS_ABBREV [list \.. "Jan"\.. "Feb"\.. "Mrz"\.. "Apr"\.. "Mai"\.. "Jun"\.. "Jul"\.. "Aug"\.. "Sep"\.. "Okt"\.. "Nov"\.. "Dez"\.. ""].. ::msgcat::mcset de MONTHS_FULL [list \.. "Januar"\.. "Februar"\.. "M\u00e4rz"\.. "April"\.. "Mai"\.. "Juni"\.. "Juli"\.. "August"\.. "September"\.. "Oktober"\.. "November"\.. "Dezember"\.. ""].. ::msgcat::mcset de BCE "v.

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\de_at.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):847
                                                                                                                      Entropy (8bit):4.412930056658995
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR831sMm47fpK2++SIui7dHqWZ0ZItovGvzvW:431h+mx1Wm+QjW
                                                                                                                      MD5:A6227CD4F7434952D093F1F3C64B4378
                                                                                                                      SHA1:0DDB9A49CB83DDF2396B2ECA85093260710496C2
                                                                                                                      SHA-256:1C02D14140196623297F858E2EEF00B4159E1C6FAFE044EC65A48C9C24D46540
                                                                                                                      SHA-512:D63F34024356F5CE0335D14EA557F4BBF238CCA8265DD27C039C70F7F28FE737F368B030DEE10B2C536512D2815E1F5B19838D08745C6A76A39050D573597EB3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset de_AT MONTHS_ABBREV [list \.. "J\u00e4n"\.. "Feb"\.. "M\u00e4r"\.. "Apr"\.. "Mai"\.. "Jun"\.. "Jul"\.. "Aug"\.. "Sep"\.. "Okt"\.. "Nov"\.. "Dez"\.. ""].. ::msgcat::mcset de_AT MONTHS_FULL [list \.. "J\u00e4nner"\.. "Februar"\.. "M\u00e4rz"\.. "April"\.. "Mai"\.. "Juni"\.. "Juli"\.. "August"\.. "September"\.. "Oktober"\.. "November"\.. "Dezember"\.. ""].. ::msgcat::mcset de_AT DATE_FORMAT "%Y-%m-%d".. ::msgcat::mcset de_AT TIME_FORMAT "%T".. ::msgcat::mcset de_AT TIME_FORMAT_12 "%T".. ::msgcat::mcset de_AT DATE_TIME_FORMAT "%a %d %b %Y %T %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\de_be.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1276
                                                                                                                      Entropy (8bit):4.389082225723362
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83B8VSysVB8VsZKKgJ5Mm47fpK26aSIui7dHqWZ0ZIlj5VevjevbDvW:43Bt1VBbZKKgJs6qx1Wc5VojobzW
                                                                                                                      MD5:C351057D8E5328C0790901D1F4DBEC9F
                                                                                                                      SHA1:F73DE8AEF7F8083B0726760AA003E81067A68588
                                                                                                                      SHA-256:532845CD15EC821C1939D000C648694A64E8CA8F0C14BAD5D79682CF991481CE
                                                                                                                      SHA-512:8152AD082D0A6A4EBE7E1CCA9D4A5F2E48ABE3F09F4385A517C523A67CA3B08E0F20C193D0F6850F37E55ED0CD6FBD201FE22CC824AF170976D04DB061212F2D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset de_BE DAYS_OF_WEEK_ABBREV [list \.. "Son"\.. "Mon"\.. "Die"\.. "Mit"\.. "Don"\.. "Fre"\.. "Sam"].. ::msgcat::mcset de_BE DAYS_OF_WEEK_FULL [list \.. "Sonntag"\.. "Montag"\.. "Dienstag"\.. "Mittwoch"\.. "Donnerstag"\.. "Freitag"\.. "Samstag"].. ::msgcat::mcset de_BE MONTHS_ABBREV [list \.. "Jan"\.. "Feb"\.. "M\u00e4r"\.. "Apr"\.. "Mai"\.. "Jun"\.. "Jul"\.. "Aug"\.. "Sep"\.. "Okt"\.. "Nov"\.. "Dez"\.. ""].. ::msgcat::mcset de_BE MONTHS_FULL [list \.. "Januar"\.. "Februar"\.. "M\u00e4rz"\.. "April"\.. "Mai"\.. "Juni"\.. "Juli"\.. "August"\.. "September"\.. "Oktober"\.. "November"\.. "Dezember"\.. ""].. ::m

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\el.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2304
                                                                                                                      Entropy (8bit):4.371322909589862
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR833v+ZYYWtv+nWfFyL1NYOg+EKVJQ19tWQYmYaYRn9sWuSAJIJ6eRa6WrmdlX:43/pZyLjY0uYR9QmdkjC9r
                                                                                                                      MD5:7DD14B1F4FF532DCAF6D4C6F0DF82E9A
                                                                                                                      SHA1:707875FEF4207EBB71D066FDC54C7F68560C6DAD
                                                                                                                      SHA-256:8B23E0E2F0F319BB9A2DFDCCDC565FF79A62FA85094811189B6BC41594232B6B
                                                                                                                      SHA-512:5ECA072DE5DD7890270AE268C7C8D40EE2DB6966643604D16E54194DB0AD74FDA8D04848331E61B387E8B494AF18252E38671D939069EC4C90C672A629563B88
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset el DAYS_OF_WEEK_ABBREV [list \.. "\u039a\u03c5\u03c1"\.. "\u0394\u03b5\u03c5"\.. "\u03a4\u03c1\u03b9"\.. "\u03a4\u03b5\u03c4"\.. "\u03a0\u03b5\u03bc"\.. "\u03a0\u03b1\u03c1"\.. "\u03a3\u03b1\u03b2"].. ::msgcat::mcset el DAYS_OF_WEEK_FULL [list \.. "\u039a\u03c5\u03c1\u03b9\u03b1\u03ba\u03ae"\.. "\u0394\u03b5\u03c5\u03c4\u03ad\u03c1\u03b1"\.. "\u03a4\u03c1\u03af\u03c4\u03b7"\.. "\u03a4\u03b5\u03c4\u03ac\u03c1\u03c4\u03b7"\.. "\u03a0\u03ad\u03bc\u03c0\u03c4\u03b7"\.. "\u03a0\u03b1\u03c1\u03b1\u03c3\u03ba\u03b5\u03c5\u03ae"\.. "\u03a3\u03ac\u03b2\u03b2\u03b1\u03c4\u03bf"].. ::msgcat::mcset el MONTHS_ABBREV [list \.. "\u0399\u03b1\u03bd"\.. "\u03a6\u03b5\u03b2"\.. "\u039c\u03b1\u03c1"\.. "\u0391\u03c0\u03c1"\.. "\u039c\u03b1\u03ca"\.. "\u0399\u03bf\u

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_au.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):307
                                                                                                                      Entropy (8bit):4.896073290907262
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoCwmGjbmvFjoCws6W3v1oCws6W3v6p6HyFjoCwmT+3vjbe:4EnLB383QrmdSs6W3vss6W3v6QSoJ3ve
                                                                                                                      MD5:5B31AD8AC0000B01C4BD04BF6FC4784C
                                                                                                                      SHA1:F55145B473DDCAE38A0F7297D58B80B12B2A5271
                                                                                                                      SHA-256:705C66C14B6DE682EC7408EABDBA0800C626629E64458971BC8A4CBD3D5DB111
                                                                                                                      SHA-512:1CCE6BCAE5D1F7D80E10687F0BCA2AE1B2DD53F04A0F443DC9B552804D60E708E64326B62BA4E3787325D89837B4AC8CCCA9AF6F39CBD654BCC8A9C27EA63BB8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_AU DATE_FORMAT "%e/%m/%Y".. ::msgcat::mcset en_AU TIME_FORMAT "%H:%M:%S".. ::msgcat::mcset en_AU TIME_FORMAT_12 "%I:%M:%S %P %z".. ::msgcat::mcset en_AU DATE_TIME_FORMAT "%e/%m/%Y %H:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_be.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):312
                                                                                                                      Entropy (8bit):4.870560620756039
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoCr3FuoCsX3vtfNrsoCsX3v6YNIdjoCs+3v3FnN9vn:4EnLB383H3Fb3vtNN3v6y43v3FnNNn
                                                                                                                      MD5:DDA87ACED97F9F7771788A1A0A1E4433
                                                                                                                      SHA1:E221653CD659C095098180344654770FF059331B
                                                                                                                      SHA-256:BC87754A253C1036E423FA553DA182DBC56F62A13EDA811D8CD9E8AFA40404A6
                                                                                                                      SHA-512:BB95D9241B05686CA15C413746DD06071635CB070F38847BE9702397A86C01A3D54DEBE1ACAA51834AB74DB8D0F75E353995183864E382721425756EE46B0B1E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_BE DATE_FORMAT "%d %b %Y".. ::msgcat::mcset en_BE TIME_FORMAT "%k:%M:%S".. ::msgcat::mcset en_BE TIME_FORMAT_12 "%k h %M min %S s %z".. ::msgcat::mcset en_BE DATE_TIME_FORMAT "%d %b %Y %k:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_bw.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.915769170926952
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xosmGMoss6W3v6ay/5osmT+3vR6HyFvn:4EnLB383hr8s6W3v6ay/hJ3voSVn
                                                                                                                      MD5:4CBF90CE15ECCB6B695AA78D7D659454
                                                                                                                      SHA1:30C26ADB03978C5E7288B964A14B692813D6E0B8
                                                                                                                      SHA-256:EC48F18995D46F82B1CC71EA285174505A50E3BA2017BCCE2D807149B7543FD0
                                                                                                                      SHA-512:CC809EBD1B2B5D9E918C2E2CE4E7075DFB0744C583F17C1C234D8437EF0C34654D2F09FF77544AD3430CEC78ABC70AA5F85F71AD1489A687B8087FCDFE07B088
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_BW DATE_FORMAT "%d %B %Y".. ::msgcat::mcset en_BW TIME_FORMAT_12 "%l:%M:%S %P".. ::msgcat::mcset en_BW DATE_TIME_FORMAT "%d %B %Y %l:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_ca.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):295
                                                                                                                      Entropy (8bit):4.87629705076992
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoAhgqyFjoAZF3vX5oAZF3v6cvBoAh9+3vnFDL8vn:4EnLB383FhgqWDZF3vVZF3v6cvdhI3vM
                                                                                                                      MD5:BFC4A48F5B10D137A4D32B440C47D3C6
                                                                                                                      SHA1:C90EF2A8291DE589BC12D0A5B8AF2F0B00FEB7CD
                                                                                                                      SHA-256:3CF2D0937FD95264549CF5C768B898F01D4875A3EB4A85D457D758BC11DFEC6E
                                                                                                                      SHA-512:A91B81A956A438CA7274491CA107A2647CBDFB8AEB5FD7A58238F315590C74F83F2EBA4AA5C4E9A4A54F1FC1636318E94E5E4BBEA467326E0EACED079741E640
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_CA DATE_FORMAT "%d/%m/%y".. ::msgcat::mcset en_CA TIME_FORMAT "%r".. ::msgcat::mcset en_CA TIME_FORMAT_12 "%I:%M:%S %p".. ::msgcat::mcset en_CA DATE_TIME_FORMAT "%a %d %b %Y %r %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_gb.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):286
                                                                                                                      Entropy (8bit):4.892405843607203
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoEbtvqyFjoELE3vLjoELE3v6mjoEbto+3vnFDoAkvn:4EnLB383BbtvqWHLE3vTLE3v6EbtF3vW
                                                                                                                      MD5:52E55DE8C489265064A01CEEC823DCDD
                                                                                                                      SHA1:16F314A56AE0EAC9DAD58ADDEA6B25813A5BAA05
                                                                                                                      SHA-256:C2CE5B74F9E9C190B21C5DF4106303B7B794481228FB9A57065B9C822A1059C3
                                                                                                                      SHA-512:6010F29BF75D0CB4EE4F10781423A8CC68D5018DE8C633CD1217A7FE1299A0532E8C0E5D120188B748171EB255C587BB0B64B7384A58F725F3B6A4B9EA04393E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_GB DATE_FORMAT "%d/%m/%y".. ::msgcat::mcset en_GB TIME_FORMAT "%T".. ::msgcat::mcset en_GB TIME_FORMAT_12 "%T".. ::msgcat::mcset en_GB DATE_TIME_FORMAT "%a %d %b %Y %T %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_hk.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):329
                                                                                                                      Entropy (8bit):4.851471679101967
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoa+joaQ9PoaAx/G4soaYYW3v6ay/5oaAx/T+3v4x6HyFvn:4EnLB383BSiF4KxW3v6ay/B/3v4ISVn
                                                                                                                      MD5:DE2A484508615D7C1377522AFF03E16C
                                                                                                                      SHA1:C27C0D10E7667AD95FFF731B4E45B2C6E665CC36
                                                                                                                      SHA-256:563450A38DB6C6A1911BC04F4F55B816910B3E768B1465A69F9B3BD27292DBEE
                                                                                                                      SHA-512:A360B0FD7E36BCC0FB4603D622C36199E5D4C705396C6701F29730EB5CB33D81B208541CADFAED5303FC329C7C6A465D23CA9584F0DEC2DE128E258478DD6661
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_HK AM "AM".. ::msgcat::mcset en_HK PM "PM".. ::msgcat::mcset en_HK DATE_FORMAT "%B %e, %Y".. ::msgcat::mcset en_HK TIME_FORMAT_12 "%l:%M:%S %P".. ::msgcat::mcset en_HK DATE_TIME_FORMAT "%B %e, %Y %l:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_ie.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):286
                                                                                                                      Entropy (8bit):4.833246107458447
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoK6qyFjoKi+3vLjoKi+3v6mjoKv+3vnFDoAkvn:4EnLB383CqW13vJ3v6b3v9dmn
                                                                                                                      MD5:57F0BBE1316D14BC41D0858902A7980A
                                                                                                                      SHA1:B68BF99A021B9F01FE69341DF06F5D1453156A97
                                                                                                                      SHA-256:9E0DCEE86A03B7BDD831E0008868A9B874C506315BF01DF3982AD3813FD3BA8E
                                                                                                                      SHA-512:864F32254AAD39859AFC47D0C90DC5F38CA86EF0BBC7DE61BE253756C22B7806E616B59802C4F4D7B2F5543BF7C070FFF6FAF253E0A337EC443337E63A2E5A57
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_IE DATE_FORMAT "%d/%m/%y".. ::msgcat::mcset en_IE TIME_FORMAT "%T".. ::msgcat::mcset en_IE TIME_FORMAT_12 "%T".. ::msgcat::mcset en_IE DATE_TIME_FORMAT "%a %d %b %Y %T %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_in.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):318
                                                                                                                      Entropy (8bit):4.80637980762728
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoKr3ujoKrGtoKr5vMoKrw3v1oKr5o+3voAsvn:4EnLB383T9xvT3vJF3vonn
                                                                                                                      MD5:1A54E506E70B2125C6016B373D3DD074
                                                                                                                      SHA1:15289902BAA93208D8FB224E119166D0E044E34E
                                                                                                                      SHA-256:ADEA3A1AB8AA84237DDB2F276ABDB96DCB4C51932E920D1A5E336904E1138664
                                                                                                                      SHA-512:0D663233E6C96515713B3B829B605E72D8CE581AEF1C02FF6CA96598C040DCA42A3AC765EE9B5002E8969A331EB19A9AF0F8215F7113D0AD2F2EB2C560239D53
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_IN AM "AM".. ::msgcat::mcset en_IN PM "PM".. ::msgcat::mcset en_IN DATE_FORMAT "%d %B %Y".. ::msgcat::mcset en_IN TIME_FORMAT "%H:%M:%S".. ::msgcat::mcset en_IN DATE_TIME_FORMAT "%d %B %Y %H:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_nz.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):307
                                                                                                                      Entropy (8bit):4.939458132662909
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoyejbmvFjo63v1o63v6p6HyFjoy7+3vjb0ysvn:4EnLB383temdj3vd3v6QS1S3ven
                                                                                                                      MD5:7E81708F107658FFD31C3BFBF704A488
                                                                                                                      SHA1:7941ED040707591B68581337F8D90FA03C5E1406
                                                                                                                      SHA-256:EC305B7CB393421E6826D8F4FEA749D3902EBA53BFA488F2B463412F4070B9ED
                                                                                                                      SHA-512:8F038FF960F81D96FF9E3454D8ABDA7FFDA5B99DA304ACECC42E74DDBED839388246F66B58928DA902D3B475FBA46602B34F6829A87ECB1124FFC47C036B4DBE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_NZ DATE_FORMAT "%e/%m/%Y".. ::msgcat::mcset en_NZ TIME_FORMAT "%H:%M:%S".. ::msgcat::mcset en_NZ TIME_FORMAT_12 "%I:%M:%S %P %z".. ::msgcat::mcset en_NZ DATE_TIME_FORMAT "%e/%m/%Y %H:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_ph.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):329
                                                                                                                      Entropy (8bit):4.824360175945298
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoojoOo2e4soe3v6ay/5o27+3v4x6HyFvn:4EnLB38304u3v6ay/k3v4ISVn
                                                                                                                      MD5:E2E3BD806C20D7FB88109B7F3B84C072
                                                                                                                      SHA1:2D7AD6BECA9C4D611BAE9747AD55A3E9385C2B42
                                                                                                                      SHA-256:3A9C22B07906544C04F7A29B800FCE87C09D7FDF5C251236925115CF251A3890
                                                                                                                      SHA-512:B14756B59BCABF8B29B41AC688E4F3A011735AF190B88F88B7B5FDDD3DA77F63FFC0F7875B3B453729CD3BC65E79F75F6E632CA68952EF473F78337D89E80BF2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_PH AM "AM".. ::msgcat::mcset en_PH PM "PM".. ::msgcat::mcset en_PH DATE_FORMAT "%B %e, %Y".. ::msgcat::mcset en_PH TIME_FORMAT_12 "%l:%M:%S %P".. ::msgcat::mcset en_PH DATE_TIME_FORMAT "%B %e, %Y %l:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_sg.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.911413468674953
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoQW53FuoQGuX3v6ZwoQWa+3v3F0fxvn:4EnLB383V83FOJ3v62c3v3FEn
                                                                                                                      MD5:F70245D73BE985091459ADF74B089EBC
                                                                                                                      SHA1:21D52C336C08526D9DCF1AEC1F0701CB8B073D7A
                                                                                                                      SHA-256:D565679AE9AACBFE3B5273FE29BD46F46FFBB63C837D7925C11356D267F5FF82
                                                                                                                      SHA-512:171C70EB10D5E6421A55CE9B1AE99763E23FB6A6F563F69FE099D07C07FCA0CF8D3F6F00C5BB38BFF59A5F4C311506C4A9593F86C12B3B9E1861E72656B3800B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_SG DATE_FORMAT "%d %b %Y".. ::msgcat::mcset en_SG TIME_FORMAT_12 "%P %I:%M:%S".. ::msgcat::mcset en_SG DATE_TIME_FORMAT "%d %b %Y %P %I:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_za.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):251
                                                                                                                      Entropy (8bit):4.937431055623088
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoOr0lIZoOK3v6poOs+3v0l6Uvn:4EnLB383z+3v6R3vl2n
                                                                                                                      MD5:FCA7B13CA6C9527D396A95BEA94CC92D
                                                                                                                      SHA1:E6F338A08F72DA11B97F70518D1565E6EF9AD798
                                                                                                                      SHA-256:67C253E2A187AA814809418E5B7A21F3A1F9FB5073458A59D80290F58C6C1EB4
                                                                                                                      SHA-512:37B8B4EA24B1C77AF0252A17660650CB2D4F8BB55C75817D6A94E1B81A3DDEF9913D12D3BF80C7BFE524CD0AD84E353E73238056759E6545BFE69EF5F806B8B7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_ZA DATE_FORMAT "%Y/%m/%d".. ::msgcat::mcset en_ZA TIME_FORMAT_12 "%I:%M:%S".. ::msgcat::mcset en_ZA DATE_TIME_FORMAT "%Y/%m/%d %I:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\en_zw.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.934659260313229
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoEmGMoEs6W3v6ay/5oEmT+3vR6HyFvn:4EnLB383Zr0s6W3v6ay/ZJ3voSVn
                                                                                                                      MD5:A302091F490344B7A79C9463480AD7CF
                                                                                                                      SHA1:E3992D665077177BAD5A4771F1BAF52C2AD1829C
                                                                                                                      SHA-256:6F4754CE29DFA4F0E7957923249151CE8277395D1AF9F102D61B185F85899E4E
                                                                                                                      SHA-512:FEBDB0BD6D0FD4C592DB781836F93F0C579399D324112F8829B769303CC6EEA487AAB14EBD60ED1B4F3B3DABF501601C9F65656327FF54853BF2CD9EC6A2F00F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset en_ZW DATE_FORMAT "%d %B %Y".. ::msgcat::mcset en_ZW TIME_FORMAT_12 "%l:%M:%S %P".. ::msgcat::mcset en_ZW DATE_TIME_FORMAT "%d %B %Y %l:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\eo.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1285
                                                                                                                      Entropy (8bit):4.3537859241297845
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83dRb4vyomrIsmZ55vrAO0LH+50ydAcveva:43PT5rWvrAR60yW6oa
                                                                                                                      MD5:D87605E6282713EED41D56D53B7A04FD
                                                                                                                      SHA1:41AAD4BD3B72CCBB6A762FEED3C24931642DD867
                                                                                                                      SHA-256:98D52CAB5CA65789D1DC37949B65BAF0272AB87BCCBB4D4982C3AF380D5406AB
                                                                                                                      SHA-512:4A4F51B2FD0248B52530B5D9FE6BFCFE455147CBE2C1F073804A53666945405F89CBBAD219FFF6904C1F92885F7C53B9D9A969732D662CEA8EC1717B3303B294
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset eo DAYS_OF_WEEK_ABBREV [list \.. "di"\.. "lu"\.. "ma"\.. "me"\.. "\u0135a"\.. "ve"\.. "sa"].. ::msgcat::mcset eo DAYS_OF_WEEK_FULL [list \.. "diman\u0109o"\.. "lundo"\.. "mardo"\.. "merkredo"\.. "\u0135a\u016ddo"\.. "vendredo"\.. "sabato"].. ::msgcat::mcset eo MONTHS_ABBREV [list \.. "jan"\.. "feb"\.. "mar"\.. "apr"\.. "maj"\.. "jun"\.. "jul"\.. "a\u016dg"\.. "sep"\.. "okt"\.. "nov"\.. "dec"\.. ""].. ::msgcat::mcset eo MONTHS_FULL [list \.. "januaro"\.. "februaro"\.. "marto"\.. "aprilo"\.. "majo"\.. "junio"\.. "julio"\.. "a\u016dgusto"\.. "septembro"\.. "oktobro"\.. "novembro"\.. "decembro"\.. ""].. ::m

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1232
                                                                                                                      Entropy (8bit):4.2910064237800025
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83hEVIhlp4herIsYoorrClH+Fo9ARhprBvtFvr6:43OVY7+ercrmsYsr1thr6
                                                                                                                      MD5:91DE6EE8E1A251EF73CC74BFB0216CAC
                                                                                                                      SHA1:1FB01E3CF2CAFA95CC451BC34AB89DC542BBD7DD
                                                                                                                      SHA-256:E9A6FE8CCE7C808487DA505176984D02F7D644425934CEDB10B521FE1E796202
                                                                                                                      SHA-512:46CFD80E68461F165EE6A93AB6B433E4D4DA6A9A76CB7F3EF5766AC67567A7AFFB7B4E950A5AFA7C69C91F72AC82D2A448D32E39BBFC0BF26D2257460471EEC1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es DAYS_OF_WEEK_ABBREV [list \.. "dom"\.. "lun"\.. "mar"\.. "mi\u00e9"\.. "jue"\.. "vie"\.. "s\u00e1b"].. ::msgcat::mcset es DAYS_OF_WEEK_FULL [list \.. "domingo"\.. "lunes"\.. "martes"\.. "mi\u00e9rcoles"\.. "jueves"\.. "viernes"\.. "s\u00e1bado"].. ::msgcat::mcset es MONTHS_ABBREV [list \.. "ene"\.. "feb"\.. "mar"\.. "abr"\.. "may"\.. "jun"\.. "jul"\.. "ago"\.. "sep"\.. "oct"\.. "nov"\.. "dic"\.. ""].. ::msgcat::mcset es MONTHS_FULL [list \.. "enero"\.. "febrero"\.. "marzo"\.. "abril"\.. "mayo"\.. "junio"\.. "julio"\.. "agosto"\.. "septiembre"\.. "octubre"\.. "noviembre"\.. "diciembre"\.. ""].. ::msgc

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_ar.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):248
                                                                                                                      Entropy (8bit):4.878377455979812
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xo8GzvFjot/W3v1o8T+3v9ysvn:4EnLB3833GzdV3vLK3vnn
                                                                                                                      MD5:313966A7E4F50BB77996FDE45E342CA9
                                                                                                                      SHA1:021DF7211DAE9A635D52F7005672C157DBBAE182
                                                                                                                      SHA-256:B97DCEA4FEC3E14632B1511D8C4F9E5A157D97B4EBBC7C6EE100C3558CB2947F
                                                                                                                      SHA-512:79DCC76263310523BAF1100C70918FCE6BECB47BE360E4A26F11C61F27E14FC28B588A9253AA0C1F08F45AE8A03312A30FBDCF4FDFFDC5BF9D086C4B539DE022
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_AR DATE_FORMAT "%d/%m/%Y".. ::msgcat::mcset es_AR TIME_FORMAT "%H:%M:%S".. ::msgcat::mcset es_AR DATE_TIME_FORMAT "%d/%m/%Y %H:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_bo.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.924579610789789
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoYePWWjoU3v6ry/5oY7+3vPUe6HyFvn:4EnLB383nedh3v6ry/nS3vs3SVn
                                                                                                                      MD5:EF58B1097A3C6F2133BD7AA8CCC1AD1B
                                                                                                                      SHA1:BD479E4635F3CD70A6A90E07B7E92757BC9E2687
                                                                                                                      SHA-256:B47F55539DB6F64304DEA080D6F9A39165F1B9D4704DCBA4C182DBD3AA31A11B
                                                                                                                      SHA-512:F9EB1489E5002200D255A45DC57132DEFD2A2C6DE5BC049D0D9720575E4FDD1B6A212D9E15974C6A2E0D0886069EA0DD967AD7C20845EC38EB74CBED0C3E5BE1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_BO DATE_FORMAT "%d-%m-%Y".. ::msgcat::mcset es_BO TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_BO DATE_TIME_FORMAT "%d-%m-%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_cl.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.9352990174129925
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xodvPWWjok3v6ry/5odo+3vPUe6HyFvn:4EnLB383OdV3v6ry/i3vs3SVn
                                                                                                                      MD5:42BCE0EE3A3F9E9782E5DE72C989903A
                                                                                                                      SHA1:0960646417A61E8C31D408AE00B36A1284D0300E
                                                                                                                      SHA-256:9D1A2A6EBA673C6F6D964DBCDDF228CB64978F282E70E494B60D74E16A1DB9CB
                                                                                                                      SHA-512:C53DDCC17F261CFFAA2205879A131CFD23A7BCF4D3787090A0EA8D18530C4805903ED6CF31B53A34C70510A314EBBB68676E9F128289B42C5EFBC701405D5645
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_CL DATE_FORMAT "%d-%m-%Y".. ::msgcat::mcset es_CL TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_CL DATE_TIME_FORMAT "%d-%m-%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_co.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.908553844782894
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xo4FjbmvFjo4F+3v6ry/5o4++3vjb0f6HyFvn:4EnLB3831mdD+3v6ry/P3vbSVn
                                                                                                                      MD5:6A8F31AE734DCEE4845454408CDB3BC5
                                                                                                                      SHA1:A3B9A0124D3CFA9E0E5957612897B23193AD5D59
                                                                                                                      SHA-256:5FAC53ACFB305C055AFD0BA824742A78CB506046B26DAC21C73F0BB60C2B889A
                                                                                                                      SHA-512:188A65CFE2FBD04D83F363AEA166F224137C8A7009A9EBEB24B2A9AC89D9484D3A7109A4CE08F5C0A28911D81571230CC37554F4F19956AE163F9304911EE53C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_CO DATE_FORMAT "%e/%m/%Y".. ::msgcat::mcset es_CO TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_CO DATE_TIME_FORMAT "%e/%m/%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_cr.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.919346233482604
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xo76GzvFjoTW3v6ry/5o76T+3v9f6HyFvn:4EnLB383K6Gzdj3v6ry/K6K3vMSVn
                                                                                                                      MD5:2EDDA3F61BA4D049E6C871D88322CF72
                                                                                                                      SHA1:40AFB64AF810596FCBDBD742ACAFE25CE56F3949
                                                                                                                      SHA-256:A33DC22330D087B8567670B4915C334FF1741EE03F05D616CC801ECFDA1D9E64
                                                                                                                      SHA-512:B6A6059B44F064C5CB59A3DAFAA7BE9064EE3E38F5FA6391017D931EF3A2B471DC4D556B7BEC6852FD1F6260EF17F476754D6BEA89E035748E9304977513CFB5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_CR DATE_FORMAT "%d/%m/%Y".. ::msgcat::mcset es_CR TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_CR DATE_TIME_FORMAT "%d/%m/%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_do.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.913083040975068
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xomerQZ2jou3v6ry/5om7+3vrQZg6HyFvn:4EnLB383sk4/3v6ry/s3vkrSVn
                                                                                                                      MD5:76CFD4F568EA799F9A4082865633FF97
                                                                                                                      SHA1:B09846BBF7A78243A5075F2DC9241791DCBA434B
                                                                                                                      SHA-256:8DC2F857E91912ED46A94EB6B37DD6170EA7BCDDCD41CB85C0926A74EE12FCC1
                                                                                                                      SHA-512:58B20A8A5D1F8C19AC36E61965106266B7E6F7E95DDD6AD9C4BB9FD7FFC561CB0E2103639D901A6A78CE2DD154CBF7F3AE0F71B4DC1CCB11DC6BB40D9C6E2157
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_DO DATE_FORMAT "%m/%d/%Y".. ::msgcat::mcset es_DO TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_DO DATE_TIME_FORMAT "%m/%d/%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_ec.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.915857529388286
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xozgzvFjoro+3v6ry/5oz9+3v9f6HyFvn:4EnLB383OgzdkF3v6ry/OI3vMSVn
                                                                                                                      MD5:94B713B1560FE7711EA746F1CEBD37CD
                                                                                                                      SHA1:E7047E8F04D731D38FA328FBC0E1856C4A8BB23D
                                                                                                                      SHA-256:52AB5A6C9DD4F130A75C049B3AF8F54B84071FC190374BCCF5FA0E1F3B91EB21
                                                                                                                      SHA-512:EE807D4D74A609F642CC3C6FC3D736708F67A6931DEB95288AB5822DA256BE4C908A346036195CF4266408458906D28BB5C715EEAFCACFC4FE45D4E6D8E435FE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_EC DATE_FORMAT "%d/%m/%Y".. ::msgcat::mcset es_EC TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_EC DATE_TIME_FORMAT "%d/%m/%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_gt.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.9102355704853435
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xohvjbmvFjoI3v6ry/5oho+3vjb0f6HyFvn:4EnLB383KmdJ3v6ry/W3vbSVn
                                                                                                                      MD5:761D0A468DF2EE75BC2CAB09D5FF38CD
                                                                                                                      SHA1:D627BE45FE71CCB3CA53153393C075FF5136C2F3
                                                                                                                      SHA-256:19B4D3025156C060A16328370A3FDB9F141298DECFC8F97BE606F6438FECE2EE
                                                                                                                      SHA-512:6CF7C9004A8A3B70495862B7D21921B1A6263C2153FEBC5C4997366498ABBFE70263B436C2B4998550780A4C3A58DCF0AAE7420FF9D414323D731FA44BD83104
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_GT DATE_FORMAT "%e/%m/%Y".. ::msgcat::mcset es_GT TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_GT DATE_TIME_FORMAT "%e/%m/%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_hn.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.947925914291734
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoIvriSFjoP3v6ry/5oIo+3vrig6HyFvn:4EnLB383V+2m3v6ry/v3v+lSVn
                                                                                                                      MD5:33CEE7F947A484B076F5FA7871A30FEB
                                                                                                                      SHA1:F77F8D1F42008770A6FF1F5097C863ECF482BEBE
                                                                                                                      SHA-256:07873D4D59BB41000706A844859C73D26B1FF794058AA83CFFCA804981A24038
                                                                                                                      SHA-512:EBF6873F9CB554489EFCD352943100C00171E49D27153769D1C4DB25E2D1F44F2D34869B596C267C9BB59ED0444468D9982137CFB1C6035FB15A855BB867133B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_HN DATE_FORMAT "%m-%d-%Y".. ::msgcat::mcset es_HN TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_HN DATE_TIME_FORMAT "%m-%d-%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_mx.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.9102355704853435
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoPjbmvFjoH+3v6ry/5oI+3vjb0f6HyFvn:4EnLB383UmdD3v6ry/k3vbSVn
                                                                                                                      MD5:678D7A6DC32355246BF3AC485A24AF4D
                                                                                                                      SHA1:B6C273D3BE5FB9F5A221B0333870CCE41CEDFDE4
                                                                                                                      SHA-256:A0F57137D2C0ABDC933E03CFB188F5632176C195CEADB9DC80D469C8DC6CEDC6
                                                                                                                      SHA-512:571404CCB0591C681C975E3F7A6C6972FAF2362F1D48BFC95E69A9EAE2DB3F40BF4B666C41950C4924E3FD820C61ED91204F92283B8554F1BD35B64D53BD4125
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_MX DATE_FORMAT "%e/%m/%Y".. ::msgcat::mcset es_MX TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_MX DATE_TIME_FORMAT "%e/%m/%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_ni.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.918215906418583
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoe/GriSFjo3W3v6ry/5oe/T+3vrig6HyFvn:4EnLB383Re+2eW3v6ry/RS3v+lSVn
                                                                                                                      MD5:471C41907CE5DB1F30C647A789870F78
                                                                                                                      SHA1:C575A639609620AF7C56430991D0E4C2B50BDEC5
                                                                                                                      SHA-256:6250663DA1378E54BEDCEF206583D212BC0D61D04D070495238D33715BB20CAE
                                                                                                                      SHA-512:CAE32DF8F583542CAFE3292501725D85B697A5C1F9A0A7993490E8A69B6CE5CE3DE3AA2733B14D989A8D13B5E31B437DB42E9AB9D1851FE72313592C752B5061
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_NI DATE_FORMAT "%m-%d-%Y".. ::msgcat::mcset es_NI TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_NI DATE_TIME_FORMAT "%m-%d-%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_pa.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.906719336603863
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoX5rQZ2joHE3v6ry/5oXa+3vrQZg6HyFvn:4EnLB383ak4F3v6ry/G3vkrSVn
                                                                                                                      MD5:571F6716293442672521F70854A5AD05
                                                                                                                      SHA1:525EBDEA6F85FC769B6C0C0B179BD98381647123
                                                                                                                      SHA-256:EBB661C1C09E7D4F6FBCC4B2DAD0F41442B1FFDD27F003ABDC0375DD316E57D7
                                                                                                                      SHA-512:C6176EE48515BDFC09B8347DAC5FD2C0165AA765916457DC7B057E526785AC912481CB72F118D2943372213B23CE3C39739263C2B3DA4DBFEB24C522ACC0439D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_PA DATE_FORMAT "%m/%d/%Y".. ::msgcat::mcset es_PA TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_PA DATE_TIME_FORMAT "%m/%d/%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_pe.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.90959433688075
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoIgzvFjoQ9X3v6ry/5oI9+3v9f6HyFvn:4EnLB383+zdB3v6ry/y3vMSVn
                                                                                                                      MD5:5A5997D834DDD3E2E8FF8C6956AD54AC
                                                                                                                      SHA1:AB4110E37B3665D738A8F2B3E64CBA9E99127301
                                                                                                                      SHA-256:90C130B66958CF63CB3DDD2C633E58444357DBAB44C56831DD794CBD2EB1AED0
                                                                                                                      SHA-512:1FEB8E77EA7B886E4A06279AC8A4B6200DBB86DCD28989651B92A0C9147A7BCFBB871DF8F904A1CF8F869BFFBD21325505AC44A4DBEBE1EFC87D43174597F1F3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_PE DATE_FORMAT "%d/%m/%Y".. ::msgcat::mcset es_PE TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_PE DATE_TIME_FORMAT "%d/%m/%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_pr.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.905689521403511
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xo06GriSFjoeW3v6ry/5o06T+3vrig6HyFvn:4EnLB383gG+263v6ry/gK3v+lSVn
                                                                                                                      MD5:CE811BB8D12C7E6D53338759CCFB0A22
                                                                                                                      SHA1:0AED290AA479DE6887CCB58D3F0A0F379EF8D558
                                                                                                                      SHA-256:F790E8E48DC079DCD7DEB58170561006A31294F7E4ACBF9CF2ABFA3DB9E3FA9E
                                                                                                                      SHA-512:0C73654CC3D33F76D9BF545BD6C5E42CBDD10B6D9750BFD6536806010F3B6A3C3647FB9D5E7E75A39823FDB857E13D07B7F987809C94B9F980E6D3A6D3108E85
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_PR DATE_FORMAT "%m-%d-%Y".. ::msgcat::mcset es_PR TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_PR DATE_TIME_FORMAT "%m-%d-%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_py.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.917539255090736
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xo/5zvFjovE3v6ry/5o/a+3v9f6HyFvn:4EnLB383Czdt3v6ry/+3vMSVn
                                                                                                                      MD5:9CD6FAC4121E3D287C87157142E32845
                                                                                                                      SHA1:3081FE2197017EC8E052756A407880C1C4ED026A
                                                                                                                      SHA-256:70263F7EB22822DFEE8849B7AC4418ED9331275A71E77236B59226396505CDFF
                                                                                                                      SHA-512:25DC054085C4078734988EEDD87E31ABE93DA8B43512E924DE4BCDE9F8EC670436B72FAD1855484F9AC71DD0BEDD9ED30304D02219C4FFC4B0516D8889BDF9F9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_PY DATE_FORMAT "%d/%m/%Y".. ::msgcat::mcset es_PY TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_PY DATE_TIME_FORMAT "%d/%m/%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_sv.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.929035824905457
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xofriSFjo3+3v6ry/5oY+3vrig6HyFvn:4EnLB383Y+22+3v6ry/Q3v+lSVn
                                                                                                                      MD5:AF300EA6E733DC6820768EA16194B472
                                                                                                                      SHA1:7766A6EB3D07BCC759CF6718EF3D6EC3FCE13565
                                                                                                                      SHA-256:26A38B3745C95673D21BABB987F1D41EE08DDA945C670F5432BA0CE6F893C0E9
                                                                                                                      SHA-512:C38D67C912584BE539D71881C6517AC186CBB336A160602DA716CE2708B2D38CE8FA7DD23EDB98890ABB7119B924B6C7816C18EC18F20C49D6284DF2386E32EE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_SV DATE_FORMAT "%m-%d-%Y".. ::msgcat::mcset es_SV TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_SV DATE_TIME_FORMAT "%m-%d-%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_uy.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.923802447598272
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xooygzvFjooq9X3v6ry/5ooy9+3v9f6HyFvn:4EnLB3835rzdbsX3v6ry/5J3vMSVn
                                                                                                                      MD5:2DC550FEC3F477B1159B824479BCE707
                                                                                                                      SHA1:4D0B20CF3E50B64D74655A405A7750E0B0BB4375
                                                                                                                      SHA-256:1291B58810739EA0651493DD7887F5EE3E14BDB806E06DD4BB8AE2520C742EDA
                                                                                                                      SHA-512:B12B927ACA6274904928A6A6CAEC8339A794C74A1F1804FF93AABC132AF9AD8AC5117F20067A60EFEBC9887150D7ACA5BE9643FF61509666011FD203211C25B9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_UY DATE_FORMAT "%d/%m/%Y".. ::msgcat::mcset es_UY TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_UY DATE_TIME_FORMAT "%d/%m/%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\es_ve.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.928484426267027
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoXrzvFjoXK3v6ry/5oXs+3v9f6HyFvn:4EnLB3838zdv3v6ry/c3vMSVn
                                                                                                                      MD5:184D6C4B9F0AA874DEB959F63F7CC01B
                                                                                                                      SHA1:5FB370B498289590C977F6B489FF646F0FB27425
                                                                                                                      SHA-256:91191517403C712299919F9C797F952502E33CB6961D1DBEE3A7C9E8D2B170B9
                                                                                                                      SHA-512:881CCAB0950AE993744ECCA141120C005F53D684167A3E5CBDDF950D110D630FB2B4F6AE6E3D0E06D5110AE25EA00A4F4DAFB03AD3B227DC8C63464D434431DA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset es_VE DATE_FORMAT "%d/%m/%Y".. ::msgcat::mcset es_VE TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset es_VE DATE_TIME_FORMAT "%d/%m/%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\et.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1258
                                                                                                                      Entropy (8bit):4.391217201307309
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83P1Y2+1YoQVTsC/m48qpRTVTR7I/68qqq4Z0yoN7emG5wsvtqmsv5t:43P1p+1jQ9sq8y9v8Yko7emG5wKtqmKX
                                                                                                                      MD5:C8C5EF2FA6DD8DBD5BBD2699BE1A0BF6
                                                                                                                      SHA1:F5E26B40786B8987C98F9CBDEF5522043574A9ED
                                                                                                                      SHA-256:4BEE224C21B0483CFF39BE145C671AA20CB7872C8727FD918C0E8ECA2BBEB172
                                                                                                                      SHA-512:757FA85C137A11C1A3F4A8392C7A4E4030A67D0E593FA25A98BEC07DB295399AB2C0D9EBE61E07420B14387A29C060DC3AF812A1E7B85110DBB13C3C3DCB3600
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset et DAYS_OF_WEEK_ABBREV [list \.. "P"\.. "E"\.. "T"\.. "K"\.. "N"\.. "R"\.. "L"].. ::msgcat::mcset et DAYS_OF_WEEK_FULL [list \.. "p\u00fchap\u00e4ev"\.. "esmasp\u00e4ev"\.. "teisip\u00e4ev"\.. "kolmap\u00e4ev"\.. "neljap\u00e4ev"\.. "reede"\.. "laup\u00e4ev"].. ::msgcat::mcset et MONTHS_ABBREV [list \.. "Jaan"\.. "Veebr"\.. "M\u00e4rts"\.. "Apr"\.. "Mai"\.. "Juuni"\.. "Juuli"\.. "Aug"\.. "Sept"\.. "Okt"\.. "Nov"\.. "Dets"\.. ""].. ::msgcat::mcset et MONTHS_FULL [list \.. "Jaanuar"\.. "Veebruar"\.. "M\u00e4rts"\.. "Aprill"\.. "Mai"\.. "Juuni"\.. "Juuli"\.. "August"\.. "September"\.. "Oktoober"\.. "November"\.. "De

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\eu.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1032
                                                                                                                      Entropy (8bit):4.002617252503668
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83DEXk8TT7vXk8TTMtzCIsOo/ssP6tvf1I49sHT:434bTbbTc+RjKi4mz
                                                                                                                      MD5:ED9805AF5BFB54EB28C6CB3975F86F5B
                                                                                                                      SHA1:2BD91BD850028712F35A2DDB2555036FBF6E8114
                                                                                                                      SHA-256:6889B57D29B670C6CFB7B5A3F2F1749D12C802E8E9629014D06CE23C034C7EF1
                                                                                                                      SHA-512:16F31DE5D2B0D3ED2D975C7891C73C48F073CDAC28F17572FC9424C2D384DDFE9E5E235F17C788F42840CB2D819D2D9499B909AB80FEF1B09F2AE1627CF1DADC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset eu DAYS_OF_WEEK_ABBREV [list \.. "igandea"\.. "astelehena"\.. "asteartea"\.. "asteazkena"\.. "osteguna"\.. "ostirala"\.. "larunbata"].. ::msgcat::mcset eu DAYS_OF_WEEK_FULL [list \.. "igandea"\.. "astelehena"\.. "asteartea"\.. "asteazkena"\.. "osteguna"\.. "ostirala"\.. "larunbata"].. ::msgcat::mcset eu MONTHS_ABBREV [list \.. "urt"\.. "ots"\.. "mar"\.. "api"\.. "mai"\.. "eka"\.. "uzt"\.. "abu"\.. "ira"\.. "urr"\.. "aza"\.. "abe"\.. ""].. ::msgcat::mcset eu MONTHS_FULL [list \.. "urtarrila"\.. "otsaila"\.. "martxoa"\.. "apirila"\.. "maiatza"\.. "ekaina"\.. "uztaila"\.. "abuztua"\.. "iraila"\.. "urria"\.. "azaroa"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\eu_es.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):294
                                                                                                                      Entropy (8bit):4.915392589807169
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoszFnJF+l6VvBoszw3vLjoszw3v6mjosz++3v/RHvn:4EnLB383FL+l6VQ3vO3v6G3vZPn
                                                                                                                      MD5:4C91AA000D4316585893025CBB96E910
                                                                                                                      SHA1:3D4E73839A1A8CB9DEC1E59D9D2813257D9480F0
                                                                                                                      SHA-256:D45CC432E5743E6CEC34E9A1E0F91A9D5C315CDA409E0826B51AD9D908479EB6
                                                                                                                      SHA-512:0731F2EEB22ADC7EF8AF215B9EB4C5A66B33BC90E4F80CF7AA482AD002CB30543547230124A0507EC79EDDD6903A042EDA5D7C8AFD77F7FC994EFC6853FABB05
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset eu_ES DATE_FORMAT "%a, %Yeko %bren %da".. ::msgcat::mcset eu_ES TIME_FORMAT "%T".. ::msgcat::mcset eu_ES TIME_FORMAT_12 "%T".. ::msgcat::mcset eu_ES DATE_TIME_FORMAT "%y-%m-%d %T %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\fa.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1711
                                                                                                                      Entropy (8bit):4.21837106187395
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83CnMqnbxbGwgjSyiY/Xw2mS1yM/8ye48YyfNqTb2gyj/8yHkQp:43Yzyhgvs9yi4P
                                                                                                                      MD5:7AB25F4E7E457469DC61A33176B3AA72
                                                                                                                      SHA1:EEA98283D250A99E33DD4D5D9B1B76A029716CE6
                                                                                                                      SHA-256:86898728B275288693B200568DC927C3FF5B9050690876C4441A8339DAE06386
                                                                                                                      SHA-512:7524437F91E91751BEB7A378D7674C49E5D84B716FE962F4C23580C46A671F3F33638FCD37A8F90C86E24DA8F54448E06AC9C3AEFFB5613E94A04E512C1AD68D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset fa DAYS_OF_WEEK_ABBREV [list \.. "\u06cc\u2214"\.. "\u062f\u2214"\.. "\u0633\u2214"\.. "\u0686\u2214"\.. "\u067e\u2214"\.. "\u062c\u2214"\.. "\u0634\u2214"].. ::msgcat::mcset fa DAYS_OF_WEEK_FULL [list \.. "\u06cc\u06cc\u200c\u0634\u0646\u0628\u0647"\.. "\u062f\u0648\u0634\u0646\u0628\u0647"\.. "\u0633\u0647\u200c\u0634\u0646\u0628\u0647"\.. "\u0686\u0647\u0627\u0631\u0634\u0646\u0628\u0647"\.. "\u067e\u0646\u062c\u200c\u0634\u0646\u0628\u0647"\.. "\u062c\u0645\u0639\u0647"\.. "\u0634\u0646\u0628\u0647"].. ::msgcat::mcset fa MONTHS_ABBREV [list \.. "\u0698\u0627\u0646"\.. "\u0641\u0648\u0631"\.. "\u0645\u0627\u0631"\.. "\u0622\u0648\u0631"\.. "\u0645\u0640\u0647"\.. "\u0698\u0648\u0646"\.. "\u0698\u0648\u06cc"\.. "\u0627\u0648\u062a

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\fa_in.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2009
                                                                                                                      Entropy (8bit):4.491667766230948
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83KnMqnbxbGUgjDiY/Xw2mS1yM/8ye48tfNqTb2gyj/8yHkQLoRv9v/vNv0P:43wihgvsai4Rmv53JU
                                                                                                                      MD5:C59EE7CA80AD9F612A21C8B6674A820E
                                                                                                                      SHA1:AEFD631EFC1892063244FA622DE1A091C461E370
                                                                                                                      SHA-256:6B56545C1AE1DE53BC2389BB7AE59F115BADE24F907E384E079491DC77D6541D
                                                                                                                      SHA-512:42F52091480599D317FB80DF8E52A6C6F88614C6172BF4033974DD136FB30E6F47D38982C8A7BC14CF3165C3EBAE3680F94DF3A0ED079AB68165286251CD0BD7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset fa_IN DAYS_OF_WEEK_ABBREV [list \.. "\u06cc\u2214"\.. "\u062f\u2214"\.. "\u0633\u2214"\.. "\u0686\u2214"\.. "\u067e\u2214"\.. "\u062c\u2214"\.. "\u0634\u2214"].. ::msgcat::mcset fa_IN DAYS_OF_WEEK_FULL [list \.. "\u06cc\u06cc\u200c\u0634\u0646\u0628\u0647"\.. "\u062f\u0648\u0634\u0646\u0628\u0647"\.. "\u0633\u0647\u200c\u0634\u0646\u0628\u0647"\.. "\u0686\u0647\u0627\u0631\u0634\u0646\u0628\u0647"\.. "\u067e\u0646\u062c\u200c\u0634\u0646\u0628\u0647"\.. "\u062c\u0645\u0639\u0647"\.. "\u0634\u0646\u0628\u0647"].. ::msgcat::mcset fa_IN MONTHS_ABBREV [list \.. "\u0698\u0627\u0646"\.. "\u0641\u0648\u0631"\.. "\u0645\u0627\u0631"\.. "\u0622\u0648\u0631"\.. "\u0645\u0640\u0647"\.. "\u0698\u0648\u0646"\.. "\u0698\u0648\u06cc"\.. "\u0627\u0

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\fa_ir.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):426
                                                                                                                      Entropy (8bit):5.12739029869254
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:4EnLB383D2WGz7A/3vy3v6TANCmK3vz7AAbn:4aR83DoPivkvFk5vPN
                                                                                                                      MD5:9778A7C3ABD37ECBEC0BB9715E52FAF8
                                                                                                                      SHA1:D8063CA7779674EB1D9FE3E4B4774DB20B93038B
                                                                                                                      SHA-256:3D9779C27E8960143D00961F6E82124120FD47B7F3CB82DB3DF21CDD9090C707
                                                                                                                      SHA-512:B90B4A96CE5E8B9BF512B98C406603C60EA00F6740D04CD1FC30810C7155A37851AE5E28716F959137806F1A9E3152D2A0D79B8EA7E681A0737A28593657DE66
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset fa_IR AM "\u0635\u0628\u062d".. ::msgcat::mcset fa_IR PM "\u0639\u0635\u0631".. ::msgcat::mcset fa_IR DATE_FORMAT "%d\u2044%m\u2044%Y".. ::msgcat::mcset fa_IR TIME_FORMAT "%S:%M:%H".. ::msgcat::mcset fa_IR TIME_FORMAT_12 "%S:%M:%l %P".. ::msgcat::mcset fa_IR DATE_TIME_FORMAT "%d\u2044%m\u2044%Y %S:%M:%H %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\fi.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1195
                                                                                                                      Entropy (8bit):4.32217771842326
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83KTvIhmuw4tW/UWJTttWKeqA+3ewvtyv3e6:43YvIwuw4t05ttnlzt0p
                                                                                                                      MD5:CC06F0ABD8F985654DAD8256598EBCB7
                                                                                                                      SHA1:71C880F9F395ACD32AF7F538033211F392F83645
                                                                                                                      SHA-256:9929A6B7139BD7E0F29487F7888A83E4C4F5E9CE0352738CFCA94EE2DDF3BD6B
                                                                                                                      SHA-512:E1292665270B6FBF7738CC3864B55194E7B827C6AD9492FB2E54DC1B626159B243052CE502335B9D92E2B8F58A4DD1FA0E628CB6A9D1D3A652FE2B93A3FB711A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset fi DAYS_OF_WEEK_ABBREV [list \.. "su"\.. "ma"\.. "ti"\.. "ke"\.. "to"\.. "pe"\.. "la"].. ::msgcat::mcset fi DAYS_OF_WEEK_FULL [list \.. "sunnuntai"\.. "maanantai"\.. "tiistai"\.. "keskiviikko"\.. "torstai"\.. "perjantai"\.. "lauantai"].. ::msgcat::mcset fi MONTHS_ABBREV [list \.. "tammi"\.. "helmi"\.. "maalis"\.. "huhti"\.. "touko"\.. "kes\u00e4"\.. "hein\u00e4"\.. "elo"\.. "syys"\.. "loka"\.. "marras"\.. "joulu"\.. ""].. ::msgcat::mcset fi MONTHS_FULL [list \.. "tammikuu"\.. "helmikuu"\.. "maaliskuu"\.. "huhtikuu"\.. "toukokuu"\.. "kes\u00e4kuu"\.. "hein\u00e4kuu"\.. "elokuu"\.. "syyskuu"\.. "lokakuu"\.. "marraskuu"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\fo.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1033
                                                                                                                      Entropy (8bit):4.15884265510429
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR834YPxTSBFSa+E6rIsmYmyAxyIQbXHU92W1T:43a6rIyAE0B
                                                                                                                      MD5:5D224E66FD9521CA4327D4F164CD6585
                                                                                                                      SHA1:FC8F4C1D9A69931679028DE02155D96A18F6542E
                                                                                                                      SHA-256:2EC9B03469FA38B260915C93318F446EA5E12B9090BD441936B57552EBA1E3C9
                                                                                                                      SHA-512:0E0F97D99F0274A8A92AA7DC992B252A0BB696D69A8835602D8F4C03A6A15780F45971F00863436949CD81AD7DF6EE6BC463CE5B9FECF5E39508BA4D4E83C693
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset fo DAYS_OF_WEEK_ABBREV [list \.. "sun"\.. "m\u00e1n"\.. "t\u00fds"\.. "mik"\.. "h\u00f3s"\.. "fr\u00ed"\.. "ley"].. ::msgcat::mcset fo DAYS_OF_WEEK_FULL [list \.. "sunnudagur"\.. "m\u00e1nadagur"\.. "t\u00fdsdagur"\.. "mikudagur"\.. "h\u00f3sdagur"\.. "fr\u00edggjadagur"\.. "leygardagur"].. ::msgcat::mcset fo MONTHS_ABBREV [list \.. "jan"\.. "feb"\.. "mar"\.. "apr"\.. "mai"\.. "jun"\.. "jul"\.. "aug"\.. "sep"\.. "okt"\.. "nov"\.. "des"\.. ""].. ::msgcat::mcset fo MONTHS_FULL [list \.. "januar"\.. "februar"\.. "mars"\.. "apr\u00edl"\.. "mai"\.. "juni"\.. "juli"\.. "august"\.. "september"\.. "oktober"\.. "november"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\fo_fo.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):286
                                                                                                                      Entropy (8bit):4.864028070948858
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoZA4WjoZd3vLjoZd3v6mjoZd+3vnFDoAkvn:4EnLB3831P23vS3v6u3v9dmn
                                                                                                                      MD5:92E2B6483B2374817548F4EAA1731820
                                                                                                                      SHA1:071E1E9368CCB4EC864E78622B2113F460920203
                                                                                                                      SHA-256:C3DCCF5E5904C24D4AD9AAA36160A78F5397A7452510C0C0E61DE4DE863305CB
                                                                                                                      SHA-512:E79D4D38A22298252FA46D15C383CFB2A1E49E8196C265A58F9BA4982DFD9CE29E87C0B85BE3F39617359451831B792FCD3092A52EDF8FFD999AFE5CFE1D170D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset fo_FO DATE_FORMAT "%d/%m-%Y".. ::msgcat::mcset fo_FO TIME_FORMAT "%T".. ::msgcat::mcset fo_FO TIME_FORMAT_12 "%T".. ::msgcat::mcset fo_FO DATE_TIME_FORMAT "%a %d %b %Y %T %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\fr.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1257
                                                                                                                      Entropy (8bit):4.383721663740675
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR835LzAX2t6KOkPwzZIGzRmzQf1waGqHvivh:43mlwIFZtA/qPkh
                                                                                                                      MD5:4D63B4A7CF13A28A6F6784B5597EEF43
                                                                                                                      SHA1:FE1B35A93CB72666D7D6BC37D9BE081B05A00CD9
                                                                                                                      SHA-256:96B1E1E12CD13A56722EBF27D362C70B467342FA1282A40B89FB16B5105A0480
                                                                                                                      SHA-512:5647CAE859B62C7CE1CEE6426A076361D2A29EFE6B6F311DDC0E7D006194BA68D575852FEC5FDE2AB43DF8AE440C57013D32A3951095CB856327070FD9BD1C76
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset fr DAYS_OF_WEEK_ABBREV [list \.. "dim."\.. "lun."\.. "mar."\.. "mer."\.. "jeu."\.. "ven."\.. "sam."].. ::msgcat::mcset fr DAYS_OF_WEEK_FULL [list \.. "dimanche"\.. "lundi"\.. "mardi"\.. "mercredi"\.. "jeudi"\.. "vendredi"\.. "samedi"].. ::msgcat::mcset fr MONTHS_ABBREV [list \.. "janv."\.. "f\u00e9vr."\.. "mars"\.. "avr."\.. "mai"\.. "juin"\.. "juil."\.. "ao\u00fbt"\.. "sept."\.. "oct."\.. "nov."\.. "d\u00e9c."\.. ""].. ::msgcat::mcset fr MONTHS_FULL [list \.. "janvier"\.. "f\u00e9vrier"\.. "mars"\.. "avril"\.. "mai"\.. "juin"\.. "juillet"\.. "ao\u00fbt"\.. "septembre"\.. "octobre"\.. "novembre"\.. "d\u00e9cembre

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\fr_be.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):286
                                                                                                                      Entropy (8bit):4.910112619660625
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoXqyFjoIX3vLjoIX3v6mjog+3vnFDoAkvn:4EnLB383AqWv3vL3v6d3v9dmn
                                                                                                                      MD5:07EEADB8C2F2425FF9A27E46A81827A2
                                                                                                                      SHA1:AA18A651C64098C7885F1F869B9F221453F42987
                                                                                                                      SHA-256:AAD828BCBB512FBD9902DCDD3812247A74913CC574DEB07DA95A7BBE74B1FE48
                                                                                                                      SHA-512:1FA60B1A69B2F5FD2C009EC18695A937C4484D7C418F7E8398D95723B857698143E0584A546F9032B75894730CBBEF78453061AC13D90199FF702E148D983C28
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset fr_BE DATE_FORMAT "%d/%m/%y".. ::msgcat::mcset fr_BE TIME_FORMAT "%T".. ::msgcat::mcset fr_BE TIME_FORMAT_12 "%T".. ::msgcat::mcset fr_BE DATE_TIME_FORMAT "%a %d %b %Y %T %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\fr_ca.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):286
                                                                                                                      Entropy (8bit):4.890376345610709
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xooIso13vLjo13v6mjo1+3vnFDoAkvn:4EnLB383vIF3vU3v6A3v9dmn
                                                                                                                      MD5:2F70BDDE7685E2892C5F79C632FC2F0F
                                                                                                                      SHA1:FD1A6F6042E59D1563ABB5858C348C1D785C435E
                                                                                                                      SHA-256:0624DF9A56723DDB89E59736C20A5837DEA2206A789EBE7EEF19AD287590CA45
                                                                                                                      SHA-512:50FC0C91AB2C75FFC4F100C0D42DFC4B2101DB9713FD77E6FF5BF3F25A0AF4A535A4709CF4586809CEEE76C25B66ABC0DD4FD61524510C57AA0E63EA8F46E8D5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset fr_CA DATE_FORMAT "%Y-%m-%d".. ::msgcat::mcset fr_CA TIME_FORMAT "%T".. ::msgcat::mcset fr_CA TIME_FORMAT_12 "%T".. ::msgcat::mcset fr_CA DATE_TIME_FORMAT "%a %d %b %Y %T %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\fr_ch.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):288
                                                                                                                      Entropy (8bit):4.913241133684606
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoFt28oF+3vLjoF+3v6mjo++3vnFDoAkvn:4EnLB383yte+3vs+3v6/3v9dmn
                                                                                                                      MD5:83FC7EBA68C3727F7C13C8EEAF79823F
                                                                                                                      SHA1:81C27F9B97F5F5190F7189230535EC09CD228158
                                                                                                                      SHA-256:290CA6EB74BAEAC4E2420D0755D148849F89EE87E37860F25CBB7B8AFA3EDCBC
                                                                                                                      SHA-512:35DA46558A246D7B3FAB02208001CE986E2E6DD88D6318AF743F4E81CA6920471D1425BB009A7476A79E7F61E1353C027B765331CD8EFA07A9E884DCB73F2195
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset fr_CH DATE_FORMAT "%d. %m. %y".. ::msgcat::mcset fr_CH TIME_FORMAT "%T".. ::msgcat::mcset fr_CH TIME_FORMAT_12 "%T".. ::msgcat::mcset fr_CH DATE_TIME_FORMAT "%a %d %b %Y %T %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ga.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1188
                                                                                                                      Entropy (8bit):4.314271783103334
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR835k0CM/hlrXa754pD73/tKSx54pbIK5f2CA:43W05rXUa173/VadDA
                                                                                                                      MD5:67D137E5D853DB61A4B4264871E793F7
                                                                                                                      SHA1:4280E7F662DE792175AF8B4C93874F035F716F0F
                                                                                                                      SHA-256:880806867ACABD9B39E3029A5ADD26B690CC5709082D43B0959EBA725EA07AB5
                                                                                                                      SHA-512:C27B745143539D3E6D94BB754DCA35065CDE9B1AA6EE038D47F658175CFACC20236124D38BE5BBB03CAF8F613BD748C43CB8DFCC9234E915D18B5A477BAEF94E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ga DAYS_OF_WEEK_ABBREV [list \.. "Domh"\.. "Luan"\.. "M\u00e1irt"\.. "C\u00e9ad"\.. "D\u00e9ar"\.. "Aoine"\.. "Sath"].. ::msgcat::mcset ga DAYS_OF_WEEK_FULL [list \.. "D\u00e9 Domhnaigh"\.. "D\u00e9 Luain"\.. "D\u00e9 M\u00e1irt"\.. "D\u00e9 C\u00e9adaoin"\.. "D\u00e9ardaoin"\.. "D\u00e9 hAoine"\.. "D\u00e9 Sathairn"].. ::msgcat::mcset ga MONTHS_ABBREV [list \.. "Ean"\.. "Feabh"\.. "M\u00e1rta"\.. "Aib"\.. "Beal"\.. "Meith"\.. "I\u00fail"\.. "L\u00fan"\.. "MF\u00f3mh"\.. "DF\u00f3mh"\.. "Samh"\.. "Noll"\.. ""].. ::msgcat::mcset ga MONTHS_FULL [list \.. "Ean\u00e1ir"\.. "Feabhra"\.. "M\u00e1rta"\.. "Aibre\u00e1n"\.. "M\u00ed na Bealtaine"\.. "Meith"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ga_ie.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):286
                                                                                                                      Entropy (8bit):4.824539027053997
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xobHAygDobHAqo+3vLjobHAqo+3v6mjobHAy9+3vnFDoAkv:4EnLB383p23vy3v6a3v9dmn
                                                                                                                      MD5:C27BD7F317AAADB380F4C38AE0D2FDA6
                                                                                                                      SHA1:79870A0E68AA0A9B301414EDC21889F83BB81E40
                                                                                                                      SHA-256:3F9615C617D3CDBC1E127B3EFEE785B0CB5E92E17B7DABAC80DA2BEAF076362C
                                                                                                                      SHA-512:3605B9A914284CF1D3CC90DF2F21A86C0472AEE59800942DC93D842C7AE164E1DA72813787F163DC80B72269D2C391953ABAD6A8B72CCF069BEE96D418A173E9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ga_IE DATE_FORMAT "%d.%m.%y".. ::msgcat::mcset ga_IE TIME_FORMAT "%T".. ::msgcat::mcset ga_IE TIME_FORMAT_12 "%T".. ::msgcat::mcset ga_IE DATE_TIME_FORMAT "%a %d %b %Y %T %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\gl.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):997
                                                                                                                      Entropy (8bit):4.120890519790248
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83okzalCcPdJ5rK8yzMY4JlV1ZDqqIkFo8w:43JkPj9K8y4HHZLIQtw
                                                                                                                      MD5:A3D098C1A47E380F7C25233A52FBDE38
                                                                                                                      SHA1:C97E4EAA9E7A7F99950F422B93C57134B532C639
                                                                                                                      SHA-256:34D61B49DBF9584893051FFB458D6DE9E7E2E7774AC0011F70C4DD4184EBA81C
                                                                                                                      SHA-512:4687AB3D2FAA65FED90678EBC08C074959E93A9FEFAF3D61EEE39DB08FD200CB57C0DDB4DDBF6451FE1EF5E07EA976EDEF830769FF403CE51734129CEF24DA9F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset gl DAYS_OF_WEEK_ABBREV [list \.. "Dom"\.. "Lun"\.. "Mar"\.. "M\u00e9r"\.. "Xov"\.. "Ven"\.. "S\u00e1b"].. ::msgcat::mcset gl DAYS_OF_WEEK_FULL [list \.. "Domingo"\.. "Luns"\.. "Martes"\.. "M\u00e9rcores"\.. "Xoves"\.. "Venres"\.. "S\u00e1bado"].. ::msgcat::mcset gl MONTHS_ABBREV [list \.. "Xan"\.. "Feb"\.. "Mar"\.. "Abr"\.. "Mai"\.. "Xu\u00f1"\.. "Xul"\.. "Ago"\.. "Set"\.. "Out"\.. "Nov"\.. "Dec"\.. ""].. ::msgcat::mcset gl MONTHS_FULL [list \.. "Xaneiro"\.. "Febreiro"\.. "Marzo"\.. "Abril"\.. "Maio"\.. "Xu\u00f1o"\.. "Xullo"\.. "Agosto"\.. "Setembro"\.. "Outubro"\.. "Novembro"\.. "Decembro"\.. ""]..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\gl_es.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.886176304042503
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoPhkgMoPxsF3v6ay/5oPhk9+3vR6HyFvn:4EnLB383WrfK3v6ay/WJ3voSVn
                                                                                                                      MD5:78B9163C5E8E5E7049CBF91D1A5889A4
                                                                                                                      SHA1:F2F07AF3D79D61C8E0C73B13E2CA8266E10E396B
                                                                                                                      SHA-256:B5688CA07D713227B713655877710258CD503617E8DF79293A971649E3134F05
                                                                                                                      SHA-512:E86074B687670542CFA097C94D150292E1A73C9F231E92CD84386580A446569CC6F8F5817F46ED64A1D00F95D59F6F1F5D4B961DF3C8335938D83F3517794353
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset gl_ES DATE_FORMAT "%d %B %Y".. ::msgcat::mcset gl_ES TIME_FORMAT_12 "%l:%M:%S %P".. ::msgcat::mcset gl_ES DATE_TIME_FORMAT "%d %B %Y %l:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\gv.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1084
                                                                                                                      Entropy (8bit):4.213672208102291
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR832vTXAC2/fS5JfaCroeLaCAQbSm5qJe1:43QTXs32zrf
                                                                                                                      MD5:518FC3964D50854081FB79189A42D3E7
                                                                                                                      SHA1:59392F16CD56E3E6A685F78974D539FB3A972B98
                                                                                                                      SHA-256:404795F2C88D0038F9ED0B5120A251D26EDF8B236E1B1698BC71ACD4DC75AC45
                                                                                                                      SHA-512:E5C88CAB8741D631938CEC2E0959C0FE26685C395F5F9F4F1B5C9E146E84D23D897CD7A823AB46D4B62C590AE15EC76B87EB59308ACFB1BB6F61398890B43622
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset gv DAYS_OF_WEEK_ABBREV [list \.. "Jed"\.. "Jel"\.. "Jem"\.. "Jerc"\.. "Jerd"\.. "Jeh"\.. "Jes"].. ::msgcat::mcset gv DAYS_OF_WEEK_FULL [list \.. "Jedoonee"\.. "Jelhein"\.. "Jemayrt"\.. "Jercean"\.. "Jerdein"\.. "Jeheiney"\.. "Jesarn"].. ::msgcat::mcset gv MONTHS_ABBREV [list \.. "J-guer"\.. "T-arree"\.. "Mayrnt"\.. "Avrril"\.. "Boaldyn"\.. "M-souree"\.. "J-souree"\.. "Luanistyn"\.. "M-fouyir"\.. "J-fouyir"\.. "M.Houney"\.. "M.Nollick"\.. ""].. ::msgcat::mcset gv MONTHS_FULL [list \.. "Jerrey-geuree"\.. "Toshiaght-arree"\.. "Mayrnt"\.. "Averil"\.. "Boaldyn"\.. "Mean-souree"\.. "Jerrey-souree"\.. "Luanistyn"\.. "Mean-fouyir"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\gv_gb.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.936566750568767
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoQbtvMoQLE3v6ay/5oQbto+3vR6HyFvn:4EnLB383PbtvALE3v6ay/PbtF3voSVn
                                                                                                                      MD5:0B6BE614EF5F5F25A30D2D33701A9F94
                                                                                                                      SHA1:65800FBD73D9DAE550E04E1D818A6B9D1AEF86FE
                                                                                                                      SHA-256:86CABF3B9360C0E686CC4CBEB843E971C28BC6D35210ED378B54EB58CC41F3D5
                                                                                                                      SHA-512:376D21B38DA49A8F7C2983F2B808FD55AC9F6383BC66DF28DB99DBF61FDC9FFF8CD20F077EC3ED873EF47F0F613BDD9AD02DFFB1CB51F9A36715C7FC798C3B70
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset gv_GB DATE_FORMAT "%d %B %Y".. ::msgcat::mcset gv_GB TIME_FORMAT_12 "%l:%M:%S %P".. ::msgcat::mcset gv_GB DATE_TIME_FORMAT "%d %B %Y %l:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\he.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1990
                                                                                                                      Entropy (8bit):4.298934047406144
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83Y71LCLxL0eCLbCLKCLaCLXL7CLB0p1dLGCoCLU5LT5Gv5LJ9p5LnLEHLGCh:43sl7KqpU/nNbhbOezd2ICn
                                                                                                                      MD5:A0E60036EB17208A449AAFC3AAAE622C
                                                                                                                      SHA1:9D7479BA85FBB00A2DF2B61F4ED2CBEA8F1EC8C3
                                                                                                                      SHA-256:787DA79AF58872BF45AB09E3B6A920A4496B5BD8A4F3C7F010CF013EC2E8EFE0
                                                                                                                      SHA-512:46D12C14B5736E5EA97EB728BF58999E9D7C2CF910D8F5AFA3F5D3A86329ABF41A3E2BEBD81EE4EF64BEA0DC173B77A9FE12471C1BD9D768ED552A55B3B80213
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset he DAYS_OF_WEEK_ABBREV [list \.. "\u05d0"\.. "\u05d1"\.. "\u05d2"\.. "\u05d3"\.. "\u05d4"\.. "\u05d5"\.. "\u05e9"].. ::msgcat::mcset he DAYS_OF_WEEK_FULL [list \.. "\u05d9\u05d5\u05dd \u05e8\u05d0\u05e9\u05d5\u05df"\.. "\u05d9\u05d5\u05dd \u05e9\u05e0\u05d9"\.. "\u05d9\u05d5\u05dd \u05e9\u05dc\u05d9\u05e9\u05d9"\.. "\u05d9\u05d5\u05dd \u05e8\u05d1\u05d9\u05e2\u05d9"\.. "\u05d9\u05d5\u05dd \u05d7\u05de\u05d9\u05e9\u05d9"\.. "\u05d9\u05d5\u05dd \u05e9\u05d9\u05e9\u05d9"\.. "\u05e9\u05d1\u05ea"].. ::msgcat::mcset he MONTHS_ABBREV [list \.. "\u05d9\u05e0\u05d5"\.. "\u05e4\u05d1\u05e8"\.. "\u05de\u05e8\u05e5"\.. "\u05d0\u05e4\u05e8"\.. "\u05de\u05d0\u05d9"\.. "\u05d9\u05d5\u05e0"\.. "\u05d9\u05d5\u05dc"\.. "\u05d0\u05d5\u05d2"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\hi.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1777
                                                                                                                      Entropy (8bit):4.2117128941697715
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:438n4kALqrU1fbokQTbWqrU1fbokQTw38:28OD86D8gM
                                                                                                                      MD5:4219A929E27308ADC04A9F368F063F38
                                                                                                                      SHA1:FA728EEBA8751F4CE032ED32AECFDE124D1B68E2
                                                                                                                      SHA-256:192F4A8E77E1627712F85533C9896EF6A040157C7BD56DF3A4A7FA56AD6746C2
                                                                                                                      SHA-512:223B137AC1FC15908F5541067736EF3A29493549B963393EB78660036A82982E57CFC4AD09CBD33D32A5187FF9F4ACFB5F83A0C974702434B7FAD1B2539B7F76
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset hi DAYS_OF_WEEK_FULL [list \.. "\u0930\u0935\u093f\u0935\u093e\u0930"\.. "\u0938\u094b\u092e\u0935\u093e\u0930"\.. "\u092e\u0902\u0917\u0932\u0935\u093e\u0930"\.. "\u092c\u0941\u0927\u0935\u093e\u0930"\.. "\u0917\u0941\u0930\u0941\u0935\u093e\u0930"\.. "\u0936\u0941\u0915\u094d\u0930\u0935\u093e\u0930"\.. "\u0936\u0928\u093f\u0935\u093e\u0930"].. ::msgcat::mcset hi MONTHS_ABBREV [list \.. "\u091c\u0928\u0935\u0930\u0940"\.. "\u092b\u093c\u0930\u0935\u0930\u0940"\.. "\u092e\u093e\u0930\u094d\u091a"\.. "\u0905\u092a\u094d\u0930\u0947\u0932"\.. "\u092e\u0908"\.. "\u091c\u0942\u0928"\.. "\u091c\u0941\u0932\u093e\u0908"\.. "\u0905\u0917\u0938\u094d\u0924"\.. "\u0938\u093f\u0924\u092e\u094d\u092c\u0930"\.. "\u0905\u0915\u094d\u091f\u0942\u092c\u0930"\.. "\u0928\u0935\u

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\hi_in.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.9286948144352865
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xocv+IZoz3v6ry/5oco+3v+6f6HyFvn:4EnLB383Jvlg3v6ry/JF3vmSVn
                                                                                                                      MD5:1C1E1484EA0286175FADCB90937C9F34
                                                                                                                      SHA1:5CA1BF19021D529CB3B3A308EFFFCA7E4D073640
                                                                                                                      SHA-256:5A3BF0DD61BFB5A2BF75E96B11E0E3528FFAB720A0BF1923853606F8CAF0E76D
                                                                                                                      SHA-512:F9A43E1E18ADB6DC6B18BEDC3303A99F514DF6CA54F12100989F734233012D7D60216116915351CCACC12F6942795BF8F3BBD26B15A86E88101067D64BEE54F5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset hi_IN DATE_FORMAT "%d %M %Y".. ::msgcat::mcset hi_IN TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset hi_IN DATE_TIME_FORMAT "%d %M %Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\hr.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1171
                                                                                                                      Entropy (8bit):4.36311224714184
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83dVX79VIE9bLTWnh7rT+5dPcdvgrNv5KvOA1:43kmrQ7n+odIrJ6OS
                                                                                                                      MD5:906963A3AD09EAC781B35C190B77484E
                                                                                                                      SHA1:E5AA49DA9C4987EAFA839115F84612426EB8615E
                                                                                                                      SHA-256:105A9180BC5D23738183374FA0EA8DD80484BF3947E1432E515BDC2913C017D9
                                                                                                                      SHA-512:557BD1C8306750D09215D9774069A52C7D60E03DE2DF39FF909A8F658AB0565739D127E24ACDC96F736C69A71BEFA30B8A30BB489C7B7FDEA85386C802166349
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset hr DAYS_OF_WEEK_ABBREV [list \.. "ned"\.. "pon"\.. "uto"\.. "sri"\.. "\u010det"\.. "pet"\.. "sub"].. ::msgcat::mcset hr DAYS_OF_WEEK_FULL [list \.. "nedjelja"\.. "ponedjeljak"\.. "utorak"\.. "srijeda"\.. "\u010detvrtak"\.. "petak"\.. "subota"].. ::msgcat::mcset hr MONTHS_ABBREV [list \.. "sij"\.. "vel"\.. "o\u017eu"\.. "tra"\.. "svi"\.. "lip"\.. "srp"\.. "kol"\.. "ruj"\.. "lis"\.. "stu"\.. "pro"\.. ""].. ::msgcat::mcset hr MONTHS_FULL [list \.. "sije\u010danj"\.. "velja\u010da"\.. "o\u017eujak"\.. "travanj"\.. "svibanj"\.. "lipanj"\.. "srpanj"\.. "kolovoz"\.. "rujan"\.. "listopad"\.. "studeni"\.. "prosinac"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\hu.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1381
                                                                                                                      Entropy (8bit):4.511450677731002
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83IFb7ZTmKrkAYm2LZyyApLDV2uZi5WF+shHUTyvtsv+:43C3ZTmKQAyZyyAp0BotK+
                                                                                                                      MD5:E398158EE1CD49CB5286D9642D4A61DD
                                                                                                                      SHA1:A93A588B0ADD198C067C4BB070DC1E5170E6E208
                                                                                                                      SHA-256:993475532F89E1EA7214ADB265294040862305612D680CFF01DD20615B731CCC
                                                                                                                      SHA-512:9E5791FB97110FE5F7A1F49FF2ED8801A05E49D5B9AF579474C0081073D2B40ECFFE6E4EB5B61F12B1995FDCC0A557CB572E5E116F951FD286A6254253DAEC01
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset hu DAYS_OF_WEEK_ABBREV [list \.. "V"\.. "H"\.. "K"\.. "Sze"\.. "Cs"\.. "P"\.. "Szo"].. ::msgcat::mcset hu DAYS_OF_WEEK_FULL [list \.. "vas\u00e1rnap"\.. "h\u00e9tf\u0151"\.. "kedd"\.. "szerda"\.. "cs\u00fct\u00f6rt\u00f6k"\.. "p\u00e9ntek"\.. "szombat"].. ::msgcat::mcset hu MONTHS_ABBREV [list \.. "jan."\.. "febr."\.. "m\u00e1rc."\.. "\u00e1pr."\.. "m\u00e1j."\.. "j\u00fan."\.. "j\u00fal."\.. "aug."\.. "szept."\.. "okt."\.. "nov."\.. "dec."\.. ""].. ::msgcat::mcset hu MONTHS_FULL [list \.. "janu\u00e1r"\.. "febru\u00e1r"\.. "m\u00e1rcius"\.. "\u00e1prilis"\.. "m\u00e1jus"\.. "j\u00fanius"\.. "j\u00falius"\.. "augusztus"\.. "szeptembe

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\id.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):961
                                                                                                                      Entropy (8bit):4.02166638427728
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83dcTcWKutdXaMmEfc2ftdT2dHblWZ0VT:43dQrKutdntdI8g
                                                                                                                      MD5:191ACF2E8A8F10A1360B283D42886382
                                                                                                                      SHA1:EE2C00D021381EA638B6CE3F395DEA5F8491ED9B
                                                                                                                      SHA-256:41C0C3D3B4491E9B36E719466503EFCD325175CB7824C4A5055CB113D347BE0F
                                                                                                                      SHA-512:29BC4F7D3FAE7DE392B175FEA76138FA823B7D9D0B051A19A73F7D36D51DE34E0D0C7C129867307ABF51FC92E70853C15BD96B8484AD21EAB0A8EB83B0411E03
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset id DAYS_OF_WEEK_ABBREV [list \.. "Min"\.. "Sen"\.. "Sel"\.. "Rab"\.. "Kam"\.. "Jum"\.. "Sab"].. ::msgcat::mcset id DAYS_OF_WEEK_FULL [list \.. "Minggu"\.. "Senin"\.. "Selasa"\.. "Rabu"\.. "Kamis"\.. "Jumat"\.. "Sabtu"].. ::msgcat::mcset id MONTHS_ABBREV [list \.. "Jan"\.. "Peb"\.. "Mar"\.. "Apr"\.. "Mei"\.. "Jun"\.. "Jul"\.. "Agu"\.. "Sep"\.. "Okt"\.. "Nov"\.. "Des"\.. ""].. ::msgcat::mcset id MONTHS_FULL [list \.. "Januari"\.. "Pebruari"\.. "Maret"\.. "April"\.. "Mei"\.. "Juni"\.. "Juli"\.. "Agustus"\.. "September"\.. "Oktober"\.. "November"\.. "Desember"\.. ""]..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\id_id.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.904408530699153
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xo0kGMo0F/W3v6ay/5o0kT+3vR6HyFvn:4EnLB383wG33v6ay/wK3voSVn
                                                                                                                      MD5:FEB4D50576BF3E11A0A40FD29ABE35A7
                                                                                                                      SHA1:8CEAA187C8AA5EC101743060A877D039850964CA
                                                                                                                      SHA-256:BA7FC0C0452D3E482DB6E19BDF512CACED639BA72B92ED8F66D80B52FEA11AC0
                                                                                                                      SHA-512:8B5D18E3D6628F369FB387C8EF08CC80000E0CBE500972958F4AD75F1C2F0DD6058F9777BD7DD0D7C26E7ECAA65E5071E2BF51B560973E88637942116C7576FB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset id_ID DATE_FORMAT "%d %B %Y".. ::msgcat::mcset id_ID TIME_FORMAT_12 "%l:%M:%S %P".. ::msgcat::mcset id_ID DATE_TIME_FORMAT "%d %B %Y %l:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\is.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1305
                                                                                                                      Entropy (8bit):4.457417703528286
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83XVhVTeMVHGPbfXSmWzaZlfFxUQbW1U6ZY95n123etvmv3eTn:43Xz0b/uzaZtXUMw8n
                                                                                                                      MD5:ACF0452D5BB6D36A40061D2B0AF4D7A6
                                                                                                                      SHA1:9DF4D88F1962A672EFBDDE524550F7A5D02D446D
                                                                                                                      SHA-256:778BE3D6BFE2DFFB64FF1AFB9EC8351A3343B314CF93A68E8F7FD1073EE122BB
                                                                                                                      SHA-512:34CC02D7D28B5E161ED10250C214375561FD3D00979BFB8BCF3DB72A81BD9B7C225301528B400F7C54D8B6379F772EB6477D5D03F2CF7DC4DD19D22AEEC151B5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset is DAYS_OF_WEEK_ABBREV [list \.. "sun."\.. "m\u00e1n."\.. "\u00feri."\.. "mi\u00f0."\.. "fim."\.. "f\u00f6s."\.. "lau."].. ::msgcat::mcset is DAYS_OF_WEEK_FULL [list \.. "sunnudagur"\.. "m\u00e1nudagur"\.. "\u00feri\u00f0judagur"\.. "mi\u00f0vikudagur"\.. "fimmtudagur"\.. "f\u00f6studagur"\.. "laugardagur"].. ::msgcat::mcset is MONTHS_ABBREV [list \.. "jan."\.. "feb."\.. "mar."\.. "apr."\.. "ma\u00ed"\.. "j\u00fan."\.. "j\u00fal."\.. "\u00e1g\u00fa."\.. "sep."\.. "okt."\.. "n\u00f3v."\.. "des."\.. ""].. ::msgcat::mcset is MONTHS_FULL [list \.. "jan\u00faar"\.. "febr\u00faar"\.. "mars"\.. "apr\u00edl"\.. "ma\u00ed"\.. "j\u00fan\u00ed"\.. "j\u00fal\

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\it.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1294
                                                                                                                      Entropy (8bit):4.282101355195382
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83JYEVI2vfYpQjAOnhWBIIsmdC2lkOKk+Z+FoPJ6G3vesvY:43JZVB8eAOnh4IzR2+J6G/eKY
                                                                                                                      MD5:3354A6FC06C298E33AA14163929E56EB
                                                                                                                      SHA1:C3005370DAE8A266AE21F7E2B871AEA5A656A155
                                                                                                                      SHA-256:1D72170B9F9028A237364F7CD7EA8B48BD4770E61922205CE862300103B13DE5
                                                                                                                      SHA-512:58B64D4F5827CA2A1BF2DDFD1F7EFDDBBD46709A6A9B7277E8EB386D80043A87ADDE2B3D5A49A934E8EB8F797BD735FADA1D22AD3DD856FFE9507F71B9E45CBA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset it DAYS_OF_WEEK_ABBREV [list \.. "dom"\.. "lun"\.. "mar"\.. "mer"\.. "gio"\.. "ven"\.. "sab"].. ::msgcat::mcset it DAYS_OF_WEEK_FULL [list \.. "domenica"\.. "luned\u00ec"\.. "marted\u00ec"\.. "mercoled\u00ec"\.. "gioved\u00ec"\.. "venerd\u00ec"\.. "sabato"].. ::msgcat::mcset it MONTHS_ABBREV [list \.. "gen"\.. "feb"\.. "mar"\.. "apr"\.. "mag"\.. "giu"\.. "lug"\.. "ago"\.. "set"\.. "ott"\.. "nov"\.. "dic"\.. ""].. ::msgcat::mcset it MONTHS_FULL [list \.. "gennaio"\.. "febbraio"\.. "marzo"\.. "aprile"\.. "maggio"\.. "giugno"\.. "luglio"\.. "agosto"\.. "settembre"\.. "ottobre"\.. "novembre"\.. "dicembre"\.. "

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\it_ch.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):250
                                                                                                                      Entropy (8bit):4.8982877714191035
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoi5jL/oyJ+3v1oia+3vjLtAsvn:4EnLB383b3F+3vV3v3tnn
                                                                                                                      MD5:E4400C16406A46C2880250522BED2EDE
                                                                                                                      SHA1:787A04037A355FF845025B8865335EB938280BFB
                                                                                                                      SHA-256:24B5F303F5C7AF6F63FDC23ADB4D713087AE74B6D18C117D787AF03374C5F57E
                                                                                                                      SHA-512:3551DEEF0EAAC66042143F77F2F4DD9154764F35BD624DAB3C9F0F59F3489CA39CE34BC2A69BC5BFBB1926C6F5C39D74A806ECB1A47F6B374101071957FD417B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset it_CH DATE_FORMAT "%e. %B %Y".. ::msgcat::mcset it_CH TIME_FORMAT "%H:%M:%S".. ::msgcat::mcset it_CH DATE_TIME_FORMAT "%e. %B %Y %H:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ja.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1689
                                                                                                                      Entropy (8bit):4.951012555106795
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83Gl84OCtnbf3wvtMwvLv4GTwhvevTwSoXghGhD6h:43FULWttbdEVoES8gshD6h
                                                                                                                      MD5:11FBE427747012444AEEAFD6134034A4
                                                                                                                      SHA1:58C72C432053264EAE6335D6CC93C5FFA33C42B8
                                                                                                                      SHA-256:2B6D15A191437F1B84FA7023E34153B61E6BF1DE1452EA921E9CCBBE5D4BEB1C
                                                                                                                      SHA-512:4F993BDF5D50D6D9F7410C83D226FEF30BA8C989F9977A7025C36BE22CEECCD6C68CDD6AFC5C9CE3D700559C4EDC619042E14DD88EE7583B9D5AA66F0268FD23
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ja DAYS_OF_WEEK_ABBREV [list \.. "\u65e5"\.. "\u6708"\.. "\u706b"\.. "\u6c34"\.. "\u6728"\.. "\u91d1"\.. "\u571f"].. ::msgcat::mcset ja DAYS_OF_WEEK_FULL [list \.. "\u65e5\u66dc\u65e5"\.. "\u6708\u66dc\u65e5"\.. "\u706b\u66dc\u65e5"\.. "\u6c34\u66dc\u65e5"\.. "\u6728\u66dc\u65e5"\.. "\u91d1\u66dc\u65e5"\.. "\u571f\u66dc\u65e5"].. ::msgcat::mcset ja MONTHS_FULL [list \.. "1\u6708"\.. "2\u6708"\.. "3\u6708"\.. "4\u6708"\.. "5\u6708"\.. "6\u6708"\.. "7\u6708"\.. "8\u6708"\.. "9\u6708"\.. "10\u6708"\.. "11\u6708"\.. "12\u6708"].. ::msgcat::mcset ja BCE "\u7d00\u5143\u524d".. ::msgcat::mcset ja CE "\u897f\u66a6".. ::msgcat::mcset ja AM "\u5348\u524d".. ::msgcat::mcset ja PM "\u5348\u5f8c".. ::ms

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\kl.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1025
                                                                                                                      Entropy (8bit):4.097746630492712
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83E7XIE/OWbjH3Tw2PzJrIsmZ5maAXaMHPB:43WlrraA/vB
                                                                                                                      MD5:2F79804667D6F8C77BB188D59EF5F3DF
                                                                                                                      SHA1:10950ECA798F24A7C405B3E18B559CCC0C056EC1
                                                                                                                      SHA-256:96FF17F1CFF976E4E204D3616D1EFCED4D0F907C5E6A0F04B4536CB4AD1190C9
                                                                                                                      SHA-512:1B8ADC3B7FF920F8F53A17BFCC7EA24A0F8E276A42E5C63F9880DAE9B74E12716DD12DB647A80A9D99294449146C643EC58A33B03681AA4FA26A5FBC508C248C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset kl DAYS_OF_WEEK_ABBREV [list \.. "sab"\.. "ata"\.. "mar"\.. "pin"\.. "sis"\.. "tal"\.. "arf"].. ::msgcat::mcset kl DAYS_OF_WEEK_FULL [list \.. "sabaat"\.. "ataasinngorneq"\.. "marlunngorneq"\.. "pingasunngorneq"\.. "sisamanngorneq"\.. "tallimanngorneq"\.. "arfininngorneq"].. ::msgcat::mcset kl MONTHS_ABBREV [list \.. "jan"\.. "feb"\.. "mar"\.. "apr"\.. "maj"\.. "jun"\.. "jul"\.. "aug"\.. "sep"\.. "okt"\.. "nov"\.. "dec"\.. ""].. ::msgcat::mcset kl MONTHS_FULL [list \.. "januari"\.. "februari"\.. "martsi"\.. "aprili"\.. "maji"\.. "juni"\.. "juli"\.. "augustusi"\.. "septemberi"\.. "oktoberi"\.. "novemberi"\.. "dece

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\kl_gl.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):286
                                                                                                                      Entropy (8bit):4.882476709336307
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoEpb53FuoEpLE3vLjoEpLE3v6mjoEpba+3vnFDoAkvn:4EnLB383jF3Fyw3vxw3v6A/3v9dmn
                                                                                                                      MD5:255830678C8724E65C05A7E020E68B5B
                                                                                                                      SHA1:0AEA48AB0439C04F92B5CA9A3B5182718B7F116B
                                                                                                                      SHA-256:3027CFE9EBD2172CEFC15C025786CAD47A6E2894BF0474AFC1B0C341E70202AA
                                                                                                                      SHA-512:99039FFA7269DD136D1693121E261DB5586E86EC401D2B1EB8FB1D13A9A7F1E514D9FC941B838286B986C02ED281828ED67E59002D837E350A64F4832340516A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset kl_GL DATE_FORMAT "%d %b %Y".. ::msgcat::mcset kl_GL TIME_FORMAT "%T".. ::msgcat::mcset kl_GL TIME_FORMAT_12 "%T".. ::msgcat::mcset kl_GL DATE_TIME_FORMAT "%a %d %b %Y %T %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ko.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1621
                                                                                                                      Entropy (8bit):4.612163420716489
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:43fMlylslXlslxl1hVuqLGuqqntH4xUyw9:2fKYqVq3f
                                                                                                                      MD5:CCB2C2254D3FA3025183DB7E010CAD66
                                                                                                                      SHA1:510BBB6A9162F2EF908E6561CC714848C2EA74CA
                                                                                                                      SHA-256:EF6FB319C398EEA79B3A951319F831F3B186D556565D17D738E5F9B4B77570F2
                                                                                                                      SHA-512:A0264565899BD1B0783ADC0388F893CCE713ADB23BDD63907CF092A74ACB4F7D3BE09DA29801E9C11A7B08CB1706E3771C598ACED351A0FCCBF4EBBD7871148D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ko DAYS_OF_WEEK_ABBREV [list \.. "\uc77c"\.. "\uc6d4"\.. "\ud654"\.. "\uc218"\.. "\ubaa9"\.. "\uae08"\.. "\ud1a0"].. ::msgcat::mcset ko DAYS_OF_WEEK_FULL [list \.. "\uc77c\uc694\uc77c"\.. "\uc6d4\uc694\uc77c"\.. "\ud654\uc694\uc77c"\.. "\uc218\uc694\uc77c"\.. "\ubaa9\uc694\uc77c"\.. "\uae08\uc694\uc77c"\.. "\ud1a0\uc694\uc77c"].. ::msgcat::mcset ko MONTHS_ABBREV [list \.. "1\uc6d4"\.. "2\uc6d4"\.. "3\uc6d4"\.. "4\uc6d4"\.. "5\uc6d4"\.. "6\uc6d4"\.. "7\uc6d4"\.. "8\uc6d4"\.. "9\uc6d4"\.. "10\uc6d4"\.. "11\uc6d4"\.. "12\uc6d4"\.. ""].. ::msgcat::mcset ko MONTHS_FULL [list \.. "1\uc6d4"\.. "2\uc6d4"\.. "3\uc6d4"\.. "4\uc6d4"\.. "5\uc6d4"\.. "6\uc6d4"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ko_kr.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):354
                                                                                                                      Entropy (8bit):5.058233326545794
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xo56SFZhjAo56m5Ys5o56TGMovBo56a/W3v6mfKo56TT+3+:4EnLB383g62vjV6m5Ysg6TG26a+3v6oo
                                                                                                                      MD5:58CA45CE26AF8ECA729BA72898BB633D
                                                                                                                      SHA1:CBBEDB7370890A1DB65080A359A9A5C164B525D5
                                                                                                                      SHA-256:4CAC8FB43D290A63A4D3215F22228B358AB4FA174F08712DD6C5B64C5E485071
                                                                                                                      SHA-512:48CCBD3F7B96D0998B6D1A1F8D7FE2B4B070BB5B8809FABE0A38209AEAF2E95E098292A5B9B5F0954E7729708A2173D32AAD70B6C0F336DB1E9BFA2968E6A56B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ko_KR BCE "\uae30\uc6d0\uc804".. ::msgcat::mcset ko_KR CE "\uc11c\uae30".. ::msgcat::mcset ko_KR DATE_FORMAT "%Y.%m.%d".. ::msgcat::mcset ko_KR TIME_FORMAT_12 "%P %l:%M:%S".. ::msgcat::mcset ko_KR DATE_TIME_FORMAT "%Y.%m.%d %P %l:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\kok.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1997
                                                                                                                      Entropy (8bit):4.202940482570495
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83cm48Vc7VczMmDNVcYVcR0prdSmS68FeDJVcYVcR0prdSmS68FeuT:4354a+0prjS68mq0prjS68pT
                                                                                                                      MD5:67FA08F588A3B44D67E42EC1025013BC
                                                                                                                      SHA1:6895FEF0476DE0349895DB052B335AC46636B23A
                                                                                                                      SHA-256:9D215E31A39FED45B3657144E5F73C942E59E500036CE16B1FFF201FD6358595
                                                                                                                      SHA-512:4C2708BD9DD98320D3133EEFFD19A8018F49A36AB8348DB7C0B0287ADB4C052D3EFAD3686C8E46E0520F3CE27F361978272BA8752EB04E5A7BC07780398480DB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset kok DAYS_OF_WEEK_FULL [list \.. "\u0906\u0926\u093f\u0924\u094d\u092f\u0935\u093e\u0930"\.. "\u0938\u094b\u092e\u0935\u093e\u0930"\.. "\u092e\u0902\u0917\u0933\u093e\u0930"\.. "\u092c\u0941\u0927\u0935\u093e\u0930"\.. "\u0917\u0941\u0930\u0941\u0935\u093e\u0930"\.. "\u0936\u0941\u0915\u094d\u0930\u0935\u093e\u0930"\.. "\u0936\u0928\u093f\u0935\u093e\u0930"].. ::msgcat::mcset kok MONTHS_ABBREV [list \.. "\u091c\u093e\u0928\u0947\u0935\u093e\u0930\u0940"\.. "\u092b\u0947\u092c\u0943\u0935\u093e\u0930\u0940"\.. "\u092e\u093e\u0930\u094d\u091a"\.. "\u090f\u092a\u094d\u0930\u093f\u0932"\.. "\u092e\u0947"\.. "\u091c\u0942\u0928"\.. "\u091c\u0941\u0932\u0948"\.. "\u0913\u0917\u0938\u094d\u091f"\.. "\u0938\u0947\u092a\u094d\u091f\u0947\u0902\u092c\u0930"\.. "\u0913\u0915\u094d\

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\kok_in.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):260
                                                                                                                      Entropy (8bit):4.904340548436718
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xo5VsNv+IZo5VsU3v6ry/5o5VsNo+3v+6f6HyFvn:4EnLB383gVsNvlAVsU3v6ry/gVsNF3vj
                                                                                                                      MD5:0AA20289A63BA3A14DCFED75EED980DE
                                                                                                                      SHA1:2B76013593D886B0724D82849FD1840B20922902
                                                                                                                      SHA-256:644F2B6D4BA27AF14891B781DEF60F708A9F18FC2F73566649B631A6DEA3EF09
                                                                                                                      SHA-512:6E13E0DC8BFD2ABE0D04B0BC098C40972F088F8D3D6ACA00338B17473ABC6F69840A88EC0C965C493B4270DEC777A0EA2D762BC33044EFE7030E437604EE201B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset kok_IN DATE_FORMAT "%d %M %Y".. ::msgcat::mcset kok_IN TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset kok_IN DATE_TIME_FORMAT "%d %M %Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\kw.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1013
                                                                                                                      Entropy (8bit):4.060027087416375
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83no1UwRlw4MAwBdc//3rpF6HFoot8:43vglHM7MTCHFs
                                                                                                                      MD5:CCEC7B77DCA1F6A406311FC43EE57030
                                                                                                                      SHA1:4ED329BB09A8F7C67F8984CD790E9B6819DE6F00
                                                                                                                      SHA-256:EAB468AC5BF1833D4F8CD658789413D4A46CAD16B63FB9B906CFF6DC9EA26251
                                                                                                                      SHA-512:4EFF6E49CC479A1BF0CEEAE256A1FAE7D4AE7D0ACE23CD87851471EC96BB5AF580C58A142E1B6CE72BC8B6BFF946A38801E681443B7DD9527A1DEB6E7EDD7D22
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset kw DAYS_OF_WEEK_ABBREV [list \.. "Sul"\.. "Lun"\.. "Mth"\.. "Mhr"\.. "Yow"\.. "Gwe"\.. "Sad"].. ::msgcat::mcset kw DAYS_OF_WEEK_FULL [list \.. "De Sul"\.. "De Lun"\.. "De Merth"\.. "De Merher"\.. "De Yow"\.. "De Gwener"\.. "De Sadorn"].. ::msgcat::mcset kw MONTHS_ABBREV [list \.. "Gen"\.. "Whe"\.. "Mer"\.. "Ebr"\.. "Me"\.. "Evn"\.. "Gor"\.. "Est"\.. "Gwn"\.. "Hed"\.. "Du"\.. "Kev"\.. ""].. ::msgcat::mcset kw MONTHS_FULL [list \.. "Mys Genver"\.. "Mys Whevrel"\.. "Mys Merth"\.. "Mys Ebrel"\.. "Mys Me"\.. "Mys Evan"\.. "Mys Gortheren"\.. "Mye Est"\.. "Mys Gwyngala"\.. "Mys Hedra"\.. "Mys Du"\.. "Mys Kevardhu"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\kw_gb.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.959913054070712
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoh6AvMoh633v6ay/5oh6Ao+3vR6HyFvn:4EnLB38346AvR633v6ay/46AF3voSVn
                                                                                                                      MD5:18E8576F63B978F1AFEF15AC57B44FBF
                                                                                                                      SHA1:D50EB90944FF81E3CBFF942B16C1874EB7EA2562
                                                                                                                      SHA-256:EDAC14D929D1C6559EC46E9B460F8F44A189B78FB915F2D641104549CBD94188
                                                                                                                      SHA-512:F3DE5EE77BB889DA1353F9C9A1811083AB28BBEE4B7D6C8782F38B1AE44CF77565371A0E18F7E2BACD7EF590BC1215CA3E41AF929A15F60B3E85F6099A4CF378
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset kw_GB DATE_FORMAT "%d %B %Y".. ::msgcat::mcset kw_GB TIME_FORMAT_12 "%l:%M:%S %P".. ::msgcat::mcset kw_GB DATE_TIME_FORMAT "%d %B %Y %l:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\lt.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1307
                                                                                                                      Entropy (8bit):4.506235846178408
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83iHYuAMLzHYCaNu3d3nT15T31FhAlDgK/YrDZ/6Qz2C9kGPCveksvc:43iHFnHuUd3/T3xM/+SQCC9kGPEekKc
                                                                                                                      MD5:D4EC2E96995E0EB263F338DD16CC4F8D
                                                                                                                      SHA1:7ED86175489B1AE3CA5C0E8D42969F951C895D6B
                                                                                                                      SHA-256:855B652FCC8066BA45C7DC8DBFD3807D1B4759EA8D71C523567F47BF445D1DE6
                                                                                                                      SHA-512:A55E0D759A22360FF6668CEFAFFB812BABB316C447ADDB1FD5CDBC06AE1DA2E891E09952D073164C013AD9BF4184614102E7ADA553EEEFB2BBA26208B79B277F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset lt DAYS_OF_WEEK_ABBREV [list \.. "Sk"\.. "Pr"\.. "An"\.. "Tr"\.. "Kt"\.. "Pn"\.. "\u0160t"].. ::msgcat::mcset lt DAYS_OF_WEEK_FULL [list \.. "Sekmadienis"\.. "Pirmadienis"\.. "Antradienis"\.. "Tre\u010diadienis"\.. "Ketvirtadienis"\.. "Penktadienis"\.. "\u0160e\u0161tadienis"].. ::msgcat::mcset lt MONTHS_ABBREV [list \.. "Sau"\.. "Vas"\.. "Kov"\.. "Bal"\.. "Geg"\.. "Bir"\.. "Lie"\.. "Rgp"\.. "Rgs"\.. "Spa"\.. "Lap"\.. "Grd"\.. ""].. ::msgcat::mcset lt MONTHS_FULL [list \.. "Sausio"\.. "Vasario"\.. "Kovo"\.. "Baland\u017eio"\.. "Gegu\u017e\u0117s"\.. "Bir\u017eelio"\.. "Liepos"\.. "Rugpj\u016b\u010dio"\.. "Rugs\u0117jo"\.. "Spa

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\lv.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1271
                                                                                                                      Entropy (8bit):4.460631492946299
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83Amshb4mZdA7nl9kMmfpK269rkbi5vWm0W9ARivirXsv05vkn:430bHA7XRr95QWQQgaKkn
                                                                                                                      MD5:554ED2CAFD25F5F82DA54AE057F4BA98
                                                                                                                      SHA1:E25CDF0F9C4B523B5B05408E7820F7B4F627D19E
                                                                                                                      SHA-256:7E90D2008B220DB19C796C7107AD69D263B8AC8C7BDDFB879230699D978E9A0A
                                                                                                                      SHA-512:612201CCD64A51EC943921196D8C74D8BCA3AB3E35B0C9E91AE7F3A6B36F4F255AA9ADB3A254EC03629B01BD221B0B3F8CC4DFBFAC1F1718775E81CAD188AA86
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset lv DAYS_OF_WEEK_ABBREV [list \.. "Sv"\.. "P"\.. "O"\.. "T"\.. "C"\.. "Pk"\.. "S"].. ::msgcat::mcset lv DAYS_OF_WEEK_FULL [list \.. "sv\u0113tdiena"\.. "pirmdiena"\.. "otrdiena"\.. "tre\u0161diena"\.. "ceturdien"\.. "piektdiena"\.. "sestdiena"].. ::msgcat::mcset lv MONTHS_ABBREV [list \.. "Jan"\.. "Feb"\.. "Mar"\.. "Apr"\.. "Maijs"\.. "J\u016bn"\.. "J\u016bl"\.. "Aug"\.. "Sep"\.. "Okt"\.. "Nov"\.. "Dec"\.. ""].. ::msgcat::mcset lv MONTHS_FULL [list \.. "janv\u0101ris"\.. "febru\u0101ris"\.. "marts"\.. "apr\u012blis"\.. "maijs"\.. "j\u016bnijs"\.. "j\u016blijs"\.. "augusts"\.. "septembris"\.. "oktobris"\.. "novembris"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\mk.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2157
                                                                                                                      Entropy (8bit):4.299300188052441
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:4389QMsGqdQfRQPjQmofqJp9sk5BstSpWQiQ3QJQ5QL39I0QRQTQ8Ql4J8W:2W8SMq+9sWINi2Kc9I0+gXF
                                                                                                                      MD5:888014F13A82511ABEF99497A753BFC3
                                                                                                                      SHA1:7F4231BEDE191370B37E8B917B6AD8829D15CA7D
                                                                                                                      SHA-256:4C0EB07F0FCB36DD12A3F7EDD6531616611ABF62BF7705B5A37CC59098221D5D
                                                                                                                      SHA-512:D748127CC615584901D35B6492EC566448B6C4DA6363858B5145921E9CD09490355CF4315F0F7A8542AA12790CD3432011A643A3A8F74B0119DB0DCE19FD68A4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset mk DAYS_OF_WEEK_ABBREV [list \.. "\u043d\u0435\u0434."\.. "\u043f\u043e\u043d."\.. "\u0432\u0442."\.. "\u0441\u0440\u0435."\.. "\u0447\u0435\u0442."\.. "\u043f\u0435\u0442."\.. "\u0441\u0430\u0431."].. ::msgcat::mcset mk DAYS_OF_WEEK_FULL [list \.. "\u043d\u0435\u0434\u0435\u043b\u0430"\.. "\u043f\u043e\u043d\u0435\u0434\u0435\u043b\u043d\u0438\u043a"\.. "\u0432\u0442\u043e\u0440\u043d\u0438\u043a"\.. "\u0441\u0440\u0435\u0434\u0430"\.. "\u0447\u0435\u0442\u0432\u0440\u0442\u043e\u043a"\.. "\u043f\u0435\u0442\u043e\u043a"\.. "\u0441\u0430\u0431\u043e\u0442\u0430"].. ::msgcat::mcset mk MONTHS_ABBREV [list \.. "\u0458\u0430\u043d."\.. "\u0444\u0435\u0432."\.. "\u043c\u0430\u0440."\.. "\u0430\u043f\u0440."\.. "\u043c\u0430\u0458."\.. "\u0458\u0443\u

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\mr.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1846
                                                                                                                      Entropy (8bit):4.220147808639664
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR833cXh48Vc7VczfVczPmzNVcYVcR0prdSmS68FezUVcYVcR0prdSmS68FeoV:43K4S+0prjS68Yh0prjS68nV
                                                                                                                      MD5:07F99E0A05083B10F80A4D6867163B23
                                                                                                                      SHA1:B6036C7DA8043E3401583D03831E7A4BF755D93D
                                                                                                                      SHA-256:AE873BF5484EACBBE179913D43451BE53378FA701B5D81594D052266B8A09AF0
                                                                                                                      SHA-512:3A032C81B8FBFEE6EB66C1538CBD16329A1B393E4684B4E9B3FBCDD6344CE8AD34FA699F76EF953B3EB597D8E253345F54C2E92E7A43611C721038BCC2471EA2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset mr DAYS_OF_WEEK_FULL [list \.. "\u0930\u0935\u093f\u0935\u093e\u0930"\.. "\u0938\u094b\u092e\u0935\u093e\u0930"\.. "\u092e\u0902\u0917\u0933\u0935\u093e\u0930"\.. "\u092e\u0902\u0917\u0933\u0935\u093e\u0930"\.. "\u0917\u0941\u0930\u0941\u0935\u093e\u0930"\.. "\u0936\u0941\u0915\u094d\u0930\u0935\u093e\u0930"\.. "\u0936\u0928\u093f\u0935\u093e\u0930"].. ::msgcat::mcset mr MONTHS_ABBREV [list \.. "\u091c\u093e\u0928\u0947\u0935\u093e\u0930\u0940"\.. "\u092b\u0947\u092c\u0943\u0935\u093e\u0930\u0940"\.. "\u092e\u093e\u0930\u094d\u091a"\.. "\u090f\u092a\u094d\u0930\u093f\u0932"\.. "\u092e\u0947"\.. "\u091c\u0942\u0928"\.. "\u091c\u0941\u0932\u0948"\.. "\u0913\u0917\u0938\u094d\u091f"\.. "\u0938\u0947\u092a\u094d\u091f\u0947\u0902\u092c\u0930"\.. "\u0913\u0915\u094d\u091f\u0

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\mr_in.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.89440333975705
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoGNv+IZoGU3v6ry/5oGNo+3v+6f6HyFvn:4EnLB383Zvlw3v6ry/ZF3vmSVn
                                                                                                                      MD5:67368E8A5715860BABD44E54A168192F
                                                                                                                      SHA1:7790D4B4B28FE5E38AB11CD037FFB826A8EB77FD
                                                                                                                      SHA-256:B7B1D379355A1D278E13EF557A887A662E84FB6A9B62B8E19A27927926270EF9
                                                                                                                      SHA-512:E95C90CFFA7CC4E61026FC328A4AA0BEE6A54A0061BA0B9459F9F0F4B008DD36F81BC9B8D8B964FA051FCEAB7FECE6D107CD456B3FD01A83B4900ECC3A0BCFA4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset mr_IN DATE_FORMAT "%d %M %Y".. ::msgcat::mcset mr_IN TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset mr_IN DATE_TIME_FORMAT "%d %M %Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ms.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):957
                                                                                                                      Entropy (8bit):4.018924167342869
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:4EnLB383Zm/aufodZmt+JHEA7UVRosmAL/7Idzr43xRRosuL1PJHWZ6tHhHjv:4aR83ZsauSHJkA7umE/72UD21PJWZ0hT
                                                                                                                      MD5:7E6A943B7D82404F61BDBD95682073CD
                                                                                                                      SHA1:B96DBB1738F293D2842FDCEDF2DEF13004F77A8D
                                                                                                                      SHA-256:970B2F3ECC04980FCC2F9531CA6CE2BF36BC12942CB614BF70313B4CB0508985
                                                                                                                      SHA-512:12F5A5F7A170EE79D1F4398E96FF2DE84472027C5B5003DE7E86F46713E3F0997439E2EBA03FFB7DB611F0CE0E06EB149F5BD08ED2AA0409DB8348867487FFFD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ms DAYS_OF_WEEK_ABBREV [list \.. "Aha"\.. "Isn"\.. "Sei"\.. "Rab"\.. "Kha"\.. "Jum"\.. "Sab"].. ::msgcat::mcset ms DAYS_OF_WEEK_FULL [list \.. "Ahad"\.. "Isnin"\.. "Selasa"\.. "Rahu"\.. "Khamis"\.. "Jumaat"\.. "Sabtu"].. ::msgcat::mcset ms MONTHS_ABBREV [list \.. "Jan"\.. "Feb"\.. "Mac"\.. "Apr"\.. "Mei"\.. "Jun"\.. "Jul"\.. "Ogos"\.. "Sep"\.. "Okt"\.. "Nov"\.. "Dis"\.. ""].. ::msgcat::mcset ms MONTHS_FULL [list \.. "Januari"\.. "Februari"\.. "Mac"\.. "April"\.. "Mei"\.. "Jun"\.. "Julai"\.. "Ogos"\.. "September"\.. "Oktober"\.. "November"\.. "Disember"\.. ""]..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ms_my.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):265
                                                                                                                      Entropy (8bit):4.818053174805798
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoChFfluoChF+3v6xyFjoCh++3vflm68vn:4EnLB383xPflwe3v6gZl3vflm6+n
                                                                                                                      MD5:A02F11BE0DF920E63E7A3ACCE746E32D
                                                                                                                      SHA1:4A8B1EF1A6F8A5FD022042D6E009A01E4B0FEBD3
                                                                                                                      SHA-256:F5B859D8DD2A2B5F756E39B0DFEB26B95878D2F54BA3CE46C56F0F26CF2B554B
                                                                                                                      SHA-512:5F9AF8C89F491CB4C158ED73EA4CF32E6A83CF44A94DA6FE1A962C58199BF2348530F3DEFA0C6F433BA3ADEF81AE9B3884F30CD7A841B159D52F9F21008B4F92
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ms_MY DATE_FORMAT "%A %d %b %Y".. ::msgcat::mcset ms_MY TIME_FORMAT_12 "%I:%M:%S %z".. ::msgcat::mcset ms_MY DATE_TIME_FORMAT "%A %d %b %Y %I:%M:%S %z %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\mt.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):717
                                                                                                                      Entropy (8bit):4.55153350337982
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:4EnLB383VYmxWHWog4QUbxMmAMMiGZu+3v6ay/GK3vZsSVn:4aR83VYsxonQ2MmVVGRvjCGsvGSV
                                                                                                                      MD5:D8BBEC2F8935054E6081BB5E4AE8F7E3
                                                                                                                      SHA1:33FE6D51A284B8760BC6F442329B10374F506BDA
                                                                                                                      SHA-256:7DBC4E82D82FDE8CDF522FA10E082289D46B0C1A4A7D7A5FA83FF116677F052B
                                                                                                                      SHA-512:BF39C75DD6B3625897D7D44AC253AF5656CA21D0B394F78611584E2606CBC419C4A02353542D23393BEBCCF0CB4D861CDECD61AD89339F78C0260E966B495777
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset mt DAYS_OF_WEEK_ABBREV [list \.. "\u0126ad"\.. "Tne"\.. "Tli"\.. "Erb"\.. "\u0126am"\.. "\u0120im"].. ::msgcat::mcset mt MONTHS_ABBREV [list \.. "Jan"\.. "Fra"\.. "Mar"\.. "Apr"\.. "Mej"\.. "\u0120un"\.. "Lul"\.. "Awi"\.. "Set"\.. "Ott"\.. "Nov"].. ::msgcat::mcset mt BCE "QK".. ::msgcat::mcset mt CE "".. ::msgcat::mcset mt DATE_FORMAT "%A, %e ta %B, %Y".. ::msgcat::mcset mt TIME_FORMAT_12 "%l:%M:%S %P".. ::msgcat::mcset mt DATE_TIME_FORMAT "%A, %e ta %B, %Y %l:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\nb.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1209
                                                                                                                      Entropy (8bit):4.313626715960843
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83B0tSYuZrIsmYmPAxyIQ4HU92W16EL3Tvav31:43qhuZrIPAt04yTcF
                                                                                                                      MD5:42D02C3CAF28BE4994F27CEF5A183AB7
                                                                                                                      SHA1:DC411E8AC12C3D588AB2F3A3C95A75D8689AD402
                                                                                                                      SHA-256:534C5DACEF12F818FAF4ED806997A559F95D591F1B6236B0C30B07A107DD13F3
                                                                                                                      SHA-512:0BE27572106324FE2B6CDFF4513500DE7582AD1ABEF451FFC62B2050D3875A149DDDB66451E1B3F5BA9216268E9998D2A1C1E8343BBB9EF97947DA054B82818E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset nb DAYS_OF_WEEK_ABBREV [list \.. "s\u00f8"\.. "ma"\.. "ti"\.. "on"\.. "to"\.. "fr"\.. "l\u00f8"].. ::msgcat::mcset nb DAYS_OF_WEEK_FULL [list \.. "s\u00f8ndag"\.. "mandag"\.. "tirsdag"\.. "onsdag"\.. "torsdag"\.. "fredag"\.. "l\u00f8rdag"].. ::msgcat::mcset nb MONTHS_ABBREV [list \.. "jan"\.. "feb"\.. "mar"\.. "apr"\.. "mai"\.. "jun"\.. "jul"\.. "aug"\.. "sep"\.. "okt"\.. "nov"\.. "des"\.. ""].. ::msgcat::mcset nb MONTHS_FULL [list \.. "januar"\.. "februar"\.. "mars"\.. "april"\.. "mai"\.. "juni"\.. "juli"\.. "august"\.. "september"\.. "oktober"\.. "november"\.. "desember"\.. ""].. ::msgcat::mcset nb BC

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\nl.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1129
                                                                                                                      Entropy (8bit):4.235969198645435
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR837Ed+RxRMZZsmUmnZAEEHM92WFU5vtrvs:43AAHRMZZPnZALsCtt7s
                                                                                                                      MD5:B9B949794203D204628D4DBEA29587AE
                                                                                                                      SHA1:1642D8040144469B5C359E80693E68036F87B849
                                                                                                                      SHA-256:9E2FE3851CF13EC79A9B10A09B01CEB0A26044AE0DC90A4E00BE57745E854C79
                                                                                                                      SHA-512:0CCCCF6D61423CEE0389C3BA1A8E94F2B092C53465D1937F5595AF91E46DD38B318D6C7EE3D88B89F32BFB952C0D55E0E67B46D7DF306ECA6690E283ADEB2CB9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset nl DAYS_OF_WEEK_ABBREV [list \.. "zo"\.. "ma"\.. "di"\.. "wo"\.. "do"\.. "vr"\.. "za"].. ::msgcat::mcset nl DAYS_OF_WEEK_FULL [list \.. "zondag"\.. "maandag"\.. "dinsdag"\.. "woensdag"\.. "donderdag"\.. "vrijdag"\.. "zaterdag"].. ::msgcat::mcset nl MONTHS_ABBREV [list \.. "jan"\.. "feb"\.. "mrt"\.. "apr"\.. "mei"\.. "jun"\.. "jul"\.. "aug"\.. "sep"\.. "okt"\.. "nov"\.. "dec"\.. ""].. ::msgcat::mcset nl MONTHS_FULL [list \.. "januari"\.. "februari"\.. "maart"\.. "april"\.. "mei"\.. "juni"\.. "juli"\.. "augustus"\.. "september"\.. "oktober"\.. "november"\.. "december"\.. ""].. ::msgcat::mcset nl DATE_FORM

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\nl_be.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):286
                                                                                                                      Entropy (8bit):4.865165930946383
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xo4gPPdjog9X3vLjog9X3v6mjo49+3vnFDoAkvn:4EnLB3835gHdPF3vjF3v64I3v9dmn
                                                                                                                      MD5:3261F397ED0291368FF1881E7BA08ECE
                                                                                                                      SHA1:7147ABB62034EB152B1FED9246A533535F07372C
                                                                                                                      SHA-256:77A69DD60D171B321512B14794E75A66FF753410C007997B310790D86E09B057
                                                                                                                      SHA-512:C1526F454FA594DAD056B056F76F01D8B2AB713D04EB2A3643416B8E741B248CC94E000BAEE5B0F60436B88B1216FB1DE7F7C3FA456D4A4FBDE24F97C3B739B8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset nl_BE DATE_FORMAT "%d-%m-%y".. ::msgcat::mcset nl_BE TIME_FORMAT "%T".. ::msgcat::mcset nl_BE TIME_FORMAT_12 "%T".. ::msgcat::mcset nl_BE DATE_TIME_FORMAT "%a %d %b %Y %T %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\nn.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1200
                                                                                                                      Entropy (8bit):4.282788574144479
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83tCtrJwuQrIsmYmLAxyIQ4HU92W1W4/3Hv+v31:434suQrILAt0EafIF
                                                                                                                      MD5:985E97517C2BF37719A618F575DF392C
                                                                                                                      SHA1:65BC07FC3A955300ED09B7485F90AEC18CBAD43F
                                                                                                                      SHA-256:06FA2D6D8C59D0B8EAC2EDE5AB0DDB8B6E095D1A023B1966FCE3B65916FA14FB
                                                                                                                      SHA-512:75BC14DBAD147A98D32D2AF0BE0BE50F115BB9C3BBE283B53977B9F264A055734B30F6B1C4EEE9686F1874D178C535111731C92D495B7D370FB17213B65C9A40
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset nn DAYS_OF_WEEK_ABBREV [list \.. "su"\.. "m\u00e5"\.. "ty"\.. "on"\.. "to"\.. "fr"\.. "lau"].. ::msgcat::mcset nn DAYS_OF_WEEK_FULL [list \.. "sundag"\.. "m\u00e5ndag"\.. "tysdag"\.. "onsdag"\.. "torsdag"\.. "fredag"\.. "laurdag"].. ::msgcat::mcset nn MONTHS_ABBREV [list \.. "jan"\.. "feb"\.. "mar"\.. "apr"\.. "mai"\.. "jun"\.. "jul"\.. "aug"\.. "sep"\.. "okt"\.. "nov"\.. "des"\.. ""].. ::msgcat::mcset nn MONTHS_FULL [list \.. "januar"\.. "februar"\.. "mars"\.. "april"\.. "mai"\.. "juni"\.. "juli"\.. "august"\.. "september"\.. "oktober"\.. "november"\.. "desember"\.. ""].. ::msgcat::mcset nn BCE "f.Kr."

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\pl.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1263
                                                                                                                      Entropy (8bit):4.459506202908786
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83lUj0ORGgIzdW6RDYKG7FwRc0ypvOvX:43+HMg2W6RDYnFwRc0ydYX
                                                                                                                      MD5:79AB7C13AA3833A1DAEADDB1144CCE55
                                                                                                                      SHA1:C01ABC2F16549CAEC6B081448B2CBA88A680E250
                                                                                                                      SHA-256:61462C325DB0065352D8155307F949869862A86CAC67AD7BB6703F57A7FA2FF3
                                                                                                                      SHA-512:79EB696164FDDD9B121558C2780E54E295FF2DC4D8E87A0DE507B4F2925612721A98FF5010199CB68CF894ACA7A07884E9E02F3DC1E078D241431E3DC884C0A1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset pl DAYS_OF_WEEK_ABBREV [list \.. "N"\.. "Pn"\.. "Wt"\.. "\u015ar"\.. "Cz"\.. "Pt"\.. "So"].. ::msgcat::mcset pl DAYS_OF_WEEK_FULL [list \.. "niedziela"\.. "poniedzia\u0142ek"\.. "wtorek"\.. "\u015broda"\.. "czwartek"\.. "pi\u0105tek"\.. "sobota"].. ::msgcat::mcset pl MONTHS_ABBREV [list \.. "sty"\.. "lut"\.. "mar"\.. "kwi"\.. "maj"\.. "cze"\.. "lip"\.. "sie"\.. "wrz"\.. "pa\u017a"\.. "lis"\.. "gru"\.. ""].. ::msgcat::mcset pl MONTHS_FULL [list \.. "stycze\u0144"\.. "luty"\.. "marzec"\.. "kwiecie\u0144"\.. "maj"\.. "czerwiec"\.. "lipiec"\.. "sierpie\u0144"\.. "wrzesie\u0144"\.. "pa\u017adziernik"\.. "listopad"\..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\pt.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1177
                                                                                                                      Entropy (8bit):4.394980756969744
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83CYkjBc1yHYJt//0/I31YMY47flV7YaqgCyt9Fo8g6Gtvt76svi:43C5LHcNnxJ9Ltg6Gpt76Ki
                                                                                                                      MD5:8F53B3571DD29E12BD33349CFA32F28F
                                                                                                                      SHA1:C125E059B8BFE5FECD482D1A1DA50B8678872BF6
                                                                                                                      SHA-256:6F6EEEDDCF232BDCB952592A144810CED44A1CBB4BCC2C062D5F98D441505380
                                                                                                                      SHA-512:5CD7E7097B720E5399795126A71348816CBA697FD8F14160779E982ADAB00D5994978E2F9445785B0DE62F6F14232278AD1A65BC53730CA58D676B057F0BC406
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset pt DAYS_OF_WEEK_ABBREV [list \.. "Dom"\.. "Seg"\.. "Ter"\.. "Qua"\.. "Qui"\.. "Sex"\.. "S\u00e1b"].. ::msgcat::mcset pt DAYS_OF_WEEK_FULL [list \.. "Domingo"\.. "Segunda-feira"\.. "Ter\u00e7a-feira"\.. "Quarta-feira"\.. "Quinta-feira"\.. "Sexta-feira"\.. "S\u00e1bado"].. ::msgcat::mcset pt MONTHS_ABBREV [list \.. "Jan"\.. "Fev"\.. "Mar"\.. "Abr"\.. "Mai"\.. "Jun"\.. "Jul"\.. "Ago"\.. "Set"\.. "Out"\.. "Nov"\.. "Dez"\.. ""].. ::msgcat::mcset pt MONTHS_FULL [list \.. "Janeiro"\.. "Fevereiro"\.. "Mar\u00e7o"\.. "Abril"\.. "Maio"\.. "Junho"\.. "Julho"\.. "Agosto"\.. "Setembro"\.. "Outubro"\.. "Novembro"\.. "Dezembro"

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\pt_br.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):286
                                                                                                                      Entropy (8bit):4.8608779725401785
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xofm6GPWWjofAW3vLjofAW3v6mjofm6T+3vnFDoAkvn:4EnLB383+NGdg93vk93v6fNK3v9dmn
                                                                                                                      MD5:A2626EA95C2480FEA68906AE6A1F6993
                                                                                                                      SHA1:A0592902337C00FC2E70B1DFB3A42453A86535BB
                                                                                                                      SHA-256:320BE7D5B730091E6FA35F196314737261C8E154577DCF6AC8C2057D44394AD7
                                                                                                                      SHA-512:9801A87D024565676D4F3EAF0702C213E59FC2B6719D8BE95C19C9ED53FC43487F65F5408378B401A2B4C2BD4E2E391C2D848CA87739A6082AB7766EC6B9EFE1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset pt_BR DATE_FORMAT "%d-%m-%Y".. ::msgcat::mcset pt_BR TIME_FORMAT "%T".. ::msgcat::mcset pt_BR TIME_FORMAT_12 "%T".. ::msgcat::mcset pt_BR DATE_TIME_FORMAT "%a %d %b %Y %T %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ro.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1224
                                                                                                                      Entropy (8bit):4.350784108088039
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83coPUMSeZmkTMm41icpK+7ZVoImEcVUCWdvHvWIn:43lPHFmkm1iMVoxEc+CWZPWIn
                                                                                                                      MD5:F6575EC17966320106FF7ABDFB3186E2
                                                                                                                      SHA1:68C6B72D664FDA27450FCE8B5734AB627CE825D7
                                                                                                                      SHA-256:25ED6AC7A353E23B954B98611AE3B7E56BDCF2B0CB0DB358253CFB8BEBBB831C
                                                                                                                      SHA-512:E564543231922A17C898419545BFA65E5E31FE9F005FDD201B735CFDE08E96FB3B98349C2A7959E29CA8F7E6934B0C4C6DE6B5E67209D0DD9A7746DFEBF037B3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ro DAYS_OF_WEEK_ABBREV [list \.. "D"\.. "L"\.. "Ma"\.. "Mi"\.. "J"\.. "V"\.. "S"].. ::msgcat::mcset ro DAYS_OF_WEEK_FULL [list \.. "duminic\u0103"\.. "luni"\.. "mar\u0163i"\.. "miercuri"\.. "joi"\.. "vineri"\.. "s\u00eemb\u0103t\u0103"].. ::msgcat::mcset ro MONTHS_ABBREV [list \.. "Ian"\.. "Feb"\.. "Mar"\.. "Apr"\.. "Mai"\.. "Iun"\.. "Iul"\.. "Aug"\.. "Sep"\.. "Oct"\.. "Nov"\.. "Dec"\.. ""].. ::msgcat::mcset ro MONTHS_FULL [list \.. "ianuarie"\.. "februarie"\.. "martie"\.. "aprilie"\.. "mai"\.. "iunie"\.. "iulie"\.. "august"\.. "septembrie"\.. "octombrie"\.. "noiembrie"\.. "decembrie"\.. ""].. ::msgcat:

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ru.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2091
                                                                                                                      Entropy (8bit):4.2886524607041006
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:43D+pQ7keidQfRQPgQHB81Z/sFIAZSQWQXQrQxJQjQRnQBFQiWftkWt:26pgkeoSnpjA4tMYiJcCMFmVRt
                                                                                                                      MD5:9F1C8DD58550558977821FD500E7C0E0
                                                                                                                      SHA1:EFDD809BC2872A5BE0E353D31BE6D7D72E4B829C
                                                                                                                      SHA-256:BB35BB6F07BAEF72C329EC3E95D6527A2736070EE2FFE5DE227E1FF0332390F8
                                                                                                                      SHA-512:AA3C5C40AE9D342F8287958355C3321CF60566AD3E84E3D18D782FC022A998DA275506A61010A65D2E7D7578F2919C47C63AB0BA63A38800AA48D4B88ACE54D3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ru DAYS_OF_WEEK_ABBREV [list \.. "\u0412\u0441"\.. "\u041f\u043d"\.. "\u0412\u0442"\.. "\u0421\u0440"\.. "\u0427\u0442"\.. "\u041f\u0442"\.. "\u0421\u0431"].. ::msgcat::mcset ru DAYS_OF_WEEK_FULL [list \.. "\u0432\u043e\u0441\u043a\u0440\u0435\u0441\u0435\u043d\u044c\u0435"\.. "\u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a"\.. "\u0432\u0442\u043e\u0440\u043d\u0438\u043a"\.. "\u0441\u0440\u0435\u0434\u0430"\.. "\u0447\u0435\u0442\u0432\u0435\u0440\u0433"\.. "\u043f\u044f\u0442\u043d\u0438\u0446\u0430"\.. "\u0441\u0443\u0431\u0431\u043e\u0442\u0430"].. ::msgcat::mcset ru MONTHS_ABBREV [list \.. "\u044f\u043d\u0432"\.. "\u0444\u0435\u0432"\.. "\u043c\u0430\u0440"\.. "\u0430\u043f\u0440"\.. "\u043c\u0430\u0439"\.. "\u0438\u044e\u

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ru_ua.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):248
                                                                                                                      Entropy (8bit):4.9420431225061
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoVAgWIZoVY9X3vtfNrsoVA9+3vW6Q9vn:4EnLB383SFWIyaX3vtNl/3vWHNn
                                                                                                                      MD5:DC98D88964650E302BE97FDB3B33326E
                                                                                                                      SHA1:1DDDCC4265D7B980B867FEE674BEF2FD87D823F7
                                                                                                                      SHA-256:13E4E79A0ED82034BADE0CFF8DEF5DE1222F6968108AD710662BDB7DAF36D7E1
                                                                                                                      SHA-512:F3B9D528C529DD520FEDA3C20ED354E521C5B3C29F3317E15B7939CE06A3D67554D34DD6E54FE038585E46C560C604A1FD7E7F84914086B5994D52CE2C9E99CE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ru_UA DATE_FORMAT "%d.%m.%Y".. ::msgcat::mcset ru_UA TIME_FORMAT "%k:%M:%S".. ::msgcat::mcset ru_UA DATE_TIME_FORMAT "%d.%m.%Y %k:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\sh.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1212
                                                                                                                      Entropy (8bit):4.359036493565628
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83/YIXo4YY0dD6kMm7fX2NaSIvZdHZgHZ/IxvaGWxvtl9svWTN:43rLTR44/yWltOWB
                                                                                                                      MD5:E297221FA73BD78577B398BC7D061D21
                                                                                                                      SHA1:F2A6B456272F913A9E97C495CEE73AC774C90FA1
                                                                                                                      SHA-256:E65D6E5E837DF0A2DF0DB77BCE45334BBC27EFFF9023C37119E75D49932D9D6C
                                                                                                                      SHA-512:AB9DDAE7CB21193C7753041F0B88CF2D40987E7E604B47816219458D217F084AA4EBF36719E22AAB3FD71A271D9F956ADC353182991903D7ADE8C8F00F6B2F9B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset sh DAYS_OF_WEEK_ABBREV [list \.. "Ned"\.. "Pon"\.. "Uto"\.. "Sre"\.. "\u010cet"\.. "Pet"\.. "Sub"].. ::msgcat::mcset sh DAYS_OF_WEEK_FULL [list \.. "Nedelja"\.. "Ponedeljak"\.. "Utorak"\.. "Sreda"\.. "\u010cetvrtak"\.. "Petak"\.. "Subota"].. ::msgcat::mcset sh MONTHS_ABBREV [list \.. "Jan"\.. "Feb"\.. "Mar"\.. "Apr"\.. "Maj"\.. "Jun"\.. "Jul"\.. "Avg"\.. "Sep"\.. "Okt"\.. "Nov"\.. "Dec"\.. ""].. ::msgcat::mcset sh MONTHS_FULL [list \.. "Januar"\.. "Februar"\.. "Mart"\.. "April"\.. "Maj"\.. "Juni"\.. "Juli"\.. "Avgust"\.. "Septembar"\.. "Oktobar"\.. "Novembar"\.. "Decembar"\.. ""].. ::msgcat::mcset sh BC

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\sk.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1255
                                                                                                                      Entropy (8bit):4.4043119723436135
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83c46o40u3rIsmJIcm93ApLDVb2IcU95WFGEXF3eUCvtz/v3e6:43c3ow3rF93Ap7tEXFREtznp
                                                                                                                      MD5:24DA40901D907D35195CC1B3A675EBC7
                                                                                                                      SHA1:8AF31248F06FADA5CFB0D83A940CFF5CE70E2577
                                                                                                                      SHA-256:976813F6C53C9BEBBF976B0F560FD7FC5E4EC4C574D7E1CD31F9A4056765CB7A
                                                                                                                      SHA-512:A9BC6AAFE9AEEDFD1E483E54A2D27871A09ADD6807D8F90410CD2BB82A91BA9DF435652EC9A7C3AD0A080D7F153CA848BB47DAD3936BA30E4AEFF3C474C433CC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset sk DAYS_OF_WEEK_ABBREV [list \.. "Ne"\.. "Po"\.. "Ut"\.. "St"\.. "\u0160t"\.. "Pa"\.. "So"].. ::msgcat::mcset sk DAYS_OF_WEEK_FULL [list \.. "Nede\u013ee"\.. "Pondelok"\.. "Utorok"\.. "Streda"\.. "\u0160tvrtok"\.. "Piatok"\.. "Sobota"].. ::msgcat::mcset sk MONTHS_ABBREV [list \.. "jan"\.. "feb"\.. "mar"\.. "apr"\.. "m\u00e1j"\.. "j\u00fan"\.. "j\u00fal"\.. "aug"\.. "sep"\.. "okt"\.. "nov"\.. "dec"\.. ""].. ::msgcat::mcset sk MONTHS_FULL [list \.. "janu\u00e1r"\.. "febru\u00e1r"\.. "marec"\.. "apr\u00edl"\.. "m\u00e1j"\.. "j\u00fan"\.. "j\u00fal"\.. "august"\.. "september"\.. "okt\u00f3ber"\.. "november"\.. "decem

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\sl.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1216
                                                                                                                      Entropy (8bit):4.333705818952628
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83MIXpC9opYuGS/BrIsmZ5hv1yAxyIVjd392WFThENvt0vJoO:43fXYujZrqyApYJtyR
                                                                                                                      MD5:CB76F54CBE0D1AAE8BA956B4C51CBD2A
                                                                                                                      SHA1:C1F78375EDB0BD2504553E33B2024C0C63FDB1B2
                                                                                                                      SHA-256:11A6264676DBED87E4F718075127E32E107854F35F141642454F484984084486
                                                                                                                      SHA-512:69964348FF08DE6EEB5E3DD61057FF0DF5441105EB7BEE7FB7E9AC5E26DCC164E3C7C011CA5CD7BC5B97A7872532331C97CCBC80563F6C5A3548014BFA8BEF16
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset sl DAYS_OF_WEEK_ABBREV [list \.. "Ned"\.. "Pon"\.. "Tor"\.. "Sre"\.. "\u010cet"\.. "Pet"\.. "Sob"].. ::msgcat::mcset sl DAYS_OF_WEEK_FULL [list \.. "Nedelja"\.. "Ponedeljek"\.. "Torek"\.. "Sreda"\.. "\u010cetrtek"\.. "Petek"\.. "Sobota"].. ::msgcat::mcset sl MONTHS_ABBREV [list \.. "jan"\.. "feb"\.. "mar"\.. "apr"\.. "maj"\.. "jun"\.. "jul"\.. "avg"\.. "sep"\.. "okt"\.. "nov"\.. "dec"\.. ""].. ::msgcat::mcset sl MONTHS_FULL [list \.. "januar"\.. "februar"\.. "marec"\.. "april"\.. "maj"\.. "junij"\.. "julij"\.. "avgust"\.. "september"\.. "oktober"\.. "november"\.. "december"\.. ""].. ::msgcat::mcset sl B

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\sq.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1321
                                                                                                                      Entropy (8bit):4.408176575111904
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83F7ONQEwXwjjTlVoSEh76W/X+WZQJ4hv+H6v2V:43NwjPEwl4VQ8q
                                                                                                                      MD5:E606F620F03EC0FBDBE6551601299C5F
                                                                                                                      SHA1:0B50AB679E8D90D8E7319BCADAC426E004594D3B
                                                                                                                      SHA-256:1F4EFD78F6B45B65F73F09B2F52FC13C2A7C4138DCB7664804878D197B6EBDF9
                                                                                                                      SHA-512:08AF2B51EB7111E334ADDA3A03F9A8816C104E9742B523EC363FB5131A3DF73D298A8DDCD573D23C23C65CCFD2B8898DF75AE3D4F04BF80744044FB6BAB5EC0A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset sq DAYS_OF_WEEK_ABBREV [list \.. "Die"\.. "H\u00ebn"\.. "Mar"\.. "M\u00ebr"\.. "Enj"\.. "Pre"\.. "Sht"].. ::msgcat::mcset sq DAYS_OF_WEEK_FULL [list \.. "e diel"\.. "e h\u00ebn\u00eb"\.. "e mart\u00eb"\.. "e m\u00ebrkur\u00eb"\.. "e enjte"\.. "e premte"\.. "e shtun\u00eb"].. ::msgcat::mcset sq MONTHS_ABBREV [list \.. "Jan"\.. "Shk"\.. "Mar"\.. "Pri"\.. "Maj"\.. "Qer"\.. "Kor"\.. "Gsh"\.. "Sht"\.. "Tet"\.. "N\u00ebn"\.. "Dhj"\.. ""].. ::msgcat::mcset sq MONTHS_FULL [list \.. "janar"\.. "shkurt"\.. "mars"\.. "prill"\.. "maj"\.. "qershor"\.. "korrik"\.. "gusht"\.. "shtator"\.. "tetor"\.. "n\u00ebntor"\.. "dhjetor"\.

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\sr.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2087
                                                                                                                      Entropy (8bit):4.307749748884122
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:43ilQTSBQrQP9QenzMKSFD9NI/QiNQEQrQL1KKYjU5rtAx:2I5EyLMKSFZNIYMzYMKKiqW
                                                                                                                      MD5:BF363AB60B57F6D8FDCDBFD230A28DDF
                                                                                                                      SHA1:6375CBA0A2197DA7E65BEE45C42F02C4F0B9142D
                                                                                                                      SHA-256:FA00A7B22C9941F6C2B893F22B703DCB159CA2F2E4005FD6A74A632AEB786BFA
                                                                                                                      SHA-512:91AD8085EF321A5A0E4D2ED204940CB66E8E230BBEDE59A8A07D1CEED9155FCC6B075A1FCC44AE834C1FEEEB3A59256C4310684C5AC453D4C50DFABD88469814
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset sr DAYS_OF_WEEK_ABBREV [list \.. "\u041d\u0435\u0434"\.. "\u041f\u043e\u043d"\.. "\u0423\u0442\u043e"\.. "\u0421\u0440\u0435"\.. "\u0427\u0435\u0442"\.. "\u041f\u0435\u0442"\.. "\u0421\u0443\u0431"].. ::msgcat::mcset sr DAYS_OF_WEEK_FULL [list \.. "\u041d\u0435\u0434\u0435\u0459\u0430"\.. "\u041f\u043e\u043d\u0435\u0434\u0435\u0459\u0430\u043a"\.. "\u0423\u0442\u043e\u0440\u0430\u043a"\.. "\u0421\u0440\u0435\u0434\u0430"\.. "\u0427\u0435\u0442\u0432\u0440\u0442\u0430\u043a"\.. "\u041f\u0435\u0442\u0430\u043a"\.. "\u0421\u0443\u0431\u043e\u0442\u0430"].. ::msgcat::mcset sr MONTHS_ABBREV [list \.. "\u0408\u0430\u043d"\.. "\u0424\u0435\u0431"\.. "\u041c\u0430\u0440"\.. "\u0410\u043f\u0440"\.. "\u041c\u0430\u0458"\.. "\u0408\u0443\u043d"\.. "\

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\sv.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1219
                                                                                                                      Entropy (8bit):4.3542418837714285
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83qoLt6yLQoAusrIsmZ5m4AcjTHX92WFfjr4MvBvX:43ZLxQNusrr4Aw3Jkq1X
                                                                                                                      MD5:3B5C3FFA0829768470BDA1B46D882060
                                                                                                                      SHA1:C96799036EC5CCDE799A6B50CD7748908935A2F3
                                                                                                                      SHA-256:483916B51BD7E071E88F9EC36AAF3E08FEA823991532F832DE491C6C40B55A9F
                                                                                                                      SHA-512:684FA249123878AA7F856DF0FD3B0D9F041113CFEA8EEFA47D0E1948DA23694330BF0D62BA896A3891CD559C16CAE9330BF31508F530AC003D2929D5FD9246D8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset sv DAYS_OF_WEEK_ABBREV [list \.. "s\u00f6"\.. "m\u00e5"\.. "ti"\.. "on"\.. "to"\.. "fr"\.. "l\u00f6"].. ::msgcat::mcset sv DAYS_OF_WEEK_FULL [list \.. "s\u00f6ndag"\.. "m\u00e5ndag"\.. "tisdag"\.. "onsdag"\.. "torsdag"\.. "fredag"\.. "l\u00f6rdag"].. ::msgcat::mcset sv MONTHS_ABBREV [list \.. "jan"\.. "feb"\.. "mar"\.. "apr"\.. "maj"\.. "jun"\.. "jul"\.. "aug"\.. "sep"\.. "okt"\.. "nov"\.. "dec"\.. ""].. ::msgcat::mcset sv MONTHS_FULL [list \.. "januari"\.. "februari"\.. "mars"\.. "april"\.. "maj"\.. "juni"\.. "juli"\.. "augusti"\.. "september"\.. "oktober"\.. "november"\.. "december"\.. ""].. ::msgcat:

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\sw.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1040
                                                                                                                      Entropy (8bit):4.108744949579904
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:4EnLB383A4mScvhkzoR4mtuWckRkoay3UVxMmALfG7IdzVJ633xRCPLMYMvYo76u:4aR83/Shkz1uckO76kMmEf62qOTdMvvn
                                                                                                                      MD5:5774860C8AEECBD48F1502E616158CAB
                                                                                                                      SHA1:DE7059713EA7913A0C79F5386833CE2BCAD2CFD7
                                                                                                                      SHA-256:1DA068C9AA02EF14A2440758C6040D632D96044A20EC501DBB9E40D8592E0E7F
                                                                                                                      SHA-512:91E69222DDF55E9E0E389DB77D7A0F2E082351DC3FB34A1A2C1E350E4187E8BB940F6C2EDE1B8651159C2787AA0BE4D7268F33F7A82CAED03514FCE462530408
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset sw DAYS_OF_WEEK_ABBREV [list \.. "Jpi"\.. "Jtt"\.. "Jnn"\.. "Jtn"\.. "Alh"\.. "Iju"\.. "Jmo"].. ::msgcat::mcset sw DAYS_OF_WEEK_FULL [list \.. "Jumapili"\.. "Jumatatu"\.. "Jumanne"\.. "Jumatano"\.. "Alhamisi"\.. "Ijumaa"\.. "Jumamosi"].. ::msgcat::mcset sw MONTHS_ABBREV [list \.. "Jan"\.. "Feb"\.. "Mar"\.. "Apr"\.. "Mei"\.. "Jun"\.. "Jul"\.. "Ago"\.. "Sep"\.. "Okt"\.. "Nov"\.. "Des"\.. ""].. ::msgcat::mcset sw MONTHS_FULL [list \.. "Januari"\.. "Februari"\.. "Machi"\.. "Aprili"\.. "Mei"\.. "Juni"\.. "Julai"\.. "Agosti"\.. "Septemba"\.. "Oktoba"\.. "Novemba"\.. "Desemba"\.. ""].. ::msgcat::mcset sw BCE "

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ta.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1874
                                                                                                                      Entropy (8bit):4.080580566597515
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83AI0xnJdnQhmHlHYPKtul+eOPfIxyH5ztUSLu8tptLtrl+eOPfIxyH5ztUSU:43N0dQmHlHYPKtu1HxMtr1Hx/
                                                                                                                      MD5:85288236C3997302EA26D7403BBA2C15
                                                                                                                      SHA1:05AB389CC4DCF17B37BFF6ED1ECD58D6E9850A01
                                                                                                                      SHA-256:AEFDC4255890D5B3FFE5CEE1B457B7D711283C2287ABA644155C10956012F6C1
                                                                                                                      SHA-512:8E389D46606176EE14B8356153095B49C9426B80139B672A620F488891F091D1A272D4FB116775900E4AB4EC84DDDEBD8D6AF81AC672F14F148F2BFC638D2B10
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ta DAYS_OF_WEEK_FULL [list \.. "\u0b9e\u0bbe\u0baf\u0bbf\u0bb1\u0bc1"\.. "\u0ba4\u0bbf\u0b99\u0bcd\u0b95\u0bb3\u0bcd"\.. "\u0b9a\u0bc6\u0bb5\u0bcd\u0bb5\u0bbe\u0baf\u0bcd"\.. "\u0baa\u0bc1\u0ba4\u0ba9\u0bcd"\.. "\u0bb5\u0bbf\u0baf\u0bbe\u0bb4\u0ba9\u0bcd"\.. "\u0bb5\u0bc6\u0bb3\u0bcd\u0bb3\u0bbf"\.. "\u0b9a\u0ba9\u0bbf"].. ::msgcat::mcset ta MONTHS_ABBREV [list \.. "\u0b9c\u0ba9\u0bb5\u0bb0\u0bbf"\.. "\u0baa\u0bc6\u0baa\u0bcd\u0bb0\u0bb5\u0bb0\u0bbf"\.. "\u0bae\u0bbe\u0bb0\u0bcd\u0b9a\u0bcd"\.. "\u0b8f\u0baa\u0bcd\u0bb0\u0bb2\u0bcd"\.. "\u0bae\u0bc7"\.. "\u0b9c\u0bc2\u0ba9\u0bcd"\.. "\u0b9c\u0bc2\u0bb2\u0bc8"\.. "\u0b86\u0b95\u0bb8\u0bcd\u0b9f\u0bcd"\.. "\u0b9a\u0bc6\u0baa\u0bcd\u0b9f\u0bae\u0bcd\u0baa\u0bb0\u0bcd"\.. "\u0b85\u0b95\u0bcd\u0b9f\u0bcb\u0baa\u0bb0\u0bcd"\.

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\ta_in.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):257
                                                                                                                      Entropy (8bit):4.863003494480733
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xosDv+IZosK3v6ry/5osDo+3v+6f6HyFvn:4EnLB383ZDvl5K3v6ry/ZDF3vmSVn
                                                                                                                      MD5:CF078352DA0507C767F04E31D6C14296
                                                                                                                      SHA1:0A9B1255BD85B60D3620AE61370F54748AB7A182
                                                                                                                      SHA-256:4978A193076DE56944236F7F1DCECACFF739536DFB3DBEFC1F7FE2B97A8AEAF4
                                                                                                                      SHA-512:6FFC85B2A8DECB373EC76B1CD1A9459A30E443319F2C8DB9BBE6E115F5EFEEBAC314D4E8BE996EA55EE46466C6F6057A73078F5FDCF1C4CBAF1A270E45BC10C0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset ta_IN DATE_FORMAT "%d %M %Y".. ::msgcat::mcset ta_IN TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset ta_IN DATE_TIME_FORMAT "%d %M %Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\te.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2149
                                                                                                                      Entropy (8bit):4.097884113767283
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:43a8mxI9k3JR0UjjFbPcniLHVktjjFbPcniLHVM:2a8v9k3JdbPcIidbPcIG
                                                                                                                      MD5:61E4CB2AAD66285E9113071057F39C35
                                                                                                                      SHA1:A2BD21090859669C4B6A875E077825381B7E2702
                                                                                                                      SHA-256:9E96C7123100234A7018533764502985A208F2EB3314F5B6332D46016725A63F
                                                                                                                      SHA-512:589A2D65508B07B5FDEDA883F71A4B496B25458CA1ECE7C4D4F5DAE82EB683DA82C8E21E57D63A235AB600174C9D362A746B2E27BAA6E3ADE1B7BD9D6000BE27
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset te DAYS_OF_WEEK_ABBREV [list \.. "\u0c06\u0c26\u0c3f"\.. "\u0c38\u0c4b\u0c2e"\.. "\u0c2e\u0c02\u0c17\u0c33"\.. "\u0c2c\u0c41\u0c27"\.. "\u0c17\u0c41\u0c30\u0c41"\.. "\u0c36\u0c41\u0c15\u0c4d\u0c30"\.. "\u0c36\u0c28\u0c3f"].. ::msgcat::mcset te DAYS_OF_WEEK_FULL [list \.. "\u0c06\u0c26\u0c3f\u0c35\u0c3e\u0c30\u0c02"\.. "\u0c38\u0c4b\u0c2e\u0c35\u0c3e\u0c30\u0c02"\.. "\u0c2e\u0c02\u0c17\u0c33\u0c35\u0c3e\u0c30\u0c02"\.. "\u0c2c\u0c41\u0c27\u0c35\u0c3e\u0c30\u0c02"\.. "\u0c17\u0c41\u0c30\u0c41\u0c35\u0c3e\u0c30\u0c02"\.. "\u0c36\u0c41\u0c15\u0c4d\u0c30\u0c35\u0c3e\u0c30\u0c02"\.. "\u0c36\u0c28\u0c3f\u0c35\u0c3e\u0c30\u0c02"].. ::msgcat::mcset te MONTHS_ABBREV [list \.. "\u0c1c\u0c28\u0c35\u0c30\u0c3f"\.. "\u0c2b\u0c3f\u0c2c\u0c4d\u0c30\u0c35\u0c30\u0c3f"\.. "\u0c2e\u0c3

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\te_in.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):419
                                                                                                                      Entropy (8bit):5.058324650031252
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:4EnLB383LjZWsn0sHjoD0savzda3v6ry/ZF3vMSVn:4aR833Z1nnHjoDnavzd8vSCZNvMSV
                                                                                                                      MD5:BCA040A356E7E8CC597EFB9B9065F8E1
                                                                                                                      SHA1:ADAF7EC8C2035BC06E168D3F1BD7F39277E9273F
                                                                                                                      SHA-256:B110FEEDDA21ECCEFA624BEF8E1476E9F221FB253880AC370967AE4D0237CA7A
                                                                                                                      SHA-512:D408ECE8CF89FB23B45420D3CBA7655EEE713498210889A84EE25D3417360705546D97028EAAAA47764B6E9B0A3699669B98C0A53861A38E0DFCB9F3B8A47BEC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset te_IN AM "\u0c2a\u0c42\u0c30\u0c4d\u0c35\u0c3e\u0c39\u0c4d\u0c28".. ::msgcat::mcset te_IN PM "\u0c05\u0c2a\u0c30\u0c3e\u0c39\u0c4d\u0c28".. ::msgcat::mcset te_IN DATE_FORMAT "%d/%m/%Y".. ::msgcat::mcset te_IN TIME_FORMAT_12 "%I:%M:%S %P".. ::msgcat::mcset te_IN DATE_TIME_FORMAT "%d/%m/%Y %I:%M:%S %P %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\th.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2359
                                                                                                                      Entropy (8bit):4.382796122808316
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:439X4QKPQJecQwFA0P9JmDsxQ7KHfWkD2CQM0DnWxFDzCYmdrtVP:29ohCi1028QmHfIC4jW3DmHB
                                                                                                                      MD5:7F61E1EA256D78948189EF07119663CD
                                                                                                                      SHA1:6867E9780049FACE9984B7788B6F362B8D1AD718
                                                                                                                      SHA-256:48BEAF693BF5B6EED15234DB0D375B97E6D576A749E9048420C153E6CAFC0259
                                                                                                                      SHA-512:F3E24E0B41A7D722AC2FA0E429A2DCB1CCB5BAECC9912ADF6AF79C51366EA1AC9F931F0F44F068F3CEE6873516E6223CC5E7616CF523B1DFB9E528DE4D58454A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset th DAYS_OF_WEEK_ABBREV [list \.. "\u0e2d\u0e32."\.. "\u0e08."\.. "\u0e2d."\.. "\u0e1e."\.. "\u0e1e\u0e24."\.. "\u0e28."\.. "\u0e2a."].. ::msgcat::mcset th DAYS_OF_WEEK_FULL [list \.. "\u0e27\u0e31\u0e19\u0e2d\u0e32\u0e17\u0e34\u0e15\u0e22\u0e4c"\.. "\u0e27\u0e31\u0e19\u0e08\u0e31\u0e19\u0e17\u0e23\u0e4c"\.. "\u0e27\u0e31\u0e19\u0e2d\u0e31\u0e07\u0e04\u0e32\u0e23"\.. "\u0e27\u0e31\u0e19\u0e1e\u0e38\u0e18"\.. "\u0e27\u0e31\u0e19\u0e1e\u0e24\u0e2b\u0e31\u0e2a\u0e1a\u0e14\u0e35"\.. "\u0e27\u0e31\u0e19\u0e28\u0e38\u0e01\u0e23\u0e4c"\.. "\u0e27\u0e31\u0e19\u0e40\u0e2a\u0e32\u0e23\u0e4c"].. ::msgcat::mcset th MONTHS_ABBREV [list \.. "\u0e21.\u0e04."\.. "\u0e01.\u0e1e."\.. "\u0e21\u0e35.\u0e04."\.. "\u0e40\u0e21.\u0e22."\.. "\u0e1e.\u0e04."\.. "\u0e21\u0

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\tr.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1183
                                                                                                                      Entropy (8bit):4.390397293529625
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR83ZVUflVdq4qTr6dyX59508THHCh5LbQgWiNv9KvWIn:43PXTtbTngLhWiJGWIn
                                                                                                                      MD5:017F0F989BD5DBBF25E7C797CE09C45C
                                                                                                                      SHA1:162922DBD55A31A74410375A36EE7BC50E092BDD
                                                                                                                      SHA-256:4B85B345D6C43F7257C6849A60A492397FD5FD9D82DF3A2252189D7A1ECCBB64
                                                                                                                      SHA-512:73B6CF395753D863330687404E8A584CB08B81A8CC456DCE7BB49C4EA15EA19E45E3CC1E1367E10915DE14AC6258383289BCFEF55AD2768A50889DF390D37EF9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset tr DAYS_OF_WEEK_ABBREV [list \.. "Paz"\.. "Pzt"\.. "Sal"\.. "\u00c7ar"\.. "Per"\.. "Cum"\.. "Cmt"].. ::msgcat::mcset tr DAYS_OF_WEEK_FULL [list \.. "Pazar"\.. "Pazartesi"\.. "Sal\u0131"\.. "\u00c7ar\u015famba"\.. "Per\u015fembe"\.. "Cuma"\.. "Cumartesi"].. ::msgcat::mcset tr MONTHS_ABBREV [list \.. "Oca"\.. "\u015eub"\.. "Mar"\.. "Nis"\.. "May"\.. "Haz"\.. "Tem"\.. "A\u011fu"\.. "Eyl"\.. "Eki"\.. "Kas"\.. "Ara"\.. ""].. ::msgcat::mcset tr MONTHS_FULL [list \.. "Ocak"\.. "\u015eubat"\.. "Mart"\.. "Nisan"\.. "May\u0131s"\.. "Haziran"\.. "Temmuz"\.. "A\u011fustos"\.. "Eyl\u00fcl"\.. "Ekim"\.. "Kas\u0131m"\.. "Aral\u

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\uk.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2165
                                                                                                                      Entropy (8bit):4.289021158621493
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:436yILgoQjQPxUIkgPDRQnQ0vVQbC1iQwweIgWQDIoZI7QDI3QbI87IVQnIzQ7mh:2AzUe3EhV8CYgrbH7z3fLVTzgn5jyX7p
                                                                                                                      MD5:323BD95809A44B0BADC71AD36E5F095B
                                                                                                                      SHA1:44F6016873CA955D27545C56CCD24BDB06A83C43
                                                                                                                      SHA-256:7093DA7E39CEB6D3F51EB6CF1CCA2D7F3680ED7B8FE4A5F0CECEEF6BEB21AC77
                                                                                                                      SHA-512:DB16E0E2D17CE47673DE781A7171944C14CC550FB8EB0920C05B979E4D067E36DF0B59B8BFA81F82D8FCE1FFDDAAD2755E68BFE5BC0DBB11E8716A4D18BA5F7E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset uk DAYS_OF_WEEK_ABBREV [list \.. "\u043d\u0434"\.. "\u043f\u043d"\.. "\u0432\u0442"\.. "\u0441\u0440"\.. "\u0447\u0442"\.. "\u043f\u0442"\.. "\u0441\u0431"].. ::msgcat::mcset uk DAYS_OF_WEEK_FULL [list \.. "\u043d\u0435\u0434\u0456\u043b\u044f"\.. "\u043f\u043e\u043d\u0435\u0434\u0456\u043b\u043e\u043a"\.. "\u0432\u0456\u0432\u0442\u043e\u0440\u043e\u043a"\.. "\u0441\u0435\u0440\u0435\u0434\u0430"\.. "\u0447\u0435\u0442\u0432\u0435\u0440"\.. "\u043f'\u044f\u0442\u043d\u0438\u0446\u044f"\.. "\u0441\u0443\u0431\u043e\u0442\u0430"].. ::msgcat::mcset uk MONTHS_ABBREV [list \.. "\u0441\u0456\u0447"\.. "\u043b\u044e\u0442"\.. "\u0431\u0435\u0440"\.. "\u043a\u0432\u0456\u0442"\.. "\u0442\u0440\u0430\u0432"\.. "\u0447\u0435\u0440\u0432"\.. "\u043b

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\vi.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1471
                                                                                                                      Entropy (8bit):4.44729506678271
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:4aR836DNjYTP55YAUy2tJ9kyzW68IFYHMBSW1K1pvhv1O:43dbYJyC8ySgI1dV1O
                                                                                                                      MD5:C127F54C462917D3B3EEF5F29F612138
                                                                                                                      SHA1:B1D9A67F856D93F98524C6372B352EA0DE1B9CD3
                                                                                                                      SHA-256:E9B7AECD456F1D2288604C982B5DED0DCF71DCA968C0B0EAFF4CA16CC3B73EC2
                                                                                                                      SHA-512:0B0F132F10580751258D37E070338C3B39DF57FDECDB9D0AFA67E90D6766DDCB4D711876E551ED759D177F1B8F4E9E1DD8F7899F7CB57F8039F55EC4C2984E87
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset vi DAYS_OF_WEEK_ABBREV [list \.. "Th 2"\.. "Th 3"\.. "Th 4"\.. "Th 5"\.. "Th 6"\.. "Th 7"\.. "CN"].. ::msgcat::mcset vi DAYS_OF_WEEK_FULL [list \.. "Th\u01b0\u0301 hai"\.. "Th\u01b0\u0301 ba"\.. "Th\u01b0\u0301 t\u01b0"\.. "Th\u01b0\u0301 n\u0103m"\.. "Th\u01b0\u0301 s\u00e1u"\.. "Th\u01b0\u0301 ba\u0309y"\.. "Chu\u0309 nh\u00e2\u0323t"].. ::msgcat::mcset vi MONTHS_ABBREV [list \.. "Thg 1"\.. "Thg 2"\.. "Thg 3"\.. "Thg 4"\.. "Thg 5"\.. "Thg 6"\.. "Thg 7"\.. "Thg 8"\.. "Thg 9"\.. "Thg 10"\.. "Thg 11"\.. "Thg 12"\.. ""].. ::msgcat::mcset vi MONTHS_FULL [list \.. "Th\u00e1ng m\u00f4\u0323t"\.. "Th\u00e1ng hai"\.. "Th\u00e1ng ba"\.. "Th\u00e1ng t\u01b0"\.. "Th\u00e

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\zh.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with very long lines (1598), with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3385
                                                                                                                      Entropy (8bit):4.5164095151631125
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:43qrY2BBT7uxDqwPqDa8c3FLbYmhyvMDKbW0YGLuoEyke2gdr:2yPTKdo
                                                                                                                      MD5:2F356DE14D48B1091DEAA32D20C38D96
                                                                                                                      SHA1:4AB78D47A73290000955A7C1DFDF7106093F69FD
                                                                                                                      SHA-256:EB247F5184A59414D3DF7E3ECA51F5998C248CFB27D2C02E62A7A30AB35197A7
                                                                                                                      SHA-512:602410830018B455C68AE2EBDD83BA561CF59DA5898E00C80CE7EF619912E591EB38B4C8FE8D9B1F024E7105B0C4D2D326FC855F31E79C1B954429B947DFFBB1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset zh DAYS_OF_WEEK_ABBREV [list \.. "\u661f\u671f\u65e5"\.. "\u661f\u671f\u4e00"\.. "\u661f\u671f\u4e8c"\.. "\u661f\u671f\u4e09"\.. "\u661f\u671f\u56db"\.. "\u661f\u671f\u4e94"\.. "\u661f\u671f\u516d"].. ::msgcat::mcset zh DAYS_OF_WEEK_FULL [list \.. "\u661f\u671f\u65e5"\.. "\u661f\u671f\u4e00"\.. "\u661f\u671f\u4e8c"\.. "\u661f\u671f\u4e09"\.. "\u661f\u671f\u56db"\.. "\u661f\u671f\u4e94"\.. "\u661f\u671f\u516d"].. ::msgcat::mcset zh MONTHS_ABBREV [list \.. "\u4e00\u6708"\.. "\u4e8c\u6708"\.. "\u4e09\u6708"\.. "\u56db\u6708"\.. "\u4e94\u6708"\.. "\u516d\u6708"\.. "\u4e03\u6708"\.. "\u516b\u6708"\.. "\u4e5d\u6708"\.. "\u5341\u6708"\.. "\u5341\u4e00\u6708"\.. "\u5341\u4e8c\u6708"\.. ""].. ::msgcat::m

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\zh_cn.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):319
                                                                                                                      Entropy (8bit):5.167825099880243
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoX5YBoHJ+3vtfNrsoHJ+3v6MYBoXa+3vYq9vn:4EnLB383U5YMJ+3vtN3J+3v6LcL3vYqN
                                                                                                                      MD5:9FCDC2E80E13984D434E3CC91E1ED14C
                                                                                                                      SHA1:710D9EE2A71021F4AB609886138EED43C1380ACD
                                                                                                                      SHA-256:4C8A855700FEFE8EE21B08030FF4159D8011AE50353F063229C42DE6292475CF
                                                                                                                      SHA-512:D899A1F58DF1051BB2C2C4AC859C52A2D19B1593C37022A29439B37A8057ADC3941F3564E2E1D9CEB72AE123A4E12E24C3736343AA3A5EC8749AB5AEBBF65085
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset zh_CN DATE_FORMAT "%Y-%m-%e".. ::msgcat::mcset zh_CN TIME_FORMAT "%k:%M:%S".. ::msgcat::mcset zh_CN TIME_FORMAT_12 "%P%I\u65f6%M\u5206%S\u79d2".. ::msgcat::mcset zh_CN DATE_TIME_FORMAT "%Y-%m-%e %k:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\zh_hk.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):780
                                                                                                                      Entropy (8bit):4.716025632367214
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:4EnLB383HmSBBHZovDh4ToC4qU3WwVW3v6P3v3WwSn:4aR83Hxo14u3Ww+viv3WwS
                                                                                                                      MD5:CFDA7B6463305FA15DBBA72D725A1876
                                                                                                                      SHA1:2BF885073FBAF4A38B7AFDA76CA391F195A5A362
                                                                                                                      SHA-256:7E1C5BD9EC1A17BB851B0DCABD0DFA9FF9D64B89603D9D3FBEAAC609172346AE
                                                                                                                      SHA-512:55F974C706933ECE0575A33C381D9B370B8A408C5C5514C805EC04C8B0CA5BAFAA47267DA98E1805B478A9589FFB7549D79002B2A7AF387049011D78DD7605B6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset zh_HK DAYS_OF_WEEK_ABBREV [list \.. "\u65e5"\.. "\u4e00"\.. "\u4e8c"\.. "\u4e09"\.. "\u56db"\.. "\u4e94"\.. "\u516d"].. ::msgcat::mcset zh_HK MONTHS_ABBREV [list \.. "1\u6708"\.. "2\u6708"\.. "3\u6708"\.. "4\u6708"\.. "5\u6708"\.. "6\u6708"\.. "7\u6708"\.. "8\u6708"\.. "9\u6708"\.. "10\u6708"\.. "11\u6708"\.. "12\u6708"\.. ""].. ::msgcat::mcset zh_HK DATE_FORMAT "%Y\u5e74%m\u6708%e\u65e5".. ::msgcat::mcset zh_HK TIME_FORMAT_12 "%P%I:%M:%S".. ::msgcat::mcset zh_HK DATE_TIME_FORMAT "%Y\u5e74%m\u6708%e\u65e5 %P%I:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\zh_sg.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):347
                                                                                                                      Entropy (8bit):5.062880051437783
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoOpEoPpFocMohX3v6Zwoh+3v6fxvn:4EnLB383J53v6O3vCn
                                                                                                                      MD5:3218F8E6BEDD534277DE0849C423158E
                                                                                                                      SHA1:10C006446A10406A5644C4033665E877EBF72AF7
                                                                                                                      SHA-256:500546B3211D454659D845B4AB9AEF226125100DF40407C49530DE17CDD4363F
                                                                                                                      SHA-512:3142893DA85BA8F83A5B6851B313B5F5FF80D2B989C1AE015665EE70373249B44EFB4FF7C621F1D8F37AC6019EF5E8D6D21C76C48998C3D9072F9C5060AA8813
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset zh_SG AM "\u4e0a\u5348".. ::msgcat::mcset zh_SG PM "\u4e2d\u5348".. ::msgcat::mcset zh_SG DATE_FORMAT "%d %B %Y".. ::msgcat::mcset zh_SG TIME_FORMAT_12 "%P %I:%M:%S".. ::msgcat::mcset zh_SG DATE_TIME_FORMAT "%d %B %Y %P %I:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\msgs\zh_tw.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):354
                                                                                                                      Entropy (8bit):5.124064818715749
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSyEtJLl73oo6d3/xoAykaRULH/XRxy/5oAyjZRULHi5oAyU/G0OMoAyxW3v6ZQ:4EnLB38315xDOiKRRW3v6F3v8A2n
                                                                                                                      MD5:9010E34791B5DDB7F1E0AD4DA6BD4623
                                                                                                                      SHA1:418F7374BABEF27FEC8E00D3A32F535084593AB9
                                                                                                                      SHA-256:DBA0584B8E1925B439F06E0BF0965E97AFB7EB39E70E0E4C9B70769EBC5F996C
                                                                                                                      SHA-512:D3AB698B725E84DAB06E472C41FF2EB55D63885D22B4598C596800BAC83A02A44CB524524F267D090952AF7E0031F47720786ACF9E354EF672CF9EEFB7DB3BD4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/loadICU.tcl -- do not edit..namespace eval ::tcl::clock {.. ::msgcat::mcset zh_TW BCE "\u6c11\u570b\u524d".. ::msgcat::mcset zh_TW CE "\u6c11\u570b".. ::msgcat::mcset zh_TW DATE_FORMAT "%Y/%m/%e".. ::msgcat::mcset zh_TW TIME_FORMAT_12 "%P %I:%M:%S".. ::msgcat::mcset zh_TW DATE_TIME_FORMAT "%Y/%m/%e %P %I:%M:%S %z"..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\opt0.4\optparse.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Tcl script, ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):33777
                                                                                                                      Entropy (8bit):4.60013086740989
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:4D0xrpIuhenN4kA0G6sRcl5AdtsPLKiF64aJQ2L:HpnhsS9C5Adqua5aJvL
                                                                                                                      MD5:4ECD97188BFED58A15FE22EC566FA6A3
                                                                                                                      SHA1:6E4E91096298F1A0AE6CD4241F167C8B4F661EE5
                                                                                                                      SHA-256:67A157F1873D606B53DC4D894BD8E71F6B1A0DD66177B9513BD039B348B40349
                                                                                                                      SHA-512:1D5067BBB13DAB001168EEB41EBFA2D13BACB0F43A8067CC93923E8F4D062AA387DA23D7D98D6A2AE77D7C849A6026F2343102CBE03690C2CEA0890222339475
                                                                                                                      Malicious:false
                                                                                                                      Preview:# optparse.tcl --..#..# (private) Option parsing package..# Primarily used internally by the safe:: code...#..#.WARNING: This code will go away in a future release..#.of Tcl. It is NOT supported and you should not rely..#.on it. If your code does rely on this package you..#.may directly incorporate this code into your application.....package require Tcl 8.5-..# When this version number changes, update the pkgIndex.tcl file..# and the install directory in the Makefiles...package provide opt 0.4.8....namespace eval ::tcl {.... # Exported APIs.. namespace export OptKeyRegister OptKeyDelete OptKeyError OptKeyParse \.. OptProc OptProcArgGiven OptParse \... Lempty Lget \.. Lassign Lvarpop Lvarpop1 Lvarset Lvarincr \.. SetMax SetMin......################# Example of use / 'user documentation' ###################.... proc OptCreateTestProc {} {.....# Defines ::tcl::OptParseTest as a test proc with parsed arguments...# (can't be d

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\opt0.4\pkgIndex.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):620
                                                                                                                      Entropy (8bit):4.702477618616754
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:jHxIRu9zhjJS42wbGlTULuUAZb3KykszLYIGbyAkXaqrQ+pBb6:biRUJS42wbGlTUcZ+yk2LY0XaqrB4
                                                                                                                      MD5:07532085501876DCC6882567E014944C
                                                                                                                      SHA1:6BC7A122429373EB8F039B413AD81C408A96CB80
                                                                                                                      SHA-256:6A4ABD2C519A745325C26FB23BE7BBF95252D653A24806EB37FD4AA6A6479AFE
                                                                                                                      SHA-512:0D604E862F3A1A19833EAD99AAF15A9F142178029AB64C71D193CEE4901A0196C1EEDDC2BCE715B7FA958AC45C194E63C77A71E4BE4F9AEDFD5B44CF2A726E76
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Tcl package index file, version 1.1..# This file is generated by the "pkg_mkIndex -direct" command..# and sourced either when an application starts up or..# by a "package unknown" script. It invokes the..# "package ifneeded" command to set up package-related..# information so that packages will be loaded automatically..# in response to "package require" commands. When this..# script is sourced, the variable $dir must contain the..# full path name of this file's directory.....if {![package vsatisfies [package provide Tcl] 8.5-]} {return}..package ifneeded opt 0.4.8 [list source [file join $dir optparse.tcl]]..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\package.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):23995
                                                                                                                      Entropy (8bit):4.884828325514459
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:8xgjLNILEHsdAW2UfnImRqXqux6XmihmCchzPLrXJjJh6PLfzdklG:8xgjLNImsdnvIm86uGLhLchzDzJ9h6Dn
                                                                                                                      MD5:DDB0AB9842B64114138A8C83C4322027
                                                                                                                      SHA1:ECCACDC2CCD86A452B21F3CF0933FD41125DE790
                                                                                                                      SHA-256:F46AB61CDEBE3AA45FA7E61A48930D64A0D0E7E94D04D6BF244F48C36CAFE948
                                                                                                                      SHA-512:C0CF718258B4D59675C088551060B34CE2BC8638958722583AC2313DC354223BFEF793B02F1316E522A14C7BA9BED219531D505DE94DC3C417FC99D216A01463
                                                                                                                      Malicious:false
                                                                                                                      Preview:# package.tcl --..#..# utility procs formerly in init.tcl which can be loaded on demand..# for package management...#..# Copyright (c) 1991-1993 The Regents of the University of California...# Copyright (c) 1994-1998 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....namespace eval tcl::Pkg {}....# ::tcl::Pkg::CompareExtension --..#..# Used internally by pkg_mkIndex to compare the extension of a file to a given..# extension. On Windows, it uses a case-insensitive comparison because the..# file system can be file insensitive...#..# Arguments:..# fileName.name of a file whose extension is compared..# ext..(optional) The extension to compare against; you must..#..provide the starting dot...#..Defaults to [info sharedlibextension]..#..# Results:..# Returns 1 if the extension matches, 0 otherwise....proc tcl::Pkg::CompareExtension {fileName {ext {}}} {.. global tcl_platfor

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\parray.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):844
                                                                                                                      Entropy (8bit):4.883013702569192
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:TF7S2n2wn2SNHaeYF9xcwrmXhbs1GUiSYX3EtSK78ex4VIpynEw88/McUBbPgnz:TF7Hn2wnlk2KwyZSM4SkV/3UB7Cz
                                                                                                                      MD5:577787C2F4F5956BA70F83012B980AE5
                                                                                                                      SHA1:040B2469F796F3FDFCD1E1DD2EB1C5B799EDEF62
                                                                                                                      SHA-256:E269029C8263E3CBC1920C3604ECDCF15EDCCB208A0D68F9EB42B73954D620C0
                                                                                                                      SHA-512:C2940F6F3D77412EFC537B8AB67352F519DFFA95739FCC17BF1817335AFD9E5BFE91ABE98CBA99E278CB4923D4E6D431ED9D72282745203C0F7D73193F550238
                                                                                                                      Malicious:false
                                                                                                                      Preview:# parray:..# Print the contents of a global array on stdout...#..# Copyright (c) 1991-1993 The Regents of the University of California...# Copyright (c) 1994 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....proc parray {a {pattern *}} {.. upvar 1 $a array.. if {![array exists array]} {...return -code error "\"$a\" isn't an array".. }.. set maxl 0.. set names [lsort [array names array $pattern]].. foreach name $names {...if {[string length $name] > $maxl} {... set maxl [string length $name]...}.. }.. set maxl [expr {$maxl + [string length $a] + 2}].. foreach name $names {...set nameString [format %s(%s) $a $name]...puts stdout [format "%-*s = %s" $maxl $nameString $array($name)].. }..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\safe.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Tcl script, ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):42223
                                                                                                                      Entropy (8bit):4.822635446297551
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:H/Jo8y7AyARYhZfc3njlVdRIp4xOtoYx4WneNiBq5vIhfwEaqadlUCJ2Pbb1P6:H/c7AmhZmnjvdRIG924WneNiBq5+fwEc
                                                                                                                      MD5:B8C1561D471CFBF4111C706411D59883
                                                                                                                      SHA1:71483EAEEF377EE9AF90BEC44F70C7B12C5BC720
                                                                                                                      SHA-256:C21DCE3AB31893118BBED01E559070F1D3541877FEE331BD45F5BF4300ED9654
                                                                                                                      SHA-512:465065A938C71AF4588B3331B51A62DD57F57492EB1CB6C0F52B9FD0A2FE7A54B1E995AA56E4A41D7A99EAFF665C1E23E3B240FB3F9840AB242C21B1DBFFFF45
                                                                                                                      Malicious:false
                                                                                                                      Preview:# safe.tcl --..#..# This file provide a safe loading/sourcing mechanism for safe interpreters...# It implements a virtual path mechanism to hide the real pathnames from the..# child. It runs in a parent interpreter and sets up data structure and..# aliases that will be invoked when used from a child interpreter...#..# See the safe.n man page for details...#..# Copyright (c) 1996-1997 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution of..# this file, and for a DISCLAIMER OF ALL WARRANTIES.....#..# The implementation is based on namespaces. These naming conventions are..# followed:..# Private procs starts with uppercase...# Public procs are exported and starts with lowercase..#....# Needed utilities package..package require opt 0.4.8....# Create the safe namespace..namespace eval ::safe {.. # Exported API:.. namespace export interpCreate interpInit interpConfigure interpDelete \...interpAddToAccessPath interpFindInAccessPath setL

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tclIndex

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5617
                                                                                                                      Entropy (8bit):4.747404679682368
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:eOaVhNUMUuUQU2UsUIUbUEUEeUkgU6UWSO0DT5RTdcvsilrvs+jscMK57ehXowrz:ejVHRRLP3LWDXewTbSO0DT5RTdcvsilg
                                                                                                                      MD5:C62FB22F4C9A3EFF286C18421397AAF4
                                                                                                                      SHA1:4A49B8768CFF68F2EFFAF21264343B7C632A51B2
                                                                                                                      SHA-256:DDF7E42DEF37888AD0A564AA4F8CA95F4EEC942CEBEBFCA851D35515104D5C89
                                                                                                                      SHA-512:558D401CB6AF8CE3641AF55CAEBC9C5005AB843EE84F60C6D55AFBBC7F7129DA9C58C2F55C887C3159107546FA6BC13FFC4CCA63EA8841D7160B8AA99161A185
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Tcl autoload index file, version 2.0..# -*- tcl -*-..# This file is generated by the "auto_mkindex" command..# and sourced to set up indexing information for one or..# more commands. Typically each line is a command that..# sets an element in the auto_index array, where the..# element name is the name of a command and the value is..# a script that loads the command.....set auto_index(auto_reset) [list source [file join $dir auto.tcl]]..set auto_index(tcl_findLibrary) [list source [file join $dir auto.tcl]]..set auto_index(auto_mkindex) [list source [file join $dir auto.tcl]]..set auto_index(auto_mkindex_old) [list source [file join $dir auto.tcl]]..set auto_index(::auto_mkindex_parser::init) [list source [file join $dir auto.tcl]]..set auto_index(::auto_mkindex_parser::cleanup) [list source [file join $dir auto.tcl]]..set auto_index(::auto_mkindex_parser::mkindex) [list source [file join $dir auto.tcl]]..set auto_index(::auto_mkindex_parser::hook) [list source [file join $dir auto.t

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tm.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):12204
                                                                                                                      Entropy (8bit):4.763796758810551
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:55CjnlRfMKqaOH5bE2KjNkkpgpCmqkkuowUh9PTYMsvSO+xy8h/vuKisM68E:5q3MKYH5bE1jNkkpgomq/uCPTYMC+k83
                                                                                                                      MD5:215262A286E7F0A14F22DB1AA7875F05
                                                                                                                      SHA1:66B942BA6D3120EF8D5840FCDEB06242A47491FF
                                                                                                                      SHA-256:4B7ED9FD2363D6876092DB3F720CBDDF97E72B86B519403539BA96E1C815ED8F
                                                                                                                      SHA-512:6ECD745D7DA9D826240C0AB59023C703C94B158AE48C1410FAA961A8EDB512976A4F15AE8DEF099B58719ADF0D2A9C37E6F29F54D39C1AB7EE81FA333A60F39B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# -*- tcl -*-..#..# Searching for Tcl Modules. Defines a procedure, declares it as the primary..# command for finding packages, however also uses the former 'package unknown'..# command as a fallback...#..# Locates all possible packages in a directory via a less restricted glob. The..# targeted directory is derived from the name of the requested package, i.e...# the TM scan will look only at directories which can contain the requested..# package. It will register all packages it found in the directory so that..# future requests have a higher chance of being fulfilled by the ifneeded..# database without having to come to us again...#..# We do not remember where we have been and simply rescan targeted directories..# when invoked again. The reasoning is this:..#..# - The only way we get back to the same directory is if someone is trying to..# [package require] something that wasn't there on the first scan...#..# Either..# 1) It is there now: If we rescan, you get it; if not you don

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Abidjan

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):147
                                                                                                                      Entropy (8bit):4.995501022397479
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2DcsBdNMXGm2OHnFvpsYoHsdSalHFLwy:SlSWB9eg/2DBpDm2OHnFvmYoH1alHOy
                                                                                                                      MD5:FF8B5540631A6EE93507338C4E7AA49D
                                                                                                                      SHA1:817B261A1B6B92AA498EC286349964EA10FB5A84
                                                                                                                      SHA-256:7213997BB9CF9D384A7002B8C8EFEF25C01ABA6083D9835A16D583D5DCEE40A0
                                                                                                                      SHA-512:8D78AC4868ED0013EDA536C0E82E0E91398772AA18C637AEFE22F24B142FCDA55A4CB853B2282951E907C9E2F62BD3F831A5CF995F52898F5225D16889943A9C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Abidjan) {.. {-9223372036854775808 -968 0 LMT}.. {-1830383032 0 0 GMT}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Accra

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):183
                                                                                                                      Entropy (8bit):4.832432925672155
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/2Dc9XfBQDcsS:SlSWB9vsM3y7s3HAIgNT4pHN/2DUGDBS
                                                                                                                      MD5:52FDFD3DB98475FBBB620D0D5565C5CC
                                                                                                                      SHA1:C7750452859663605272553DBEE0B6C134E1517C
                                                                                                                      SHA-256:6040827AFED8CEF45F252FBD7E3E862C0B5E9D06C1C98C58BAD61DFE67BD57CC
                                                                                                                      SHA-512:2FF9D96D81279148A86BE208FEEACCBCB8B4224D093D6C092ECD1C4EA2186589CCF947027D3A726600C703611B4CFEE029AA14ED3E8593C477B427C4F342CF27
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Africa/Accra) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Addis_Ababa

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.817170256300069
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsVVMMvfXHAIgNGExVMeWARL/2DczqIVDcVVMMyn:SlSWB9vsM3y7VTHAIgNTxcAN/2DnaDkO
                                                                                                                      MD5:30CDD4D37E9DD60FBF6D754C9343F364
                                                                                                                      SHA1:56F896C21068764B7B8F884F374B18913CA3D9CA
                                                                                                                      SHA-256:E11FD8AD8572B684333810CFDC23B92E1ACF619875866985E288D92F8277D07F
                                                                                                                      SHA-512:78FC8043CCE25713404E70996229E5EA8238BF5C0F59029064EDA5494E2D4F54398931F3D855E30C82B2C53B789C40EE4CBF09D0F98C2BA6734595D4AA75017A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Nairobi)]} {.. LoadTimeZoneFile Africa/Nairobi..}..set TZData(:Africa/Addis_Ababa) $TZData(:Africa/Nairobi)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Algiers

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1080
                                                                                                                      Entropy (8bit):4.187497782275587
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862D7nmdHh5Cv6/lHY8SOSuvvzXipFSgSO5vW5aKmvbsF6VWsXN87QBWcAFy:5veSvKlHYXNujXipFSjKRKXiWsXCGWJy
                                                                                                                      MD5:E8D3DF11CE0E7575485573FA07D955D5
                                                                                                                      SHA1:3B2C00C85B6C0BFAA1C676C970D6DF1B4BDC3D4A
                                                                                                                      SHA-256:E6874647561CE1C5FD1F650C9B167F77AC5B24FD2026046399A9043CF998E5C4
                                                                                                                      SHA-512:E2968BE847622CF243C0E498436FD21BDC2E1DF0FD8D694F2C70569D17CE896CDE4968BB8ABDEF9F687439E4EA2D955AE87D6C15E81F881EE1413416A90765D4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Algiers) {.. {-9223372036854775808 732 0 LMT}.. {-2486592732 561 0 PMT}.. {-1855958961 0 0 WET}.. {-1689814800 3600 1 WEST}.. {-1680397200 0 0 WET}.. {-1665363600 3600 1 WEST}.. {-1648342800 0 0 WET}.. {-1635123600 3600 1 WEST}.. {-1616893200 0 0 WET}.. {-1604278800 3600 1 WEST}.. {-1585443600 0 0 WET}.. {-1574038800 3600 1 WEST}.. {-1552266000 0 0 WET}.. {-1539997200 3600 1 WEST}.. {-1531443600 0 0 WET}.. {-956365200 3600 1 WEST}.. {-950486400 0 0 WET}.. {-942012000 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-796262400 3600 0 CET}.. {-781052400 7200 1 CEST}.. {-766630800 3600 0 CET}.. {-733280400 0 0 WET}.. {-439430400 3600 0 CET}.. {-212029200 0 0 WET}.. {41468400 3600 1 WEST}.. {54774000 0 0 WET}.. {231724800 3600 1 WEST}.. {246240000 3600 0 CET}.. {259545600 7200 1 CEST}.. {275274000 3600 0 CET}.. {309740400 0 0 WET}.. {

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Asmara

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):184
                                                                                                                      Entropy (8bit):4.801054282631739
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsVVMMvfXHAIgNGExVMeWARL/2DcjEUEH+DcVVMMyn:SlSWB9vsM3y7VTHAIgNTxcAN/2DGs+DR
                                                                                                                      MD5:A543BDEB3771017421FB75231F0004F2
                                                                                                                      SHA1:D682C58C27562FF3ABAB8EDE8EB6EA754DA7C02E
                                                                                                                      SHA-256:064EB7F9A1FA05A317C6BDCA6B102BC1560D980758F9E4DDB010C9E7DC068ECB
                                                                                                                      SHA-512:44848D60EDC79AF784A819714C0D9F62DCCB6329B47F25D74AB8C174BF9EC3F783C66FEB27F588A93FABA9BECAF076F453D6D797CE4F28461F7AE69440EA54C7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Nairobi)]} {.. LoadTimeZoneFile Africa/Nairobi..}..set TZData(:Africa/Asmara) $TZData(:Africa/Nairobi)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Asmera

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):184
                                                                                                                      Entropy (8bit):4.806258322241929
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsVVMMvfXHAIgNGExVMeWARL/2DcjAWDcVVMMyn:SlSWB9vsM3y7VTHAIgNTxcAN/2D8DkOn
                                                                                                                      MD5:1B5E386E7A2F10D9385DE4C5683EBB85
                                                                                                                      SHA1:FECBA599C37493D2E0AEE8E21BAB40BF8E8DC82A
                                                                                                                      SHA-256:76939852A98EA7BF156D0AC18B434CC610DAF5232322C0FBB066CD52C5B72AF7
                                                                                                                      SHA-512:B36FABFCDB2187A3A4A211C8E033D96C91E3C4D47907D284E10786555562C82231566033EAB4753EF1E48DF1233CFC8C6C0FB3CA50748BE0B2554A972A88FBA0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Nairobi)]} {.. LoadTimeZoneFile Africa/Nairobi..}..set TZData(:Africa/Asmera) $TZData(:Africa/Nairobi)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Bamako

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):184
                                                                                                                      Entropy (8bit):4.883634030944169
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/2DcxAQDcsS:SlSWB9vsM3y7s3HAIgNT4pHN/2DwNDBS
                                                                                                                      MD5:6B9BB5B37C41AA727E31BF03483DC1CA
                                                                                                                      SHA1:CB3BBA37B063EA4A54CD15C6E30C14D8CA30D3C0
                                                                                                                      SHA-256:F6D1BA22115A6565B6D6ABEB578F001DDB41E673C422C8EA70D0DF77B24115F6
                                                                                                                      SHA-512:23DB3E298FDEB165FD85D99E03C00835B584984B814AF7F54A9CDD4A9F93E16B0C58342D319129F46CF8EC36F93DE5EA51B492CA4CABDAB75D84709BC6C26119
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Africa/Bamako) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Bangui

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):178
                                                                                                                      Entropy (8bit):4.882974805254803
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsGe/vXHAIgNGESuvHRL/2Dcx2m/2DcGeyn:SlSWB9vsM3y7VXHAIgNTTN/2Dw/2D4yn
                                                                                                                      MD5:92FF9E5835C0C80F358BFE69120660A0
                                                                                                                      SHA1:724758B43BD79DD8A29B02BE6910D492924F8280
                                                                                                                      SHA-256:5047A507D22B68C9349EB6A48C41C80DB4C69F98F99C6574059DEA87178E36C0
                                                                                                                      SHA-512:6FCB709DB4AC19191FECE1E8BAC55E77F265B5AF89F7A3565F06BFAF0BEE12E3EAF2F52CA09C68D75C358C25A31867505CE8AD75D7386DCD15F4BE1CE61272CD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Lagos)]} {.. LoadTimeZoneFile Africa/Lagos..}..set TZData(:Africa/Bangui) $TZData(:Africa/Lagos)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Banjul

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):184
                                                                                                                      Entropy (8bit):4.888193386512119
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/2Dcx79FHp4DcsS:SlSWB9vsM3y7s3HAIgNT4pHN/2Dw7J4c
                                                                                                                      MD5:46E5703CF284E44E15E5872DF075FCBC
                                                                                                                      SHA1:EA4BFA6D568DFA877F72302ADA21ECC2840D9FD5
                                                                                                                      SHA-256:77E610A02CCECE3045B09D07A9BE6100F5AA9C3C2AEB543535C9AE941194F4E4
                                                                                                                      SHA-512:1454467FE63E97DFA4DE66E359F68B2D80C92CDE59FC15A4BE513629FFD154D2281EADF3FC78F7AFDDF5A5896195F3A69E66697A659BBB1A0EAFD3E1DA6565EC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Africa/Banjul) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Bissau

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):176
                                                                                                                      Entropy (8bit):4.847843768169462
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2Dc5iDMXGm2OHGVkeoHsdSawwF6hSVPVFwy:SlSWB9eg/2D4uDm2OHCkeoH1awwFMmMy
                                                                                                                      MD5:7E710C939B9CC0C1AC1ECF4239B543C5
                                                                                                                      SHA1:429CC87086FB22727815ED05AC6472333FF06013
                                                                                                                      SHA-256:2A870E534DE67713C27F2F3B9BF26FA7498C240CF633988CE76DBDAC5B69214D
                                                                                                                      SHA-512:70D9365C31C43A95211FC20E9290B24D356FFEFA935B8829CE32831026A196DECDD12226097F6DA3B4B919E137AA0181714680CDBB72B00C130A87E3A4735004
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Bissau) {.. {-9223372036854775808 -3740 0 LMT}.. {-1830380400 -3600 0 -01}.. {157770000 0 0 GMT}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Blantyre

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):183
                                                                                                                      Entropy (8bit):4.904342145830274
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsfKG5XHAIgNGEjKORL/2Dc8ycXp75h4DcfKB:SlSWB9vsM3y7fnHAIgNTjdN/2DAmp1hs
                                                                                                                      MD5:7AD3749D7047855CB9B9EC9696015402
                                                                                                                      SHA1:F792359AD9EEC2ABD98DAFA6661C1E57BAB89EBE
                                                                                                                      SHA-256:8F700409B8EEE33ACE5F050414971FFEE0270949842E58E9299BB5CD6CCF34DE
                                                                                                                      SHA-512:681C1B318746C587DEBA6E109D1D5A99D1F3E28FE46C24F36B69D533D884FDDC6EA35BB31A475575D683B73BF129FED761523EC9285F2FF1E4CACA2C54C046C5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Maputo)]} {.. LoadTimeZoneFile Africa/Maputo..}..set TZData(:Africa/Blantyre) $TZData(:Africa/Maputo)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Brazzaville

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):183
                                                                                                                      Entropy (8bit):4.901235831565769
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsGe/vXHAIgNGESuvHRL/2DciE0TMJZp4DcGeyn:SlSWB9vsM3y7VXHAIgNTTN/2D4qGp4D1
                                                                                                                      MD5:7028268EE88250AC40547A3FDBBFC67C
                                                                                                                      SHA1:5006D499CD1D1CB93EB3DA0EC279F76B7123DAA6
                                                                                                                      SHA-256:596DB2D64CDD6250642CB65514D5BCB52F3E3EA83F50D8915D9D4FDEA008F440
                                                                                                                      SHA-512:D623C69FE8A6050E77FB819C2F5FAEE35D5034182B1D30A409C17208155501656133E774E402875537335F8201E4734A0B5D327712CBF623AC330F1014D9025B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Lagos)]} {.. LoadTimeZoneFile Africa/Lagos..}..set TZData(:Africa/Brazzaville) $TZData(:Africa/Lagos)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Bujumbura

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):184
                                                                                                                      Entropy (8bit):4.947752840781864
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsfKG5XHAIgNGEjKORL/2DclbDcfKB:SlSWB9vsM3y7fnHAIgNTjdN/2DkbDEi
                                                                                                                      MD5:0EBC2D8F0BD1A32C21070F9397EAC9E2
                                                                                                                      SHA1:95AAA97427265635784E8AC624CA863DB9F1475D
                                                                                                                      SHA-256:9A15867255B43A954CA60DA11660F157553AAB6A15C50ACD49D182276E0CF4CC
                                                                                                                      SHA-512:4CD2E14F84C58E955742637A51D99DB9493972671A2B5D801EBD9D901D4903654E374C59BF010C70071D33FA17788358F78004201A787CCA2AD714D670393488
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Maputo)]} {.. LoadTimeZoneFile Africa/Maputo..}..set TZData(:Africa/Bujumbura) $TZData(:Africa/Maputo)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Cairo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3852
                                                                                                                      Entropy (8bit):3.7766651198444507
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:58ybRwEa40MF4pt0/jaGYbaJF0a3T07ITB85oWXmSGmuyTVuV0apRQnL0KD3rZza:fLg1GbJFp3gHRQVy7DPUUQkiHMo
                                                                                                                      MD5:9DCDB3DD41DA13D81EB8E1CAF56964DA
                                                                                                                      SHA1:F95EE7B1EF464F2640EC4AE29F3C18B5BF2B2905
                                                                                                                      SHA-256:8698B0A53D858AEA7C495EDF759EF0E6C63F7E07A256599393DEC7B7A7413734
                                                                                                                      SHA-512:BA5898ABEE541BC72C9DEDD77BABB18024C7AEA0274FA3F809748FCBFF770BFAD902BF70680DDE989F7D3592E5398C100D0E0EA388D4200911ED7DE089535D6D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Cairo) {.. {-9223372036854775808 7509 0 LMT}.. {-2185409109 7200 0 EET}.. {-929844000 10800 1 EEST}.. {-923108400 7200 0 EET}.. {-906170400 10800 1 EEST}.. {-892868400 7200 0 EET}.. {-875844000 10800 1 EEST}.. {-857790000 7200 0 EET}.. {-844308000 10800 1 EEST}.. {-825822000 7200 0 EET}.. {-812685600 10800 1 EEST}.. {-794199600 7200 0 EET}.. {-779853600 10800 1 EEST}.. {-762663600 7200 0 EET}.. {-399088800 10800 1 EEST}.. {-386650800 7200 0 EET}.. {-368330400 10800 1 EEST}.. {-355114800 7200 0 EET}.. {-336790800 10800 1 EEST}.. {-323654400 7200 0 EET}.. {-305168400 10800 1 EEST}.. {-292032000 7200 0 EET}.. {-273632400 10800 1 EEST}.. {-260496000 7200 0 EET}.. {-242096400 10800 1 EEST}.. {-228960000 7200 0 EET}.. {-210560400 10800 1 EEST}.. {-197424000 7200 0 EET}.. {-178938000 10800 1 EEST}.. {-165801600 7200 0 EET}.. {-147402000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Casablanca

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5532
                                                                                                                      Entropy (8bit):3.535398586134154
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:zE+CJZtmaG6/eszBrlxs5MRhk9xPmwv7KbGKCDp0d:7MZSszBrlKcJC9k
                                                                                                                      MD5:18183122D242E0B69A80BC02BC0328DF
                                                                                                                      SHA1:C9976ABC0663EB29A2FEAAFDF6746C05A264B67C
                                                                                                                      SHA-256:8776EEDFDFEE09C4C833593127CEFAC9C33E2487AB9BF4BF8C73E5E11B4E5613
                                                                                                                      SHA-512:9611A6EF9C5B55FAB752C1EC7E464B8AF60AE32383CE9BA72F35168ABB68A45DB0654A9099CBDC123F5F6E2B6DB7C8FBF56A8DDB813824187AD1090971F12219
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Casablanca) {.. {-9223372036854775808 -1820 0 LMT}.. {-1773012580 0 0 +00}.. {-956361600 3600 1 +00}.. {-950490000 0 0 +00}.. {-942019200 3600 1 +00}.. {-761187600 0 0 +00}.. {-617241600 3600 1 +00}.. {-605149200 0 0 +00}.. {-81432000 3600 1 +00}.. {-71110800 0 0 +00}.. {141264000 3600 1 +00}.. {147222000 0 0 +00}.. {199756800 3600 1 +00}.. {207702000 0 0 +00}.. {231292800 3600 1 +00}.. {244249200 0 0 +00}.. {265507200 3600 1 +00}.. {271033200 0 0 +00}.. {448243200 3600 0 +01}.. {504918000 0 0 +00}.. {1212278400 3600 1 +00}.. {1220223600 0 0 +00}.. {1243814400 3600 1 +00}.. {1250809200 0 0 +00}.. {1272758400 3600 1 +00}.. {1281222000 0 0 +00}.. {1301788800 3600 1 +00}.. {1312066800 0 0 +00}.. {1335664800 3600 1 +00}.. {1342749600 0 0 +00}.. {1345428000 3600 1 +00}.. {1348970400 0 0 +00}.. {1367114400 3600 1 +00}.. {13731

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Ceuta

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7536
                                                                                                                      Entropy (8bit):3.8315604186920704
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:TzLdXKy9f4elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCsyZhltlUxo:TdayR41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:30155093248C4F7E45EF7C0132D2B2AB
                                                                                                                      SHA1:FAD100CC49F0CB0910BDE39B43295A47512E1BE6
                                                                                                                      SHA-256:8827F7311EDE69A9679BDF2B7418DBF350A2FC8F973E8B1E1E4390D4D5C6D2E8
                                                                                                                      SHA-512:469A24AF0C2A4A40CB2488C3E21BB9BBDE057F876EACA08A31FC6F22845063D917A0A4AE96680401E45792DE534EE3A305F137A93C4DF879B4602510D881270E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Ceuta) {.. {-9223372036854775808 -1276 0 LMT}.. {-2177452800 0 0 WET}.. {-1630112400 3600 1 WEST}.. {-1616810400 0 0 WET}.. {-1451692800 0 0 WET}.. {-1442451600 3600 1 WEST}.. {-1427673600 0 0 WET}.. {-1379293200 3600 1 WEST}.. {-1364774400 0 0 WET}.. {-1348448400 3600 1 WEST}.. {-1333324800 0 0 WET}.. {-1316390400 3600 1 WEST}.. {-1301270400 0 0 WET}.. {-1293840000 0 0 WET}.. {-94694400 0 0 WET}.. {-81432000 3600 1 WEST}.. {-71110800 0 0 WET}.. {141264000 3600 1 WEST}.. {147222000 0 0 WET}.. {199756800 3600 1 WEST}.. {207702000 0 0 WET}.. {231292800 3600 1 WEST}.. {244249200 0 0 WET}.. {265507200 3600 1 WEST}.. {271033200 0 0 WET}.. {448243200 3600 0 CET}.. {504918000 3600 0 CET}.. {512528400 7200 1 CEST}.. {528253200 3600 0 CET}.. {543978000 7200 1 CEST}.. {559702800 3600 0 CET}.. {575427600 7200 1 CEST}.. {591152400 3600

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Conakry

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.88110192592456
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/2DcmMM1+DcsS:SlSWB9vsM3y7s3HAIgNT4pHN/2DCM1+c
                                                                                                                      MD5:8CDD2EEB7E0EC816F3EC051350FEBF13
                                                                                                                      SHA1:37F3A149B4A01DFA2EAB42A28C810BE66AAB7C52
                                                                                                                      SHA-256:3176C99FC45337CBCE0CD516DE4B02B8BAA47D00E84F698122A2ADD57797984E
                                                                                                                      SHA-512:5A90B6DB45EDAD7734D596FB81FD1959A433F57E71D2212E1DCBD6A12F3FD1FE747FA363C4C787A4D3023F542553C1E2C9CF4F61E28F1BB13042E4AFE3D0FF31
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Africa/Conakry) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Dakar

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):183
                                                                                                                      Entropy (8bit):4.856992353568779
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/2DcXXMFBx/2DcsS:SlSWB9vsM3y7s3HAIgNT4pHN/2DKXEBn
                                                                                                                      MD5:946D3B52F915445DBB8EE8BF67F4EFAB
                                                                                                                      SHA1:18345968B95E886CA72634D49F2B38F9B29BA629
                                                                                                                      SHA-256:D50F9732757B284BAC75526F2CFA585DF7F6974160827AFB0FF66124C7CFD361
                                                                                                                      SHA-512:00B531D1352CF35045EE25C777C7FEA17294E9861E68CE2DE0D9884C05EBDEA84D5F4F0E8B5605721295E25C259979446B7DB76525A633C7D2FA35B38962CF43
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Africa/Dakar) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Dar_es_Salaam

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):191
                                                                                                                      Entropy (8bit):4.8447607449193075
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsVVMMvfXHAIgNGExVMeWARL/2Dc8bEH+DcVVMMyn:SlSWB9vsM3y7VTHAIgNTxcAN/2DJbVDR
                                                                                                                      MD5:7A819572758BC60F4085DF28F1DD1C01
                                                                                                                      SHA1:0A5BA34EBFBA5A8E8B896713BA527781FC90FF01
                                                                                                                      SHA-256:AB69948637416219A3D458777990FA4568BEBC89388884BBF129C0E1370A560B
                                                                                                                      SHA-512:C03E785D1E85292056BB0BDD8DF8326C5DFEB6070AB1C071E1032D14EA69C9DEBC57B2CC7852E35D31652187126CCF0009A6A5C32F9DBB75D56C705535DF05CC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Nairobi)]} {.. LoadTimeZoneFile Africa/Nairobi..}..set TZData(:Africa/Dar_es_Salaam) $TZData(:Africa/Nairobi)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Djibouti

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):186
                                                                                                                      Entropy (8bit):4.829357904445218
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsVVMMvfXHAIgNGExVMeWARL/2DcRHKQ1BQDcVVMMyn:SlSWB9vsM3y7VTHAIgNTxcAN/2DOrkDR
                                                                                                                      MD5:7981499F9430DC1636C9F834273E0B91
                                                                                                                      SHA1:1D63F8578420D56E4A5D9D0881FBEC015421E416
                                                                                                                      SHA-256:E7F7560CCD65D53C446ADAE7128A74D37E17DD0B907A2F2FD85322FB8707B497
                                                                                                                      SHA-512:3C3F7D78E9A0DE6E2950E1C305EA2DBC986754AE9FB10AC410685F30C39EC235F6F221393099C012E62EE5A7B4F1BED67C96B7B81E90BBA064BA9FE685FE4050
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Nairobi)]} {.. LoadTimeZoneFile Africa/Nairobi..}..set TZData(:Africa/Djibouti) $TZData(:Africa/Nairobi)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Douala

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):178
                                                                                                                      Entropy (8bit):4.850101792457859
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsGe/vXHAIgNGESuvHRL/2DcnKe2DcGeyn:SlSWB9vsM3y7VXHAIgNTTN/2Dml2D4yn
                                                                                                                      MD5:44881E75AC32FA95FF6143066EF01B90
                                                                                                                      SHA1:A221619B4CDE8BE6A181E1F3869EAB665F2E98B8
                                                                                                                      SHA-256:FCF2DAD148F4D2951320EA99730C56D5EB43D505F37416BE4BAD265CE2902706
                                                                                                                      SHA-512:4FA67A5F84758366189F0FC4A7FA6C820BA083E1C56EA95D25D21A367F25F76261B7EB5631DFFEB20E095CFD64E770338773F76BD50D4CF6AE29AD3EDFCEC408
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Lagos)]} {.. LoadTimeZoneFile Africa/Lagos..}..set TZData(:Africa/Douala) $TZData(:Africa/Lagos)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\El_Aaiun

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5235
                                                                                                                      Entropy (8bit):3.541189246992611
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:+eCJZtmaG6/eszBrlxs5MRhk9xPmwv7KbGKCDp0d:+eqZSszBrlKcJC9k
                                                                                                                      MD5:956F5B51FA8BA2E954A0E59AAC8F3276
                                                                                                                      SHA1:AE35A8502E57EA6EE173E3B42509E4CAC73DA091
                                                                                                                      SHA-256:5FB102A95B3C004AAB8371840B1A04AC352F48FF9E9EAFDEAAF21960B0F3CAA6
                                                                                                                      SHA-512:19E7F2574E2B62DF68CC24737F6B94864B3D64B2472BC7D78E6AB5142A1DC1AB3B3700AB802129CB16AED4A4FED29E2B8A5593EE327ADF496255FE2FEF6A7023
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/El_Aaiun) {.. {-9223372036854775808 -3168 0 LMT}.. {-1136070432 -3600 0 -01}.. {198291600 0 0 +00}.. {199756800 3600 1 +00}.. {207702000 0 0 +00}.. {231292800 3600 1 +00}.. {244249200 0 0 +00}.. {265507200 3600 1 +00}.. {271033200 0 0 +00}.. {1212278400 3600 1 +00}.. {1220223600 0 0 +00}.. {1243814400 3600 1 +00}.. {1250809200 0 0 +00}.. {1272758400 3600 1 +00}.. {1281222000 0 0 +00}.. {1301788800 3600 1 +00}.. {1312066800 0 0 +00}.. {1335664800 3600 1 +00}.. {1342749600 0 0 +00}.. {1345428000 3600 1 +00}.. {1348970400 0 0 +00}.. {1367114400 3600 1 +00}.. {1373162400 0 0 +00}.. {1376100000 3600 1 +00}.. {1382839200 0 0 +00}.. {1396144800 3600 1 +00}.. {1403920800 0 0 +00}.. {1406944800 3600 1 +00}.. {1414288800 0 0 +00}.. {1427594400 3600 1 +00}.. {1434247200 0 0 +00}.. {1437271200 3600 1 +00}.. {1445738400 0 0 +00}.. {1

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Freetown

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):186
                                                                                                                      Entropy (8bit):4.866631090752554
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/2Dcu5sp4DcsS:SlSWB9vsM3y7s3HAIgNT4pHN/2Dk4DBS
                                                                                                                      MD5:6C115220CF951FC2EE3C299F86935B6D
                                                                                                                      SHA1:A1CAB8C710BF20553AF45343118C1726CFE922B7
                                                                                                                      SHA-256:BC53A4D489F48F14C594C4B0E52079B34E043A5751BBC7DF254A560352243575
                                                                                                                      SHA-512:E87A4FD145B645DF034182CAD7F9D2BE5B2D9F3A17B6A9B6C84A0B3E846D92EC4C69DF2E85129B7A1AFBC0CCAAC8E3B1D47EB09F0900A82B908E9F6BF63B9736
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Africa/Freetown) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Gaborone

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):183
                                                                                                                      Entropy (8bit):4.899477454245453
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsfKG5XHAIgNGEjKORL/2DcHK0o/4DcfKB:SlSWB9vsM3y7fnHAIgNTjdN/2DAV+4Dt
                                                                                                                      MD5:07222D8ED83CDC456B4D5D84C4BDE320
                                                                                                                      SHA1:2C657F461FA3F48D56C791AFE4AB7D2EAF45AF60
                                                                                                                      SHA-256:653AF88955C4418D973E2F8681A99552EB7BE95BCA64C736072F488462F7B373
                                                                                                                      SHA-512:3016D0636F401BD88BCD460F6A61782E7E8A2C32CE4ECB904C711DF414038A5818F0CA3D7FC671C5ABCE70647FC674A2EF9081C5289EBFD184B44885902E007A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Maputo)]} {.. LoadTimeZoneFile Africa/Maputo..}..set TZData(:Africa/Gaborone) $TZData(:Africa/Maputo)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Harare

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):181
                                                                                                                      Entropy (8bit):4.884642061266759
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsfKG5XHAIgNGEjKORL/2Dc0B5h4DcfKB:SlSWB9vsM3y7fnHAIgNTjdN/2Dlfh4Dt
                                                                                                                      MD5:8666DABE8D196ACD94A9691C592FAF4E
                                                                                                                      SHA1:9F7EE009DCEAACA79C6EAA6FC73015D595467919
                                                                                                                      SHA-256:06B82C524585192E0E8FC69DCC1CF86183A8C5EF404645DC413FCF3F8C16B0AB
                                                                                                                      SHA-512:AAA32FD1B01BFECDD0D1C9C1DF1163374DAFE094C75720EA4095C34F7EAE7DCB594D1A7F6A2A90FB43FF01020F7AEB48E92496E0EE2D039AF23076CD369DD2A7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Maputo)]} {.. LoadTimeZoneFile Africa/Maputo..}..set TZData(:Africa/Harare) $TZData(:Africa/Maputo)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Johannesburg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):309
                                                                                                                      Entropy (8bit):4.695542624694403
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2DWbzDm2OHePoHvmmXsd//HF2d7d6VcF2d6KsYov:MB862DW7mdHePCvmmcZvF0cVcF/KsFv
                                                                                                                      MD5:F0E153FC9B978E30742ABC025CA45E02
                                                                                                                      SHA1:73D96F3188190DAC2453E6F18A1C683CECB9CDE3
                                                                                                                      SHA-256:5EEF6475E1312051037FCAE3354E32DC0910BE7A5116B71F8CCBE1CCA08D3F1C
                                                                                                                      SHA-512:E66F4B5FF18BAAD53AFB1ED36A0827115C793075A61F794F26F32BC9F6799DF816A1F817BEB0C0BC938F89E6F5BFBE1AB4F504F1AF518764103FB287746552C7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Johannesburg) {.. {-9223372036854775808 6720 0 LMT}.. {-2458173120 5400 0 SAST}.. {-2109288600 7200 0 SAST}.. {-860976000 10800 1 SAST}.. {-845254800 7200 0 SAST}.. {-829526400 10800 1 SAST}.. {-813805200 7200 0 SAST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Juba

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1127
                                                                                                                      Entropy (8bit):4.027824722230131
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5mesdOkMV0GbMSHMzNy8MXLwM0JXMfCsMzaMq0QM3W50dM44R8M1XMreM7p0z8M5:5YMV04MSHMzNxMbwM0JXMfCsMzaMq0QJ
                                                                                                                      MD5:32EC0589260D9D4BCC85FE91E6F04D00
                                                                                                                      SHA1:BAA269852C4AC6B89EA7941E7A75A007E0CF9EDF
                                                                                                                      SHA-256:F2646E15488ABF2E960759CEFE5705416E71DA71BB8407B26196244FD1A3394F
                                                                                                                      SHA-512:4F485453BE1D186ADBE0908852475C63C57BA498091C222EFFB9A5FEA2DB7F55E1BB2DBDBF6AC0F24CC67D47549FA3F5257655B5449B1BCF1FB5CDB27B03D501
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Juba) {.. {-9223372036854775808 7588 0 LMT}.. {-1230775588 7200 0 CAT}.. {10360800 10800 1 CAST}.. {24786000 7200 0 CAT}.. {41810400 10800 1 CAST}.. {56322000 7200 0 CAT}.. {73432800 10800 1 CAST}.. {87944400 7200 0 CAT}.. {104882400 10800 1 CAST}.. {119480400 7200 0 CAT}.. {136332000 10800 1 CAST}.. {151016400 7200 0 CAT}.. {167781600 10800 1 CAST}.. {182552400 7200 0 CAT}.. {199231200 10800 1 CAST}.. {214174800 7200 0 CAT}.. {230680800 10800 1 CAST}.. {245710800 7200 0 CAT}.. {262735200 10800 1 CAST}.. {277246800 7200 0 CAT}.. {294184800 10800 1 CAST}.. {308782800 7200 0 CAT}.. {325634400 10800 1 CAST}.. {340405200 7200 0 CAT}.. {357084000 10800 1 CAST}.. {371941200 7200 0 CAT}.. {388533600 10800 1 CAST}.. {403477200 7200 0 CAT}.. {419983200 10800 1 CAST}.. {435013200 7200 0 CAT}.. {452037600 10800 1 CAST}.. {466635600 7200

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Kampala

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.837466713772859
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsVVMMvfXHAIgNGExVMeWARL/2DcJEl2DcVVMMyn:SlSWB9vsM3y7VTHAIgNTxcAN/2DIEl2V
                                                                                                                      MD5:E929ED1BC316C71AABE7E625BD562FB1
                                                                                                                      SHA1:C20C172518C02D93327F4BBBC5D410BFFEF5039D
                                                                                                                      SHA-256:8EA3028CE2B025F0C457DC8F7601279CA5AF565A88B9FE80208F9F1030F2B0D0
                                                                                                                      SHA-512:B2FBCF06EACCF18DE97AF1D6BC57D9638E0A36DBF17044FF97F6B9E5089CF9E13E1304F304495324C0ACC1128A7D2D494E7C1FDB95DB0855FCE54F7028096C50
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Nairobi)]} {.. LoadTimeZoneFile Africa/Nairobi..}..set TZData(:Africa/Kampala) $TZData(:Africa/Nairobi)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Khartoum

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1131
                                                                                                                      Entropy (8bit):4.0421745451318385
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5xe9dSXMV0GbMSHMzNy8MXLwM0JXMfCsMzaMq0QM3W50dM44R8M1XMreM7p0z8MM:5hMV04MSHMzNxMbwM0JXMfCsMzaMq0Qc
                                                                                                                      MD5:2BD3850DDBE2F05BF6F24F3AEFF7516C
                                                                                                                      SHA1:22B0DBB54E071F30D51A8654CF103F99537F74CD
                                                                                                                      SHA-256:F475DB8A857A46B310B12C21D6A9BC6CA9FF2960DA429A9D57FA375F9439E13B
                                                                                                                      SHA-512:1CF82FC07348C697F26625673DA7E3D734358B3FBE69D8E2132CAC0D9F00C7E8CDC353676CD9BAC4CBB9E26CF6638CEAE41DF559E7445D9C453409D7115FFC6C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Khartoum) {.. {-9223372036854775808 7808 0 LMT}.. {-1230775808 7200 0 CAT}.. {10360800 10800 1 CAST}.. {24786000 7200 0 CAT}.. {41810400 10800 1 CAST}.. {56322000 7200 0 CAT}.. {73432800 10800 1 CAST}.. {87944400 7200 0 CAT}.. {104882400 10800 1 CAST}.. {119480400 7200 0 CAT}.. {136332000 10800 1 CAST}.. {151016400 7200 0 CAT}.. {167781600 10800 1 CAST}.. {182552400 7200 0 CAT}.. {199231200 10800 1 CAST}.. {214174800 7200 0 CAT}.. {230680800 10800 1 CAST}.. {245710800 7200 0 CAT}.. {262735200 10800 1 CAST}.. {277246800 7200 0 CAT}.. {294184800 10800 1 CAST}.. {308782800 7200 0 CAT}.. {325634400 10800 1 CAST}.. {340405200 7200 0 CAT}.. {357084000 10800 1 CAST}.. {371941200 7200 0 CAT}.. {388533600 10800 1 CAST}.. {403477200 7200 0 CAT}.. {419983200 10800 1 CAST}.. {435013200 7200 0 CAT}.. {452037600 10800 1 CAST}.. {466635600 7

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Kigali

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):181
                                                                                                                      Entropy (8bit):4.910322325134086
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsfKG5XHAIgNGEjKORL/2DcCJRx+DcfKB:SlSWB9vsM3y7fnHAIgNTjdN/2DRX+DEi
                                                                                                                      MD5:3017253E1C6ACCA8D470A014E4BB321D
                                                                                                                      SHA1:671B7AC04580B56E2C34F88D123E8296947DDD7E
                                                                                                                      SHA-256:73FEB807006897B4B485CB82394867444E890265EFE960EC66D6C0E325DA9372
                                                                                                                      SHA-512:2498C380D761A16C183D78BC1BB18B1D2A1BFCB9C703D86A3FC04CCCE43D88C8D4BC3C47CC31639B78A5FE9C8A7445E9DBB52062E2F3B737DA1E7D0FF70F140A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Maputo)]} {.. LoadTimeZoneFile Africa/Maputo..}..set TZData(:Africa/Kigali) $TZData(:Africa/Maputo)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Kinshasa

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):180
                                                                                                                      Entropy (8bit):4.866127364448228
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsGe/vXHAIgNGESuvHRL/2DcqQFeDcGeyn:SlSWB9vsM3y7VXHAIgNTTN/2DdD4yn
                                                                                                                      MD5:41209A335A99803239A854575190C5ED
                                                                                                                      SHA1:E6EA627C25513B9DDE053F9A24D509AA317C30A1
                                                                                                                      SHA-256:611375C4901AD6C4844C2BB7D02FB17F34996F49E642546A6784D6F0B28530CC
                                                                                                                      SHA-512:DF2C0B131F35F54DF5EBF7F8459F98DBABEB6F081247BA95B5D7B41146E2A2EF9BC6B1D909DE57A1223D9C258AB197D9668ED2E111A365C86BABDAA7DF551FB6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Lagos)]} {.. LoadTimeZoneFile Africa/Lagos..}..set TZData(:Africa/Kinshasa) $TZData(:Africa/Lagos)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Lagos

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):235
                                                                                                                      Entropy (8bit):4.7936510664790815
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2D4JDm2OHWQvvoHvBsp9boFvoHzIX7uRe6vF9:MB862DymdHWQCvqpmVCzIq
                                                                                                                      MD5:EC08046589E85D999A597252FF5368B7
                                                                                                                      SHA1:126E3DE158E1E7AF4737D0AB5B51C0F92F416DC7
                                                                                                                      SHA-256:DCC9F52F539A67DFD7ABAFDE072ACDAE2B67754C559C8A5FE61979F5A286A066
                                                                                                                      SHA-512:84B9AB18BC343C8B8934F5FDD2E2EB413925B04D6F5394AA8337B7B55E6487FB071A83A69BD4D0FA40F7F31EBC57B9908729674542CEA3083D700FCD02D77633
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Lagos) {.. {-9223372036854775808 815 0 LMT}.. {-2035584815 0 0 GMT}.. {-1940889600 815 0 LMT}.. {-1767226415 1800 0 +0030}.. {-1588465800 3600 0 WAT}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Libreville

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):182
                                                                                                                      Entropy (8bit):4.865878143076229
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsGe/vXHAIgNGESuvHRL/2Dcr7bp4DcGeyn:SlSWB9vsM3y7VXHAIgNTTN/2Dgfp4D4y
                                                                                                                      MD5:35D8A58EE21E603C6FC4FB896AE6B3D0
                                                                                                                      SHA1:F1D0A939D761F3F0954F045814CF5339A5597036
                                                                                                                      SHA-256:AB3E797548C7663CF9ABA7FE163635FF7CAB9E6CB61FA1644C0F7B4B5CCE8B99
                                                                                                                      SHA-512:97717961987F6B6832C24A7833150CDFE7E82BBEB32DFDB84D2500442AAD9263F8BD4E879591E913D56E9A1991C389EF730211853647A889F358AE3FA37C0185
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Lagos)]} {.. LoadTimeZoneFile Africa/Lagos..}..set TZData(:Africa/Libreville) $TZData(:Africa/Lagos)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Lome

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):182
                                                                                                                      Entropy (8bit):4.862780607964543
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/2Dcih4DcsS:SlSWB9vsM3y7s3HAIgNT4pHN/2DNh4D4
                                                                                                                      MD5:EA21ABBF8B11953916A1C509B8A1B427
                                                                                                                      SHA1:35ADC230C57B001BE8A99A3D2E34B609A60A1162
                                                                                                                      SHA-256:EACA9124F17E5B11F27D11FA6141D19EB3AC23E155E155B73467BDAA3BC99AA7
                                                                                                                      SHA-512:A7972D4F1C5FB988CA04B39E2CDD580F51383BA9D7A66C478275C11A07B8D7A6EFF53A3E1929B0D89F10BCC39D22F285DB2601ED60DB4647C65465643F70C137
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Africa/Lome) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Luanda

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):178
                                                                                                                      Entropy (8bit):4.856982839546061
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsGe/vXHAIgNGESuvHRL/2DccLtBQDcGeyn:SlSWB9vsM3y7VXHAIgNTTN/2DXQD4yn
                                                                                                                      MD5:40CD47F6DCF51EBEFEF42489F1716257
                                                                                                                      SHA1:DF245192A1899A72DE01A57F6969AC060E841734
                                                                                                                      SHA-256:4C2FD1E44DFAAF0C0DD2EB56B84B538F1E2D84B301AB2CFB8EE7759783501444
                                                                                                                      SHA-512:D39BEB0EEF344B1A44F7D6A806A1D5B956D7D402648EE0C67C4BA46493236840AF975D89A91B2D33B8AA7D6DC9A051E66718DCDBC1C83B0E964215C2E32ED923
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Lagos)]} {.. LoadTimeZoneFile Africa/Lagos..}..set TZData(:Africa/Luanda) $TZData(:Africa/Lagos)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Lubumbashi

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.940313336280723
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsfKG5XHAIgNGEjKORL/2DcfpT0DcfKB:SlSWB9vsM3y7fnHAIgNTjdN/2D8pT0Dt
                                                                                                                      MD5:71A5DE1276902DB1542840318F9B1AF3
                                                                                                                      SHA1:AC3825BF343482E0E4D9D6FAA6FCA4D1A125433B
                                                                                                                      SHA-256:24384EEC359FD24D181AAEF3C017E3C345490A8D352B29D19B1B143A29A811C2
                                                                                                                      SHA-512:2984EB42A79B8B32BB93DFE71F1C4C0CABFDC9B0A199971347BB3473463FA07FDB5D20227D288BF8653B1BDE347E1297459BBB4C3C34AF7A5434FBF945683577
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Maputo)]} {.. LoadTimeZoneFile Africa/Maputo..}..set TZData(:Africa/Lubumbashi) $TZData(:Africa/Maputo)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Lusaka

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):181
                                                                                                                      Entropy (8bit):4.905174746463853
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsfKG5XHAIgNGEjKORL/2DcOf+DcfKB:SlSWB9vsM3y7fnHAIgNTjdN/2DkDEi
                                                                                                                      MD5:1D7FDB388535CC59742CA0F1AEE27FBD
                                                                                                                      SHA1:A99FF2CAC47FD333429C22B271E190D979EEC024
                                                                                                                      SHA-256:B00801A7279741434D9C2D7EC7322DD93B85EA4F5C9976AB3A43F0AB142E1553
                                                                                                                      SHA-512:0174D3C6F9116C36C62AD1EB58203EE7DFE8C37F618B8449D5E45AD6290CF8334F28798877D7A563A12EE533026244D6A49BCCF29B5D7FCB5BCC91481D0DDDE2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Maputo)]} {.. LoadTimeZoneFile Africa/Maputo..}..set TZData(:Africa/Lusaka) $TZData(:Africa/Maputo)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Malabo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):178
                                                                                                                      Entropy (8bit):4.857096806490649
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsGe/vXHAIgNGESuvHRL/2Dcn2DcGeyn:SlSWB9vsM3y7VXHAIgNTTN/2D42D4yn
                                                                                                                      MD5:1CA9B3E7BCD5BC1CC881453D16B09389
                                                                                                                      SHA1:1B1964B314E72847D71A42C147CF2BF331B44461
                                                                                                                      SHA-256:35D56EFFE9E7E60F17B32BD30486E566B635F0AE7A8948D77395B8E6332E26F1
                                                                                                                      SHA-512:9E08D57B7824F5B076D159D9A5106E51450DF24729C36F485B9B68E8F47E8DFC50F9BEC3F11E0AE6579A8E372A5C0F0DA18A2E797CF2115519D1B4E5B64413DD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Lagos)]} {.. LoadTimeZoneFile Africa/Lagos..}..set TZData(:Africa/Malabo) $TZData(:Africa/Lagos)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Maputo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):149
                                                                                                                      Entropy (8bit):4.952872531197478
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2DcfKiMXGm2OHoVoHvdSF2I:SlSWB9eg/2DEZDm2OHoVoHvdI
                                                                                                                      MD5:CD429B6891CBF603A93F9A9733E2391B
                                                                                                                      SHA1:C6833B83B6D1694AC632018A27915E6F97F708AE
                                                                                                                      SHA-256:FE6B6A4BE1B61F7F909A3F6137530DFE6D1754499A4D9B0D1CE4952FFF0AE62D
                                                                                                                      SHA-512:6E57B70B71515998AD617954F9DDAE19968B20946542201153DAB47FBE63790D42F41AE29148ECBCE6D12812879BCF0A4EC881507B62CDB2675AB20267220BF9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Maputo) {.. {-9223372036854775808 7820 0 LMT}.. {-2109291020 7200 0 CAT}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Maseru

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):199
                                                                                                                      Entropy (8bit):4.964472328419063
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7HbsSHAIgNTzbrN/2DZQs+DWb4n:MByMaHw7NH/t2DZiDWU
                                                                                                                      MD5:88C8FF2B480648EDADBD0FB93F754275
                                                                                                                      SHA1:BED7A784C378909914CEB0D303DFE6D05FD576B7
                                                                                                                      SHA-256:1D80FD86CB733D57D88ECD404E702F750B233ED0CCBFBFFFEED1AAD3B7F1CB04
                                                                                                                      SHA-512:CB7F831CF099E85B948AE57FCE9D91C7EAAD39753AF82C56EC15B65830EB4115A71BBC83A71A2AC947CAB24DEDDB557E02FAA5A3264546AE6E60607DF6BD2FA3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Johannesburg)]} {.. LoadTimeZoneFile Africa/Johannesburg..}..set TZData(:Africa/Maseru) $TZData(:Africa/Johannesburg)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Mbabane

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):200
                                                                                                                      Entropy (8bit):4.957246428185456
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7HbsSHAIgNTzbrN/2DzjEHp4DWb4n:MByMaHw7NH/t2DzjEJ4DWU
                                                                                                                      MD5:CA7255B86425BA706D214924856B6818
                                                                                                                      SHA1:E9BE6CF871BB1786E842953D41392299952EC9AC
                                                                                                                      SHA-256:547197C09C1987350AE5720A4EEC7E8D8F4B9F4A0559726E225E13C707F7C564
                                                                                                                      SHA-512:23F9AD0F926A0945A17BBC3DCFF9A3D7EE68EC9423EA78985F5FFC60CC61641B57871F9AA703B5FB9BE842DCD4693D0641F9EDED702240873F58D24CD4D60C32
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Johannesburg)]} {.. LoadTimeZoneFile Africa/Johannesburg..}..set TZData(:Africa/Mbabane) $TZData(:Africa/Johannesburg)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Mogadishu

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):187
                                                                                                                      Entropy (8bit):4.877126792757121
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsVVMMvfXHAIgNGExVMeWARL/2DcBEBXCEeDcVVMMyn:SlSWB9vsM3y7VTHAIgNTxcAN/2DFSVDR
                                                                                                                      MD5:5C2E2B5189E0E816D5BD7AFC8B49A35E
                                                                                                                      SHA1:4E43A1ED51399528636D6442B1DDFFD820911407
                                                                                                                      SHA-256:25E221BE49DEC5547A74AEB91B0041859C59BC866987272A447AB2343D1CC30C
                                                                                                                      SHA-512:B74735CFAB692756BAADFB1A51A8CC0C986F981D8E7E7A8182370A9017E67439875F0115820A349AFB3BE2FA581A721440968EF817471DD2C5E1286E53B2FE99
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Nairobi)]} {.. LoadTimeZoneFile Africa/Nairobi..}..set TZData(:Africa/Mogadishu) $TZData(:Africa/Nairobi)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Monrovia

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):208
                                                                                                                      Entropy (8bit):4.8660011420394955
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2D3NPDm2OHrFGxYoHvlHIg5pTwdPsy:MB862D3NbmdHhmYCvdIg5GPsy
                                                                                                                      MD5:1B3C94B5098E454981C73C1F2AF80164
                                                                                                                      SHA1:1EBA9E2DBEA70BB1AE5EB13739518AB5A62D2130
                                                                                                                      SHA-256:2BF0D90610211651127402680519B29AB50B15D344263D0C1A22EDEBE5E01E27
                                                                                                                      SHA-512:DA4A0BCE7C6750BD7D3BA76B6301B9390723BE0C001C39BE453D80BD87020C2253A75629F68F83C19410D2A75FAF5223A435299CD4AA53DE545EC7C5B5AA54B7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Monrovia) {.. {-9223372036854775808 -2588 0 LMT}.. {-2776979812 -2588 0 MMT}.. {-1604359012 -2670 0 MMT}.. {63593070 0 0 GMT}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Nairobi

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):277
                                                                                                                      Entropy (8bit):4.655052651600954
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2Dk1Dm2OHsvT5oH99VCV22ufPnVCkVBKBQn9q:MB862DGmdHsvVCjkifvdH9q
                                                                                                                      MD5:B640661FB37BB74FAB172DBDF1B433E1
                                                                                                                      SHA1:0236A5B53443A4A18B8B9D6AA7732620BE9A6553
                                                                                                                      SHA-256:BD8E9765174431C0D403249D3E881C949C83966E9F8162552DA88AE53132467B
                                                                                                                      SHA-512:53DCC6DF7C3E0B00A6D98A8DCC4988C8CFD6B53CC89E6F8D32DA41CB532A62D9C6A823675C5039F5639CE0D423F6D571F46F5B93FFC7EFFB4EDFFBF89D46AA12
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Nairobi) {.. {-9223372036854775808 8836 0 LMT}.. {-1946168836 9000 0 +0230}.. {-1309746600 10800 0 EAT}.. {-1261969200 9000 0 +0230}.. {-1041388200 9900 0 +0245}.. {-865305900 10800 0 EAT}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Ndjamena

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):208
                                                                                                                      Entropy (8bit):4.856754881865487
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2DjUfDm2OHNseoH1axCXFHzaSmkFWTvF9:MB862DjULmdHPC1XNzaS3yz
                                                                                                                      MD5:EDB548348E590C8CFE04ED172D96B86C
                                                                                                                      SHA1:AD3B631FB03819772164402E202AFA781687F597
                                                                                                                      SHA-256:9ADA5F5AFB25E823E1F0E8AD2489AAA1C09F01356634A9403670D7AB21CA2E2C
                                                                                                                      SHA-512:17E396A9BE497077B774AD1108CC8760ED35FC92F65FFF070F9ACD3C4FB67A335C1C57DF1CCB1570DE14B708EFCA0063990A969E30759C9A47731DA45ED25EFE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Ndjamena) {.. {-9223372036854775808 3612 0 LMT}.. {-1830387612 3600 0 WAT}.. {308703600 7200 1 WAST}.. {321314400 3600 0 WAT}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Niamey

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):178
                                                                                                                      Entropy (8bit):4.871519187180041
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsGe/vXHAIgNGESuvHRL/2DcdhA9Ff2DcGeyn:SlSWB9vsM3y7VXHAIgNTTN/2Dsh2f2D1
                                                                                                                      MD5:0134039CD1666E983A9B6E43ABD6AF59
                                                                                                                      SHA1:A2A99345390F4D17C892CEADE58C604257686764
                                                                                                                      SHA-256:B517120AD8DB3F21EAB4E44A78001EE856EB4EA35852C54CCA96D38887DEBCFA
                                                                                                                      SHA-512:E5911ADD3D776D87ACFC986C4D2564E3ED9AB12C67F23391ED35FF2A31AD8314B873E31DB8DA4D5E0DAEA12BE34110A8F0C27C9C6126977BAD51C6AD5CDFA39B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Lagos)]} {.. LoadTimeZoneFile Africa/Lagos..}..set TZData(:Africa/Niamey) $TZData(:Africa/Lagos)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Nouakchott

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):188
                                                                                                                      Entropy (8bit):4.909962899502589
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/2DcboGb+DcsS:SlSWB9vsM3y7s3HAIgNT4pHN/2Dqbb+c
                                                                                                                      MD5:550E482599C2F4280F2C258019BB2547
                                                                                                                      SHA1:A39045BEF313094CEDC100A7D695AE51BC9E498D
                                                                                                                      SHA-256:64CAF2BF9D45095DF97F419714D5617CF6300ACDB544B621DCE1D594AA9B910C
                                                                                                                      SHA-512:4FD29C5B4C0D2BDE69C437E9BF4F08A11E1DAAA689B69F28F3551F550BDCCDD055E4C1A241EDB2FA48B18825AFF792F4860F55983E106EA8224F1D87ED4F7546
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Africa/Nouakchott) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Ouagadougou

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.920023025906233
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/2DcXCZDcsS:SlSWB9vsM3y7s3HAIgNT4pHN/2D1DBS
                                                                                                                      MD5:6CFC4E938E50C9B591F8CC42A14FA82A
                                                                                                                      SHA1:FCE14A5CA62C9005C76D27B849A238E76C834F8A
                                                                                                                      SHA-256:03B9C1FE350B5E9F6F333F9519FA394DCC562308D9388A903AF3D3FECEBDC762
                                                                                                                      SHA-512:98F22F1D23A9930276A2D306A1473E64DC43547A16CFD01226E4F030A26A3CC4FDED77F790583CC5C078FC6DFCCE81C16A50879AE46A0D3A6F1FA98373F413C7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Africa/Ouagadougou) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Porto-Novo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):182
                                                                                                                      Entropy (8bit):4.893842293207225
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsGe/vXHAIgNGESuvHRL/2DcyTKM0DcGeyn:SlSWB9vsM3y7VXHAIgNTTN/2DQD4yn
                                                                                                                      MD5:6D979FCD225D5431C7391AE568C6409F
                                                                                                                      SHA1:6C9DCD222061CC00FD386773C6BB2861F3429A60
                                                                                                                      SHA-256:8FB8692DB9281AE2B087D704168BFD47D3D0901781FEF65BFD62FCB213BA6B50
                                                                                                                      SHA-512:32AFA6AF6BFC3D42CA636DD2B96906048EF1ADFBB135BB7E7B77C444FED99FDABB84FBBADF56EC63828FFA7B3371191FF1311822B1C75241EBD9CF602467088E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Lagos)]} {.. LoadTimeZoneFile Africa/Lagos..}..set TZData(:Africa/Porto-Novo) $TZData(:Africa/Lagos)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Sao_Tome

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):234
                                                                                                                      Entropy (8bit):4.818597723513168
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2DXDm2OHH5oHvzdoH1aNbbFHRMy:MB862DTmdHH5CvzdC16bZRMy
                                                                                                                      MD5:28A5967C797F4B38FB63F823D6F07168
                                                                                                                      SHA1:17872E91683B884191D2E4C777FB79DCE6D73EE7
                                                                                                                      SHA-256:BA1D60DF2B41320F92A123A714E17E576C89383526B96E0541A464C3FBA415B7
                                                                                                                      SHA-512:B335E3D3268631F3A71F4BAD59740F3A5222344E8223C201B8FE885BAA7F1A550FA7778E498D6DC2111F41053856F50B21413AECCE84B80833EC8176F2A1009C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Sao_Tome) {.. {-9223372036854775808 1616 0 LMT}.. {-2713912016 -2205 0 LMT}.. {-1830384000 0 0 GMT}.. {1514768400 3600 0 WAT}.. {1546304400 0 0 GMT}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Timbuktu

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):186
                                                                                                                      Entropy (8bit):4.905303708777235
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/2DcHdDcsS:SlSWB9vsM3y7s3HAIgNT4pHN/2DwdDBS
                                                                                                                      MD5:F2D7F7BC4EA3629EC7F0E45300A0CFD2
                                                                                                                      SHA1:E7594D378C5DCFEB1E87E13AC79A026260D2E630
                                                                                                                      SHA-256:9D8009ACAB019B32B1E87AB10E0AC3765ABCABE8066318DA8CA4905D41562F72
                                                                                                                      SHA-512:795E58172907020C85CF0B10BBA35842D5F92872CCB3382DFDC787BAA504C79927FA23BC3104AD63541A95C44CA80977E8247846DE918A0B00963B970F4823D2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Africa/Timbuktu) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Tripoli

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):954
                                                                                                                      Entropy (8bit):4.151253074491018
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862DrmdHrCDWR+f7Zn9ueRSmNvlTtuyI/ZBv8dq8Jw4VFZBZYEuAENSfp8kSYx:5veuDkWx3NdT18kbjjAkxTx
                                                                                                                      MD5:2DF9B050D82B06EB89DA908C31C1F1C9
                                                                                                                      SHA1:CB294E12560A98D5CEA3BA7004B5519B6C22BAAC
                                                                                                                      SHA-256:B447B6B1C351E77F22A2D77C0437F2BBB7D8BDFDFDC3D6285E0D260519CC7110
                                                                                                                      SHA-512:BBE281D551E9F8DA7B6BB08D809177615410A11E4B1184ABD220EA8B1F355B2BBC090C6BAAF7E07FD61286891388ECD4026D4433C4E4B6A8D201F8D95E174532
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Tripoli) {.. {-9223372036854775808 3164 0 LMT}.. {-1577926364 3600 0 CET}.. {-574902000 7200 1 CEST}.. {-512175600 7200 1 CEST}.. {-449888400 7200 1 CEST}.. {-347158800 7200 0 EET}.. {378684000 3600 0 CET}.. {386463600 7200 1 CEST}.. {402271200 3600 0 CET}.. {417999600 7200 1 CEST}.. {433807200 3600 0 CET}.. {449622000 7200 1 CEST}.. {465429600 3600 0 CET}.. {481590000 7200 1 CEST}.. {496965600 3600 0 CET}.. {512953200 7200 1 CEST}.. {528674400 3600 0 CET}.. {544230000 7200 1 CEST}.. {560037600 3600 0 CET}.. {575852400 7200 1 CEST}.. {591660000 3600 0 CET}.. {607388400 7200 1 CEST}.. {623196000 3600 0 CET}.. {641775600 7200 0 EET}.. {844034400 3600 0 CET}.. {860108400 7200 1 CEST}.. {875919600 7200 0 EET}.. {1352505600 3600 0 CET}.. {1364515200 7200 1 CEST}.. {1382662800 7200 0 EET}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Tunis

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1111
                                                                                                                      Entropy (8bit):4.150944563639585
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862DHmdHjCvbB/lxRjntMVyoKCyFWeey0XSe/OSyHaCgmvLOcSFQSFeSTC6ZPJ:5LemvbplxRhbv+yuh2tIee6kvcw9Cy
                                                                                                                      MD5:0C99335A41D33AA8BC1EDA0CB4CDCBF5
                                                                                                                      SHA1:5CABC28D318FA5B8307429EA571FFF91EB8E1252
                                                                                                                      SHA-256:0760D1028E733888E43E7F1E057217DC2B52786029FCEC67B27EB69CC6A54938
                                                                                                                      SHA-512:C8FE685ACA46FD4836F3AABC15833F294E5EBED123A487D04E74A8C5668BDFAFB96D2326760452A6E5A1B9CC25AC6C3918D8C10A7F8EF737456640E3000BBA2F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Tunis) {.. {-9223372036854775808 2444 0 LMT}.. {-2797202444 561 0 PMT}.. {-1855958961 3600 0 CET}.. {-969242400 7200 1 CEST}.. {-950493600 3600 0 CET}.. {-941940000 7200 1 CEST}.. {-891136800 3600 0 CET}.. {-877827600 7200 1 CEST}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-842918400 3600 0 CET}.. {-842223600 7200 1 CEST}.. {-828230400 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-796269600 3600 0 CET}.. {-781052400 7200 1 CEST}.. {-766634400 3600 0 CET}.. {231202800 7200 1 CEST}.. {243903600 3600 0 CET}.. {262825200 7200 1 CEST}.. {276044400 3600 0 CET}.. {581122800 7200 1 CEST}.. {591145200 3600 0 CET}.. {606870000 7200 1 CEST}.. {622594800 3600 0 CET}.. {641516400 7200 1 CEST}.. {654649200 3600 0 CET}.. {1114902000 7200 1 CEST}.. {1128038400 3600 0 CET}.. {1143334800 7200 1 CEST}.. {1162083600 3600 0 CET}.. {11747

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Africa\Windhoek

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1649
                                                                                                                      Entropy (8bit):3.9974091170263066
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5t+Lmcz0iMHHWMbnHoMcHiM0H+MCySHr/MDHqMafHO8MwHJMHHOMHSHWMHHXM5Hs:OLjQDI6jZ2WFcv
                                                                                                                      MD5:4846FB13467BA93EB134D88228D7F534
                                                                                                                      SHA1:477FC6144B7DF365606A2E44EF1430F8DF6FB841
                                                                                                                      SHA-256:DFC3D1FC182B315B31D999BC103C264BD205EB16F971C8636003A71170D7BD7C
                                                                                                                      SHA-512:A719F5083F66CE44FE047880A10B2ED04B66E01C7F0F7DADAE2FFB95172308F091D669BCFED5A236D2A0F80A4A1D78DA7A778DDE3FAECB40170ECDA705573769
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Africa/Windhoek) {.. {-9223372036854775808 4104 0 LMT}.. {-2458170504 5400 0 +0130}.. {-2109288600 7200 0 SAST}.. {-860976000 10800 1 SAST}.. {-845254800 7200 0 SAST}.. {637970400 7200 0 CAT}.. {764200800 3600 1 WAT}.. {778640400 7200 0 CAT}.. {796780800 3600 1 WAT}.. {810090000 7200 0 CAT}.. {828835200 3600 1 WAT}.. {841539600 7200 0 CAT}.. {860284800 3600 1 WAT}.. {873594000 7200 0 CAT}.. {891734400 3600 1 WAT}.. {905043600 7200 0 CAT}.. {923184000 3600 1 WAT}.. {936493200 7200 0 CAT}.. {954633600 3600 1 WAT}.. {967942800 7200 0 CAT}.. {986083200 3600 1 WAT}.. {999392400 7200 0 CAT}.. {1018137600 3600 1 WAT}.. {1030842000 7200 0 CAT}.. {1049587200 3600 1 WAT}.. {1062896400 7200 0 CAT}.. {1081036800 3600 1 WAT}.. {1094346000 7200 0 CAT}.. {1112486400 3600 1 WAT}.. {1125795600 7200 0 CAT}.. {1143936000 3600 1 WAT}.. {1157245200 7200

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Adak

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8447
                                                                                                                      Entropy (8bit):3.867931581740766
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:6hvOs5vveFaHU6lgqN/zNMkixlrxYTMcmo1LWF59:6hvOstgqN/zNMkArxiZmf
                                                                                                                      MD5:DF52E726B33FA47EB115C1233614E101
                                                                                                                      SHA1:26B0E49022FCB929F0160617F9C9D2DBEDC63610
                                                                                                                      SHA-256:77231D179260C08690A70AEE6C2517E4B621ED4794D9AEEA7040539F4FF05111
                                                                                                                      SHA-512:48AAF25419E07B06E076B0E19F9A0C27EB257556E62FD8F7B2AA963A817823DD89D33AB6AFEAAC2EF2230361D76776355E19CC2BBBB4D19536F823A347AC8AA4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Adak) {.. {-9223372036854775808 44002 0 LMT}.. {-3225223727 -42398 0 LMT}.. {-2188944802 -39600 0 NST}.. {-883573200 -39600 0 NST}.. {-880196400 -36000 1 NWT}.. {-769395600 -36000 1 NPT}.. {-765374400 -39600 0 NST}.. {-757342800 -39600 0 NST}.. {-86878800 -39600 0 BST}.. {-31496400 -39600 0 BST}.. {-21466800 -36000 1 BDT}.. {-5745600 -39600 0 BST}.. {9982800 -36000 1 BDT}.. {25704000 -39600 0 BST}.. {41432400 -36000 1 BDT}.. {57758400 -39600 0 BST}.. {73486800 -36000 1 BDT}.. {89208000 -39600 0 BST}.. {104936400 -36000 1 BDT}.. {120657600 -39600 0 BST}.. {126709200 -36000 1 BDT}.. {152107200 -39600 0 BST}.. {162392400 -36000 1 BDT}.. {183556800 -39600 0 BST}.. {199285200 -36000 1 BDT}.. {215611200 -39600 0 BST}.. {230734800 -36000 1 BDT}.. {247060800 -39600 0 BST}.. {262789200 -36000 1 BDT}.. {278510400 -39600 0 BST}.. {29423880

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Anchorage

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8685
                                                                                                                      Entropy (8bit):3.9620252256806845
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:esKLO6KLC9+j1giaJCUbtp0nFI+g/iexpCVaBnNnt61nctE1:etLhN9DiaJCUbPI+D/iMpCIBSuk
                                                                                                                      MD5:BFEACEA04AAA8A69A9AC71CF86BCC15C
                                                                                                                      SHA1:1693971B8AAA35021BA34799FB1B9FADC3DA0294
                                                                                                                      SHA-256:DE7FBE2B3ED780C6B82099E1E249DD41F4452A3ADB9DD807B1D0EC06049C2302
                                                                                                                      SHA-512:E94112A2A5F268C03C58CE3BB4C243B2B9B0FC17CB27FDD58BCD2CCC8D377B805C87A552AE7DE1C5698C5F2C4B0FCAB00A3420B1DAD944C1A2F7A47CE7118F78
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Anchorage) {.. {-9223372036854775808 50424 0 LMT}.. {-3225223727 -35976 0 LMT}.. {-2188951224 -36000 0 AST}.. {-883576800 -36000 0 AST}.. {-880200000 -32400 1 AWT}.. {-769395600 -32400 1 APT}.. {-765378000 -36000 0 AST}.. {-86882400 -36000 0 AHST}.. {-31500000 -36000 0 AHST}.. {-21470400 -32400 1 AHDT}.. {-5749200 -36000 0 AHST}.. {9979200 -32400 1 AHDT}.. {25700400 -36000 0 AHST}.. {41428800 -32400 1 AHDT}.. {57754800 -36000 0 AHST}.. {73483200 -32400 1 AHDT}.. {89204400 -36000 0 AHST}.. {104932800 -32400 1 AHDT}.. {120654000 -36000 0 AHST}.. {126705600 -32400 1 AHDT}.. {152103600 -36000 0 AHST}.. {162388800 -32400 1 AHDT}.. {183553200 -36000 0 AHST}.. {199281600 -32400 1 AHDT}.. {215607600 -36000 0 AHST}.. {230731200 -32400 1 AHDT}.. {247057200 -36000 0 AHST}.. {262785600 -32400 1 AHDT}.. {278506800 -36000 0 AHST}.. {294235200 -3

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Anguilla

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):202
                                                                                                                      Entropy (8bit):4.908728298285591
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290/8J5290ppv:MByMYbpwt290/8m90b
                                                                                                                      MD5:1C3CE9F156ABECEAA794E8F1F3A7ADDB
                                                                                                                      SHA1:6F84D0A424FD2DE85E3420EA320A186B277B0295
                                                                                                                      SHA-256:F38610019C0A2C18AC71F5AA108B9647D9B5C01DCB55211AFB8312308C41FE70
                                                                                                                      SHA-512:CA2DA6F9551E4DBF775D7D059F6F3399E0C4F2A428699726CD2A1B0BB17CCF5CDEEF645EE1759A2A349F3F29E0343600B89CE1F4659CF5D2B58280A381C018AD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Anguilla) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Antigua

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):201
                                                                                                                      Entropy (8bit):4.898881450964165
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290//MFe90ppv:MByMYbpwt290//V90b
                                                                                                                      MD5:DB16FFE76D625DEC731AB6320F5EF9BF
                                                                                                                      SHA1:D286994E03E4F82C08DE094B436FA098648AFADE
                                                                                                                      SHA-256:561E58E11DC5A86CAE04B5CB40F43EFCFF9ABC0C841FAC094619E9C5E0B403F8
                                                                                                                      SHA-512:8842B616205378AF78B0B2FC3F6517385845DE30FFD477A21ACFA0060D161FB6462A3C266DCFD54F101729446B8E1B2ECF463C9CF2E6CE227B2628A19AF365F9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Antigua) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Araguaina

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1782
                                                                                                                      Entropy (8bit):3.733307964154526
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5KChlvEw6kSSx5H4a8tf3fkuozd23t8VZDG8+GCRRRd:QIlvEwJSSxdF8tfMuozdCt8VZy8+GCRB
                                                                                                                      MD5:9B01680A362EA7B462DC236F6A35E14C
                                                                                                                      SHA1:456A5E771F6B749BFDB2BFD59836A6A930499881
                                                                                                                      SHA-256:B1327CBEC20A21E3FF873E28A2EDFA271EE3A5C01933779300EABD6B185DA010
                                                                                                                      SHA-512:E6C2F5C489BEA31B0AAC3CB1DB750AC2B665DAC0AC82C1CE6756E768305300297BA5E3B32EDEB9E1715452F02223E47674C4F2B1844920F664623C9F34309240
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Araguaina) {.. {-9223372036854775808 -11568 0 LMT}.. {-1767214032 -10800 0 -03}.. {-1206957600 -7200 1 -03}.. {-1191362400 -10800 0 -03}.. {-1175374800 -7200 1 -03}.. {-1159826400 -10800 0 -03}.. {-633819600 -7200 1 -03}.. {-622069200 -10800 0 -03}.. {-602283600 -7200 1 -03}.. {-591832800 -10800 0 -03}.. {-570747600 -7200 1 -03}.. {-560210400 -10800 0 -03}.. {-539125200 -7200 1 -03}.. {-531352800 -10800 0 -03}.. {-191365200 -7200 1 -03}.. {-184197600 -10800 0 -03}.. {-155163600 -7200 1 -03}.. {-150069600 -10800 0 -03}.. {-128898000 -7200 1 -03}.. {-121125600 -10800 0 -03}.. {-99954000 -7200 1 -03}.. {-89589600 -10800 0 -03}.. {-68418000 -7200 1 -03}.. {-57967200 -10800 0 -03}.. {499748400 -7200 1 -03}.. {511236000 -10800 0 -03}.. {530593200 -7200 1 -03}.. {540266400 -10800 0 -03}.. {562129200 -7200 1 -03}.. {571197600 -10800 0 -03}

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\Buenos_Aires

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2048
                                                                                                                      Entropy (8bit):3.7664759014118188
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5p9uuSYSaSISBS2ShSmSLVS+E1/SKSZSGRSoSpS7S6S4wRSenSOafwwfFC8OS0wi:jIu3pfe92jCs/VOHv2kdeRtnxafwwfF0
                                                                                                                      MD5:2B9A1EDE5110B46E24F4726664EA1E3F
                                                                                                                      SHA1:939D1A7A50544F34B318ACDB52BC6930FE453F6D
                                                                                                                      SHA-256:BC86AC89121EC4AA302F6259CCC97EFFD7022DC6CEE3B291C57DA72B6EA0C558
                                                                                                                      SHA-512:C204740DACBCECF2CC5CF4FEB687E86B9150512623203C999D6F4EB5FB246D07681A35C28D8445F6A50F49940C321E0AA5E51FE5A73B8ED076F29CEB5B4D4CA2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Argentina/Buenos_Aires) {.. {-9223372036854775808 -14028 0 LMT}.. {-2372097972 -15408 0 CMT}.. {-1567453392 -14400 0 -04}.. {-1233432000 -10800 0 -04}.. {-1222981200 -14400 0 -04}.. {-1205956800 -10800 1 -04}.. {-1194037200 -14400 0 -04}.. {-1172865600 -10800 1 -04}.. {-1162501200 -14400 0 -04}.. {-1141329600 -10800 1 -04}.. {-1130965200 -14400 0 -04}.. {-1109793600 -10800 1 -04}.. {-1099429200 -14400 0 -04}.. {-1078257600 -10800 1 -04}.. {-1067806800 -14400 0 -04}.. {-1046635200 -10800 1 -04}.. {-1036270800 -14400 0 -04}.. {-1015099200 -10800 1 -04}.. {-1004734800 -14400 0 -04}.. {-983563200 -10800 1 -04}.. {-973198800 -14400 0 -04}.. {-952027200 -10800 1 -04}.. {-941576400 -14400 0 -04}.. {-931032000 -10800 1 -04}.. {-900882000 -14400 0 -04}.. {-890337600 -10800 1 -04}.. {-833749200 -14400 0 -04}.. {-827265600 -10800 1 -04}.. {-7522

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\Catamarca

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2077
                                                                                                                      Entropy (8bit):3.742645155048276
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5/nuuSYSaSISBS2ShSmSLVS+E1/SKSZSGRSoSpS7S6S4wRSenSOafww3mC8OS0NC:Vuu3pfe92jCs/VOHv2kdeRtnxafww3mP
                                                                                                                      MD5:3D2AF5714DFC392ED4BC976784D5A58A
                                                                                                                      SHA1:9252DE40B6EF872E1D2F7CDD53DDD21145E93C5C
                                                                                                                      SHA-256:A516BB0937977EF949D47B3C8675E30F1CA6C34F8BD298DCF6EBB943580D5317
                                                                                                                      SHA-512:8D5FFDB5B578B8EA0291D3A21BDDE25F8301CB16B11AE794FFBA8DCFFE46F6AC5EC03D93E511061B132D84E69E5FAF1BB212837EB8A5A4B4BE517F783837E615
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Argentina/Catamarca) {.. {-9223372036854775808 -15788 0 LMT}.. {-2372096212 -15408 0 CMT}.. {-1567453392 -14400 0 -04}.. {-1233432000 -10800 0 -04}.. {-1222981200 -14400 0 -04}.. {-1205956800 -10800 1 -04}.. {-1194037200 -14400 0 -04}.. {-1172865600 -10800 1 -04}.. {-1162501200 -14400 0 -04}.. {-1141329600 -10800 1 -04}.. {-1130965200 -14400 0 -04}.. {-1109793600 -10800 1 -04}.. {-1099429200 -14400 0 -04}.. {-1078257600 -10800 1 -04}.. {-1067806800 -14400 0 -04}.. {-1046635200 -10800 1 -04}.. {-1036270800 -14400 0 -04}.. {-1015099200 -10800 1 -04}.. {-1004734800 -14400 0 -04}.. {-983563200 -10800 1 -04}.. {-973198800 -14400 0 -04}.. {-952027200 -10800 1 -04}.. {-941576400 -14400 0 -04}.. {-931032000 -10800 1 -04}.. {-900882000 -14400 0 -04}.. {-890337600 -10800 1 -04}.. {-833749200 -14400 0 -04}.. {-827265600 -10800 1 -04}.. {-7522740

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\ComodRivadavia

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):242
                                                                                                                      Entropy (8bit):4.72138001874583
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7/MMXAXHAIgp/MMXmRN/290/MquQ90/MMXAy:MByMY/MYp/MrRt290/MquQ90/MK
                                                                                                                      MD5:8A609667DE461CEDC1127BE38B161459
                                                                                                                      SHA1:557D2D55DEA38D1CD1103E183F89C65F4016662B
                                                                                                                      SHA-256:8CCD6FC77D55582938F1912B1BA66035882D1BFC18A797C631E5E89ABFBF570B
                                                                                                                      SHA-512:DBAFDA069DB5FDBCBA11050AC91A733C1712BD6395939CFFFC5EAA78BD0B70B4AF2D9FB8954C6841CCF3AC5F8EDCF08E604D3F2CF67F1CBEA5EB6D3C4DC7F2FA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Argentina/Catamarca)]} {.. LoadTimeZoneFile America/Argentina/Catamarca..}..set TZData(:America/Argentina/ComodRivadavia) $TZData(:America/Argentina/Catamarca)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\Cordoba

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2043
                                                                                                                      Entropy (8bit):3.7481312409221594
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5lxQuuSYSaSISBS2ShSmSLVS+E1/SKSZSGRSoSpS7S6S4wRSenSOafww3mC8OS0n:/xBu3pfe92jCs/VOHv2kdeRtnxafww3j
                                                                                                                      MD5:8C1D665A25E61CE462C2AC57687763BF
                                                                                                                      SHA1:B5BBC26CF6A24BD5BEA42AC485D62C789B80905F
                                                                                                                      SHA-256:FA75E274240A341C6BFE3539CFDC114D125AEAEA3161D3C2409347CF8046042A
                                                                                                                      SHA-512:A89A7A92C025B87DA4CDFE99BF70CD0E64690D7BFE827DCBFBF0E91B188003FA26487E72B6B950D3BFC9C854B890E5936F414BBEAAD5F3F0673AC5EFE273CDF4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Argentina/Cordoba) {.. {-9223372036854775808 -15408 0 LMT}.. {-2372096592 -15408 0 CMT}.. {-1567453392 -14400 0 -04}.. {-1233432000 -10800 0 -04}.. {-1222981200 -14400 0 -04}.. {-1205956800 -10800 1 -04}.. {-1194037200 -14400 0 -04}.. {-1172865600 -10800 1 -04}.. {-1162501200 -14400 0 -04}.. {-1141329600 -10800 1 -04}.. {-1130965200 -14400 0 -04}.. {-1109793600 -10800 1 -04}.. {-1099429200 -14400 0 -04}.. {-1078257600 -10800 1 -04}.. {-1067806800 -14400 0 -04}.. {-1046635200 -10800 1 -04}.. {-1036270800 -14400 0 -04}.. {-1015099200 -10800 1 -04}.. {-1004734800 -14400 0 -04}.. {-983563200 -10800 1 -04}.. {-973198800 -14400 0 -04}.. {-952027200 -10800 1 -04}.. {-941576400 -14400 0 -04}.. {-931032000 -10800 1 -04}.. {-900882000 -14400 0 -04}.. {-890337600 -10800 1 -04}.. {-833749200 -14400 0 -04}.. {-827265600 -10800 1 -04}.. {-752274000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\Jujuy

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2041
                                                                                                                      Entropy (8bit):3.7481290145270245
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5HluuSYSaSISBS2ShSmSLVS+E1/SKSZSGRSoSpS7S6S4wRSenSOafwcSPAC8OS0E:xwu3pfe92jCs/VOHv2kdeRtnxafwcDCK
                                                                                                                      MD5:995EDE9E1E86DB500C7437A196325E21
                                                                                                                      SHA1:4A8FB1511AA124CA2D299EC8DE155EE9D0479180
                                                                                                                      SHA-256:43EB79ABC03CBAC661C563DE1BC09D9DD855CBC72DD2B6467EA98F0F90421BA9
                                                                                                                      SHA-512:B58B35EA1B2F0388B8108DCF254F3BD1B21894F00A9F313ABC093BC52C36FCDD94B7486DBA38161C9EFCDB12BC3CD81E7E02395B0CA480A7F01148C43CD3054F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Argentina/Jujuy) {.. {-9223372036854775808 -15672 0 LMT}.. {-2372096328 -15408 0 CMT}.. {-1567453392 -14400 0 -04}.. {-1233432000 -10800 0 -04}.. {-1222981200 -14400 0 -04}.. {-1205956800 -10800 1 -04}.. {-1194037200 -14400 0 -04}.. {-1172865600 -10800 1 -04}.. {-1162501200 -14400 0 -04}.. {-1141329600 -10800 1 -04}.. {-1130965200 -14400 0 -04}.. {-1109793600 -10800 1 -04}.. {-1099429200 -14400 0 -04}.. {-1078257600 -10800 1 -04}.. {-1067806800 -14400 0 -04}.. {-1046635200 -10800 1 -04}.. {-1036270800 -14400 0 -04}.. {-1015099200 -10800 1 -04}.. {-1004734800 -14400 0 -04}.. {-983563200 -10800 1 -04}.. {-973198800 -14400 0 -04}.. {-952027200 -10800 1 -04}.. {-941576400 -14400 0 -04}.. {-931032000 -10800 1 -04}.. {-900882000 -14400 0 -04}.. {-890337600 -10800 1 -04}.. {-833749200 -14400 0 -04}.. {-827265600 -10800 1 -04}.. {-752274000 -

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\La_Rioja

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2106
                                                                                                                      Entropy (8bit):3.744252944523733
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5lduuSYSaSISBS2ShSmSLVS+E1/SKSZSGRSoSpS7S6S4wRSenSOafwwkFC8OS0NC:Tou3pfe92jCs/VOHv2kdeRtnxafwwkFP
                                                                                                                      MD5:4A45A063D45EB94214005EF3CA5BCD6D
                                                                                                                      SHA1:2420E8591DC53A39EE1A58B2E45DCFAF9503685F
                                                                                                                      SHA-256:2B018B791E48269FA9EDA12662FFEC3E2DC33603A918E8B735B8D7D6BEB3B3AA
                                                                                                                      SHA-512:0B2824FA3D40B2EDBE8488D50C30368F4CF6E45A39FF6DEBC5BB4FD86F85AD52F5331AD1EB50E5166FA2E735B7E8AA9D94A5FED9421334DB0499524DBE08F737
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Argentina/La_Rioja) {.. {-9223372036854775808 -16044 0 LMT}.. {-2372095956 -15408 0 CMT}.. {-1567453392 -14400 0 -04}.. {-1233432000 -10800 0 -04}.. {-1222981200 -14400 0 -04}.. {-1205956800 -10800 1 -04}.. {-1194037200 -14400 0 -04}.. {-1172865600 -10800 1 -04}.. {-1162501200 -14400 0 -04}.. {-1141329600 -10800 1 -04}.. {-1130965200 -14400 0 -04}.. {-1109793600 -10800 1 -04}.. {-1099429200 -14400 0 -04}.. {-1078257600 -10800 1 -04}.. {-1067806800 -14400 0 -04}.. {-1046635200 -10800 1 -04}.. {-1036270800 -14400 0 -04}.. {-1015099200 -10800 1 -04}.. {-1004734800 -14400 0 -04}.. {-983563200 -10800 1 -04}.. {-973198800 -14400 0 -04}.. {-952027200 -10800 1 -04}.. {-941576400 -14400 0 -04}.. {-931032000 -10800 1 -04}.. {-900882000 -14400 0 -04}.. {-890337600 -10800 1 -04}.. {-833749200 -14400 0 -04}.. {-827265600 -10800 1 -04}.. {-75227400

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\Mendoza

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2077
                                                                                                                      Entropy (8bit):3.738002814507529
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5CPBuuSYSaSISBS2ShSmSLVS+E1/SKSZSGRSoSpS7S6S4wRSenSOafwGSmSc8OSI:GUu3pfe92jCs/VOHv2kdeRtnxafwGJld
                                                                                                                      MD5:F6CB24E8567B2443224E9E17EE438BFE
                                                                                                                      SHA1:8029426C30C4C645EA77C6240391CDB1C3107568
                                                                                                                      SHA-256:DC39400BBFD5BDDDC174FE099194806FBFD3FC3AA20E670D67BE0AC35FE97AD4
                                                                                                                      SHA-512:6869CFC24C21FBB2DFCCAA9AE7E21A0B24DC002EE792FB28A8F2F05C75C20E93C95A39BD8653AA272AF10FE95922B99EECC1208AACE814817D9441F84360E867
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Argentina/Mendoza) {.. {-9223372036854775808 -16516 0 LMT}.. {-2372095484 -15408 0 CMT}.. {-1567453392 -14400 0 -04}.. {-1233432000 -10800 0 -04}.. {-1222981200 -14400 0 -04}.. {-1205956800 -10800 1 -04}.. {-1194037200 -14400 0 -04}.. {-1172865600 -10800 1 -04}.. {-1162501200 -14400 0 -04}.. {-1141329600 -10800 1 -04}.. {-1130965200 -14400 0 -04}.. {-1109793600 -10800 1 -04}.. {-1099429200 -14400 0 -04}.. {-1078257600 -10800 1 -04}.. {-1067806800 -14400 0 -04}.. {-1046635200 -10800 1 -04}.. {-1036270800 -14400 0 -04}.. {-1015099200 -10800 1 -04}.. {-1004734800 -14400 0 -04}.. {-983563200 -10800 1 -04}.. {-973198800 -14400 0 -04}.. {-952027200 -10800 1 -04}.. {-941576400 -14400 0 -04}.. {-931032000 -10800 1 -04}.. {-900882000 -14400 0 -04}.. {-890337600 -10800 1 -04}.. {-833749200 -14400 0 -04}.. {-827265600 -10800 1 -04}.. {-752274000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\Rio_Gallegos

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2080
                                                                                                                      Entropy (8bit):3.7580685839169545
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5oQuuSYSaSISBS2ShSmSLVS+E1/SKSZSGRSoSpS7S6S4wRSenSOafwwfFC8OS0NC:qBu3pfe92jCs/VOHv2kdeRtnxafwwfFP
                                                                                                                      MD5:212D13CE27AF114A8EC2E04023D218C4
                                                                                                                      SHA1:C4C5F86BC6EC0D5EA4C9CF199309D085767B97E8
                                                                                                                      SHA-256:A05B6708DEFF0607396BFC6661C2287341C3432841AE353D94A67AC742B5FAFA
                                                                                                                      SHA-512:CE7201EEA6A86FB49641410D2EEE4030EDB1B96F3218D764762F5AE23883C796F5742ED69CEC985A9D3582D6C72ED74114DE81508F6DEB4B54865B6974ADC965
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Argentina/Rio_Gallegos) {.. {-9223372036854775808 -16612 0 LMT}.. {-2372095388 -15408 0 CMT}.. {-1567453392 -14400 0 -04}.. {-1233432000 -10800 0 -04}.. {-1222981200 -14400 0 -04}.. {-1205956800 -10800 1 -04}.. {-1194037200 -14400 0 -04}.. {-1172865600 -10800 1 -04}.. {-1162501200 -14400 0 -04}.. {-1141329600 -10800 1 -04}.. {-1130965200 -14400 0 -04}.. {-1109793600 -10800 1 -04}.. {-1099429200 -14400 0 -04}.. {-1078257600 -10800 1 -04}.. {-1067806800 -14400 0 -04}.. {-1046635200 -10800 1 -04}.. {-1036270800 -14400 0 -04}.. {-1015099200 -10800 1 -04}.. {-1004734800 -14400 0 -04}.. {-983563200 -10800 1 -04}.. {-973198800 -14400 0 -04}.. {-952027200 -10800 1 -04}.. {-941576400 -14400 0 -04}.. {-931032000 -10800 1 -04}.. {-900882000 -14400 0 -04}.. {-890337600 -10800 1 -04}.. {-833749200 -14400 0 -04}.. {-827265600 -10800 1 -04}.. {-7522

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\Salta

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2011
                                                                                                                      Entropy (8bit):3.7415813345133975
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5NPuuSYSaSISBS2ShSmSLVS+E1/SKSZSGRSoSpS7S6S4wRSenSOafww3mC8OS0wF:72u3pfe92jCs/VOHv2kdeRtnxafww3mz
                                                                                                                      MD5:A06C33CDFD7E7B630CB1DF34E72E61E5
                                                                                                                      SHA1:694826B9B910DA0BD70A9CB547C26E6838B08111
                                                                                                                      SHA-256:CAEFC60F2F36EF9FFE0C5921C3C392DE1E95755683A96C1C4EC0BA2C242A4D84
                                                                                                                      SHA-512:D6696A6C14EECF2B77EC586F40137BDD95E5CE5C5193570C809FAB9E5FCA4B8744283CEB6818E525C73F6EFF657274410B2622902EE8C15912C8D5F5FA5C805E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Argentina/Salta) {.. {-9223372036854775808 -15700 0 LMT}.. {-2372096300 -15408 0 CMT}.. {-1567453392 -14400 0 -04}.. {-1233432000 -10800 0 -04}.. {-1222981200 -14400 0 -04}.. {-1205956800 -10800 1 -04}.. {-1194037200 -14400 0 -04}.. {-1172865600 -10800 1 -04}.. {-1162501200 -14400 0 -04}.. {-1141329600 -10800 1 -04}.. {-1130965200 -14400 0 -04}.. {-1109793600 -10800 1 -04}.. {-1099429200 -14400 0 -04}.. {-1078257600 -10800 1 -04}.. {-1067806800 -14400 0 -04}.. {-1046635200 -10800 1 -04}.. {-1036270800 -14400 0 -04}.. {-1015099200 -10800 1 -04}.. {-1004734800 -14400 0 -04}.. {-983563200 -10800 1 -04}.. {-973198800 -14400 0 -04}.. {-952027200 -10800 1 -04}.. {-941576400 -14400 0 -04}.. {-931032000 -10800 1 -04}.. {-900882000 -14400 0 -04}.. {-890337600 -10800 1 -04}.. {-833749200 -14400 0 -04}.. {-827265600 -10800 1 -04}.. {-752274000 -

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\San_Juan

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2106
                                                                                                                      Entropy (8bit):3.747934819596411
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5vXxuuSYSaSISBS2ShSmSLVS+E1/SKSZSGRSoSpS7S6S4wRSenSOafwwkFC8OS0K:hUu3pfe92jCs/VOHv2kdeRtnxafwwkFl
                                                                                                                      MD5:32A50D0ABF408D9E59C0580D5B8CC472
                                                                                                                      SHA1:EA5BB8860982F8BAFEAEFDE1D6ACD440DA132DFE
                                                                                                                      SHA-256:41B2C25E42146A76934B866061BB3245B8ADA0FF4E1BFBA6F8842A30BDD5C132
                                                                                                                      SHA-512:E5D2521A4EF53AAD3E74506708EC2768C4D2EE8D6D014DCCF4A6DC290B713B4D46021B66527548C35004E10D753E1B685EEFD55BBE7BF01EC6104D7D8AAC4403
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Argentina/San_Juan) {.. {-9223372036854775808 -16444 0 LMT}.. {-2372095556 -15408 0 CMT}.. {-1567453392 -14400 0 -04}.. {-1233432000 -10800 0 -04}.. {-1222981200 -14400 0 -04}.. {-1205956800 -10800 1 -04}.. {-1194037200 -14400 0 -04}.. {-1172865600 -10800 1 -04}.. {-1162501200 -14400 0 -04}.. {-1141329600 -10800 1 -04}.. {-1130965200 -14400 0 -04}.. {-1109793600 -10800 1 -04}.. {-1099429200 -14400 0 -04}.. {-1078257600 -10800 1 -04}.. {-1067806800 -14400 0 -04}.. {-1046635200 -10800 1 -04}.. {-1036270800 -14400 0 -04}.. {-1015099200 -10800 1 -04}.. {-1004734800 -14400 0 -04}.. {-983563200 -10800 1 -04}.. {-973198800 -14400 0 -04}.. {-952027200 -10800 1 -04}.. {-941576400 -14400 0 -04}.. {-931032000 -10800 1 -04}.. {-900882000 -14400 0 -04}.. {-890337600 -10800 1 -04}.. {-833749200 -14400 0 -04}.. {-827265600 -10800 1 -04}.. {-75227400

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\San_Luis

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2081
                                                                                                                      Entropy (8bit):3.7399269084699975
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5MDuuSYSaSISBS2ShSmSLVS+E1/SKSZSGRSoSpS7S6S4wRSenSOafw6bS2nZSbdI:yCu3pfe92jCs/VOHv2kdeRtnxafwWnZr
                                                                                                                      MD5:FB06B66F5D41709C7E85C8B1E9BFCFA0
                                                                                                                      SHA1:D5C0C4B12C6190856C300321B1C106C7474BA54B
                                                                                                                      SHA-256:A43B35F25E54EF359D046E33281C0A978F0EE8811C93A6809F1F65750878BBB6
                                                                                                                      SHA-512:D445F46D6A17A075AD995885E45234A711F53BF3FE2DFC6DFBB611E8AC154B10C91E137927DD66D6A7C596A93BAE5DE283796F341B5095FA0DD05595E1C3A077
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Argentina/San_Luis) {.. {-9223372036854775808 -15924 0 LMT}.. {-2372096076 -15408 0 CMT}.. {-1567453392 -14400 0 -04}.. {-1233432000 -10800 0 -04}.. {-1222981200 -14400 0 -04}.. {-1205956800 -10800 1 -04}.. {-1194037200 -14400 0 -04}.. {-1172865600 -10800 1 -04}.. {-1162501200 -14400 0 -04}.. {-1141329600 -10800 1 -04}.. {-1130965200 -14400 0 -04}.. {-1109793600 -10800 1 -04}.. {-1099429200 -14400 0 -04}.. {-1078257600 -10800 1 -04}.. {-1067806800 -14400 0 -04}.. {-1046635200 -10800 1 -04}.. {-1036270800 -14400 0 -04}.. {-1015099200 -10800 1 -04}.. {-1004734800 -14400 0 -04}.. {-983563200 -10800 1 -04}.. {-973198800 -14400 0 -04}.. {-952027200 -10800 1 -04}.. {-941576400 -14400 0 -04}.. {-931032000 -10800 1 -04}.. {-900882000 -14400 0 -04}.. {-890337600 -10800 1 -04}.. {-833749200 -14400 0 -04}.. {-827265600 -10800 1 -04}.. {-75227400

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\Tucuman

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2105
                                                                                                                      Entropy (8bit):3.741704529449777
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5yZujuuSYSaSISBS2ShSmSLVS+E1/SKSZSGRSoSpS7S6S4wRSenSOafww3mC8OSf:suiu3pfe92jCs/VOHv2kdeRtnxafww3w
                                                                                                                      MD5:D9497141EC0DC172E5FF5304FED0BE6B
                                                                                                                      SHA1:CD20A4F0C127A84791093010D59DF119DD32340A
                                                                                                                      SHA-256:0F7DB23E1280FC19A1FB716E09A9699ADA2AAE24084CAD472B4C325CC9783CCF
                                                                                                                      SHA-512:0B71952055013CD6045ED209FD98168083550655FAB91B7870C92098E40C4FE6827EAAF922D34ECE28298CBB14327A76AD6780D480E552F52F865AA11A4AA083
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Argentina/Tucuman) {.. {-9223372036854775808 -15652 0 LMT}.. {-2372096348 -15408 0 CMT}.. {-1567453392 -14400 0 -04}.. {-1233432000 -10800 0 -04}.. {-1222981200 -14400 0 -04}.. {-1205956800 -10800 1 -04}.. {-1194037200 -14400 0 -04}.. {-1172865600 -10800 1 -04}.. {-1162501200 -14400 0 -04}.. {-1141329600 -10800 1 -04}.. {-1130965200 -14400 0 -04}.. {-1109793600 -10800 1 -04}.. {-1099429200 -14400 0 -04}.. {-1078257600 -10800 1 -04}.. {-1067806800 -14400 0 -04}.. {-1046635200 -10800 1 -04}.. {-1036270800 -14400 0 -04}.. {-1015099200 -10800 1 -04}.. {-1004734800 -14400 0 -04}.. {-983563200 -10800 1 -04}.. {-973198800 -14400 0 -04}.. {-952027200 -10800 1 -04}.. {-941576400 -14400 0 -04}.. {-931032000 -10800 1 -04}.. {-900882000 -14400 0 -04}.. {-890337600 -10800 1 -04}.. {-833749200 -14400 0 -04}.. {-827265600 -10800 1 -04}.. {-752274000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Argentina\Ushuaia

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2075
                                                                                                                      Entropy (8bit):3.7445758155279836
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5SHuuSYSaSISBS2ShSmSLVS+E1/SKSZSGRSoSpS7S6S4wRSenSOafwwfFC8OS0jE:YOu3pfe92jCs/VOHv2kdeRtnxafwwfFn
                                                                                                                      MD5:16A89FD2CDEE50E534301A9797311A9D
                                                                                                                      SHA1:4A4EBA1798214C7CF5ACDC0B2EC8B4716CD968CB
                                                                                                                      SHA-256:10B6FF51314D8EE1D010187D8805C4E3D71B778BC6DECB26E66193A5BB3E9EA2
                                                                                                                      SHA-512:DBB0BA3F8AA2B54C86EA8B6530C16DF95AF1331FC5F843B113A204DA20B8EF011FE93C27EB917D01B9040D4914057687B4AACCD292A847559AF69150D1BDC4B5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Argentina/Ushuaia) {.. {-9223372036854775808 -16392 0 LMT}.. {-2372095608 -15408 0 CMT}.. {-1567453392 -14400 0 -04}.. {-1233432000 -10800 0 -04}.. {-1222981200 -14400 0 -04}.. {-1205956800 -10800 1 -04}.. {-1194037200 -14400 0 -04}.. {-1172865600 -10800 1 -04}.. {-1162501200 -14400 0 -04}.. {-1141329600 -10800 1 -04}.. {-1130965200 -14400 0 -04}.. {-1109793600 -10800 1 -04}.. {-1099429200 -14400 0 -04}.. {-1078257600 -10800 1 -04}.. {-1067806800 -14400 0 -04}.. {-1046635200 -10800 1 -04}.. {-1036270800 -14400 0 -04}.. {-1015099200 -10800 1 -04}.. {-1004734800 -14400 0 -04}.. {-983563200 -10800 1 -04}.. {-973198800 -14400 0 -04}.. {-952027200 -10800 1 -04}.. {-941576400 -14400 0 -04}.. {-931032000 -10800 1 -04}.. {-900882000 -14400 0 -04}.. {-890337600 -10800 1 -04}.. {-833749200 -14400 0 -04}.. {-827265600 -10800 1 -04}.. {-752274000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Aruba

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):199
                                                                                                                      Entropy (8bit):4.893042770292303
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290/V90ppv:MByMYbpwt290/V90b
                                                                                                                      MD5:CC015E3E5D3293CAA1348B4E0EE5795C
                                                                                                                      SHA1:75E7EFD905C9001CE9CA5872DA3915A19BCB00E0
                                                                                                                      SHA-256:7490CD66408B8A14C549278FE67DC3338FE9E458F423F01CCBEA00B5E6F6CEF6
                                                                                                                      SHA-512:66523F050E4A42A1C9FC8C02B822CD3864A6E35F6364FB6A675F2A503BD8030FE6E380B252068668A79A6593B5042520EE40700DA033517742B3F0ED33D79DAF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Aruba) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Asuncion

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7944
                                                                                                                      Entropy (8bit):3.5156463862656775
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:j7RXBXLqbvdvZsV4GGdzVUFg7XaMOhKpJq3o5GMJq90vRFhjGF3RxTBhcXBACBLo:jEJgXh
                                                                                                                      MD5:181203CAD98E94355B9914A205514904
                                                                                                                      SHA1:D361CB53955437270905A9432DE9E7F6C1AE7189
                                                                                                                      SHA-256:EAEFE21276EE60C7F876C1D65039999AC069339DCDB82A23FC9206C274510575
                                                                                                                      SHA-512:AE9262DFC35579AEB610DF8BB5F7FBB49232195F55F78402405017681F72C0D2A09FA9EB605B406065A1F44FE6785AC0163870C921DAFFC4746DA6EDA3081521
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Asuncion) {.. {-9223372036854775808 -13840 0 LMT}.. {-2524507760 -13840 0 AMT}.. {-1206389360 -14400 0 -04}.. {86760000 -10800 0 -03}.. {134017200 -14400 0 -04}.. {162878400 -14400 0 -04}.. {181368000 -10800 1 -04}.. {194497200 -14400 0 -04}.. {212990400 -10800 1 -04}.. {226033200 -14400 0 -04}.. {244526400 -10800 1 -04}.. {257569200 -14400 0 -04}.. {276062400 -10800 1 -04}.. {291783600 -14400 0 -04}.. {307598400 -10800 1 -04}.. {323406000 -14400 0 -04}.. {339220800 -10800 1 -04}.. {354942000 -14400 0 -04}.. {370756800 -10800 1 -04}.. {386478000 -14400 0 -04}.. {402292800 -10800 1 -04}.. {418014000 -14400 0 -04}.. {433828800 -10800 1 -04}.. {449636400 -14400 0 -04}.. {465451200 -10800 1 -04}.. {481172400 -14400 0 -04}.. {496987200 -10800 1 -04}.. {512708400 -14400 0 -04}.. {528523200 -10800 1 -04}.. {544244400 -14400 0 -04}.. {5

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Atikokan

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):187
                                                                                                                      Entropy (8bit):4.791603790249234
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0u55DyXHAIg20u5cvRL/2IAcGE/qlOi+4IAcGEu5B:SlSWB9vsM3y7oDSHAIgpdN/290/qlf+M
                                                                                                                      MD5:5A45B70C79F533548B3DD332F988E15B
                                                                                                                      SHA1:C7485828619A1D4F5CA59D80ABD197100AC58F64
                                                                                                                      SHA-256:518BEB6E54AE811F8C725EA8CC42787D48FC605A3476D6E7A00A1B5733CBD6AC
                                                                                                                      SHA-512:A81C2EBE282E019ED011EADDB8F74C3E6FBE88D87E8D8706B3022CDCC48EF92AD90F9BCF9F25031664BB6EFE069EAFDD23D9B55BF672FC7528A2DD8CB6B986B4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Panama)]} {.. LoadTimeZoneFile America/Panama..}..set TZData(:America/Atikokan) $TZData(:America/Panama)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Atka

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):177
                                                                                                                      Entropy (8bit):4.812527147763069
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0/yO5WXHAIg20/yOoNvWARL/2IAcGE/ol7x+IAcGs:SlSWB9vsM3y7/yrHAIgp/yH0AN/290/e
                                                                                                                      MD5:13479F64BFBDC7583C637E1562C454B4
                                                                                                                      SHA1:2F59484C779B0D6033FC14E205DA9BCAB7A5FCB1
                                                                                                                      SHA-256:1D6FEE336E71FFFB64874A830C976867C071EBF6B133C296B32F87E3E7D814C9
                                                                                                                      SHA-512:D2C5D35BBBDAB8D58BF6185328124796C06B67ADFB4C1828BA5A9CCA500A01BB8BE69635AE7EEA7FA837A27B20D488A08A29B121DD1617BC373390AD95D67E39
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Adak)]} {.. LoadTimeZoneFile America/Adak..}..set TZData(:America/Atka) $TZData(:America/Adak)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Bahia

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2012
                                                                                                                      Entropy (8bit):3.703391569010329
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5/ChlvEw6kSSx5H4a8tf3fku+da2XUd23t8VZDG8+GyOd:VIlvEwJSSxdF8tfMu+da2kdCt8VZy8+K
                                                                                                                      MD5:69DCC2477D8D81E2F49D295DB6907190
                                                                                                                      SHA1:3C6ED0CEF15D3265C962873480EE1809A4DCACA2
                                                                                                                      SHA-256:64F1EC14F6B43FF10B564F839152E88DF9262F0947D1DB347557FA902F6FD48C
                                                                                                                      SHA-512:71DEA6D47F267AA7326A011872FA74762FA4F8CD57EB149E3B56B3DE9097B0B9258BC4F6C29188B49FC60C1942869B92D9E59FEE6980A5DA5D0029C383D99F39
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Bahia) {.. {-9223372036854775808 -9244 0 LMT}.. {-1767216356 -10800 0 -03}.. {-1206957600 -7200 1 -03}.. {-1191362400 -10800 0 -03}.. {-1175374800 -7200 1 -03}.. {-1159826400 -10800 0 -03}.. {-633819600 -7200 1 -03}.. {-622069200 -10800 0 -03}.. {-602283600 -7200 1 -03}.. {-591832800 -10800 0 -03}.. {-570747600 -7200 1 -03}.. {-560210400 -10800 0 -03}.. {-539125200 -7200 1 -03}.. {-531352800 -10800 0 -03}.. {-191365200 -7200 1 -03}.. {-184197600 -10800 0 -03}.. {-155163600 -7200 1 -03}.. {-150069600 -10800 0 -03}.. {-128898000 -7200 1 -03}.. {-121125600 -10800 0 -03}.. {-99954000 -7200 1 -03}.. {-89589600 -10800 0 -03}.. {-68418000 -7200 1 -03}.. {-57967200 -10800 0 -03}.. {499748400 -7200 1 -03}.. {511236000 -10800 0 -03}.. {530593200 -7200 1 -03}.. {540266400 -10800 0 -03}.. {562129200 -7200 1 -03}.. {571197600 -10800 0 -03}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Bahia_Banderas

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2073
                                                                                                                      Entropy (8bit):4.021485901155292
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:56hey9WUQwuz/V/NF01Y3A6S++S+vS+QQS+1S+9fS+BrS+HoS+8S+/N5S+5zNZf+:5pUIdFS1Y3FUlWQnH7eelN5Lh9LY5Lj
                                                                                                                      MD5:4655AE5AB9C39CA05C1FF36FC366679F
                                                                                                                      SHA1:F3F1D08EC35907A8F45AA2CFD097F6DCCA75C9B8
                                                                                                                      SHA-256:A6233E5BB0D3B30D0E3B94CD797718041AC3C2E75B387D6646A5C0376C5591CD
                                                                                                                      SHA-512:3915B845A312147C5B047096033B3D153E4E83AF4C8E4AAA73C8D12E2A8386CFE8EC4568730F9F28863017A60622DD9CC7D97991C966779B4068BC29F6C6B2B3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Bahia_Banderas) {.. {-9223372036854775808 -25260 0 LMT}.. {-1514739600 -25200 0 MST}.. {-1343066400 -21600 0 CST}.. {-1234807200 -25200 0 MST}.. {-1220292000 -21600 1 MDT}.. {-1207159200 -25200 0 MST}.. {-1191344400 -21600 0 CST}.. {-873828000 -25200 0 MST}.. {-661539600 -28800 0 PST}.. {28800 -25200 0 MST}.. {828867600 -21600 1 MDT}.. {846403200 -25200 0 MST}.. {860317200 -21600 1 MDT}.. {877852800 -25200 0 MST}.. {891766800 -21600 1 MDT}.. {909302400 -25200 0 MST}.. {923216400 -21600 1 MDT}.. {941356800 -25200 0 MST}.. {954666000 -21600 1 MDT}.. {972806400 -25200 0 MST}.. {989139600 -21600 1 MDT}.. {1001836800 -25200 0 MST}.. {1018170000 -21600 1 MDT}.. {1035705600 -25200 0 MST}.. {1049619600 -21600 1 MDT}.. {1067155200 -25200 0 MST}.. {1081069200 -21600 1 MDT}.. {1099209600 -25200 0 MST}.. {1112518800 -21600 1 MDT}.. {1130659200

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Barbados

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):648
                                                                                                                      Entropy (8bit):4.251560000277241
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86290eWmdH9Colj/uFkv/lC1/uFkOzQs/lps/Ozfah/OzT/lN/uFkX/ll/uFki:5TWeUo5Skv/Y1SkA/g/Bh/m/rSkX/zSt
                                                                                                                      MD5:DC4FA44B2174A4E6F0644FA8EA2E83F9
                                                                                                                      SHA1:C12DF8C862A05D569EAF189272F8BF44303595A1
                                                                                                                      SHA-256:FD5E04136506C6543A9ACDC890A30BCF0D561148E1063EC857E3913DE1EBA404
                                                                                                                      SHA-512:5AC307CD48132B57215CCBAF0BB63F7FA9C5B28DC9F6217C905885D75B0DF131238D4DB2AE707C3DDEE2EDE6C0914644B435FB1CDD9913600D8B69AE95578B0F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Barbados) {.. {-9223372036854775808 -14309 0 LMT}.. {-1841256091 -14400 0 AST}.. {-874263600 -10800 1 ADT}.. {-862682400 -14400 0 AST}.. {-841604400 -10800 1 ADT}.. {-830714400 -14400 0 AST}.. {-820526400 -14400 0 -0330}.. {-811882800 -12600 1 AST}.. {-798660000 -14400 0 -0330}.. {-788904000 -14400 0 AST}.. {234943200 -10800 1 ADT}.. {244616400 -14400 0 AST}.. {261554400 -10800 1 ADT}.. {276066000 -14400 0 AST}.. {293004000 -10800 1 ADT}.. {307515600 -14400 0 AST}.. {325058400 -10800 1 ADT}.. {338706000 -14400 0 AST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Belem

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1031
                                                                                                                      Entropy (8bit):3.8842563546204225
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5fe300cChlrLPsw6kSS3h5R14eH8tf3xd:5+CChlvEw6kSSx5H4a8tf3xd
                                                                                                                      MD5:DFA5E50F6AEF1311A4CF74970477E390
                                                                                                                      SHA1:5B63676EB8039B2BE767BAA44820F2DAE5B62876
                                                                                                                      SHA-256:549625CCB30BD0E025BAC47668BA3AA0CDD8569E5887E483C8D62B5B7302FA50
                                                                                                                      SHA-512:4BBB43694E3B54339C549AC3A5488B77366DB1189D8D1834DCF618D9448084A950B575E207064521B1CDFD2E41F7D1D8C5CD9CEB4668D4459585649556136EB0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Belem) {.. {-9223372036854775808 -11636 0 LMT}.. {-1767213964 -10800 0 -03}.. {-1206957600 -7200 1 -03}.. {-1191362400 -10800 0 -03}.. {-1175374800 -7200 1 -03}.. {-1159826400 -10800 0 -03}.. {-633819600 -7200 1 -03}.. {-622069200 -10800 0 -03}.. {-602283600 -7200 1 -03}.. {-591832800 -10800 0 -03}.. {-570747600 -7200 1 -03}.. {-560210400 -10800 0 -03}.. {-539125200 -7200 1 -03}.. {-531352800 -10800 0 -03}.. {-191365200 -7200 1 -03}.. {-184197600 -10800 0 -03}.. {-155163600 -7200 1 -03}.. {-150069600 -10800 0 -03}.. {-128898000 -7200 1 -03}.. {-121125600 -10800 0 -03}.. {-99954000 -7200 1 -03}.. {-89589600 -10800 0 -03}.. {-68418000 -7200 1 -03}.. {-57967200 -10800 0 -03}.. {499748400 -7200 1 -03}.. {511236000 -10800 0 -03}.. {530593200 -7200 1 -03}.. {540266400 -10800 0 -03}.. {562129200 -7200 1 -03}.. {571197600 -10800 0 -03}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Belize

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3284
                                                                                                                      Entropy (8bit):3.8546064195941097
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5pKSxZwR9IVQU55DG5krgGN8wW+YeD1yyfCwoc:HKSjgIVzrG5krRN8wWheD1yu
                                                                                                                      MD5:4DA622B685B3B075CC94FC4E23322547
                                                                                                                      SHA1:DEB23F0A434549DAE1BE60ACF757BB212C907B92
                                                                                                                      SHA-256:E07F45264E28FD5AA54BD48CB701658509829CF989EC9BD79498D070A1BA270F
                                                                                                                      SHA-512:9B00BF8870BC4AAEF7F06FCDFEEEF54686A2CC890103696631EB4DEF5AEEAD051EC9069D70A2B22397F18C0067E03A54E75DA18474D6B1BD3BDA2D5313E0AD16
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Belize) {.. {-9223372036854775808 -21168 0 LMT}.. {-1822500432 -21600 0 CST}.. {-1616954400 -19800 1 -0530}.. {-1606069800 -21600 0 CST}.. {-1585504800 -19800 1 -0530}.. {-1574015400 -21600 0 CST}.. {-1554055200 -19800 1 -0530}.. {-1542565800 -21600 0 CST}.. {-1522605600 -19800 1 -0530}.. {-1511116200 -21600 0 CST}.. {-1490551200 -19800 1 -0530}.. {-1479666600 -21600 0 CST}.. {-1459101600 -19800 1 -0530}.. {-1448217000 -21600 0 CST}.. {-1427652000 -19800 1 -0530}.. {-1416162600 -21600 0 CST}.. {-1396202400 -19800 1 -0530}.. {-1384713000 -21600 0 CST}.. {-1364752800 -19800 1 -0530}.. {-1353263400 -21600 0 CST}.. {-1333303200 -19800 1 -0530}.. {-1321813800 -21600 0 CST}.. {-1301248800 -19800 1 -0530}.. {-1290364200 -21600 0 CST}.. {-1269799200 -19800 1 -0530}.. {-1258914600 -21600 0 CST}.. {-1238349600 -19800 1 -0530}.. {-1226860200 -21600

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Blanc-Sablon

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):206
                                                                                                                      Entropy (8bit):4.938043196147077
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290F490ppv:MByMYbpwt290S90b
                                                                                                                      MD5:09FD8280CC890F238126F9641DB7C90E
                                                                                                                      SHA1:98AB4E0DE8173C2BB2532B07FAE2E71F588AB26F
                                                                                                                      SHA-256:FACD0A835D1F425CD323EE453ADE231810B2D1CF6EBA227BA1B50522AE3879F7
                                                                                                                      SHA-512:117C24389B7BFB079F4409B1FA6AA547654D7C69A6CBB19218BF2B96F6CFE3CBAAD400D4C2EFE8A9BFE25F44402057427FC8A62DC20A98018D23A7CF9B87401F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Blanc-Sablon) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Boa_Vista

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1199
                                                                                                                      Entropy (8bit):3.7988385604912893
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5EThevwnSRs//SFs/pS9/MHSW/WOSr/nSso/TSL/SSU/iS5X/LcSi/xScd/ZlSQZ:5EHSeSFESoSQSrSsCSeSPS1cSQSQlSsp
                                                                                                                      MD5:9529221F9B4E104CC598491703B10E6C
                                                                                                                      SHA1:5ACD61B525A18DE1919A7484C92EC5D787DF2F25
                                                                                                                      SHA-256:10592EA1CB0D02C06A61059EC601F70A706A5053AC923B9EED29388D5E71EF3A
                                                                                                                      SHA-512:66BEDB631469651A5E426155428764E3C1C14483E6FEE1505812E8676EB6E82CF0A88F6CC697F03FDA0AF906D91C7DE6E940DF3D33DD247BEF51DBD9A13DEE16
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Boa_Vista) {.. {-9223372036854775808 -14560 0 LMT}.. {-1767211040 -14400 0 -04}.. {-1206954000 -10800 1 -04}.. {-1191358800 -14400 0 -04}.. {-1175371200 -10800 1 -04}.. {-1159822800 -14400 0 -04}.. {-633816000 -10800 1 -04}.. {-622065600 -14400 0 -04}.. {-602280000 -10800 1 -04}.. {-591829200 -14400 0 -04}.. {-570744000 -10800 1 -04}.. {-560206800 -14400 0 -04}.. {-539121600 -10800 1 -04}.. {-531349200 -14400 0 -04}.. {-191361600 -10800 1 -04}.. {-184194000 -14400 0 -04}.. {-155160000 -10800 1 -04}.. {-150066000 -14400 0 -04}.. {-128894400 -10800 1 -04}.. {-121122000 -14400 0 -04}.. {-99950400 -10800 1 -04}.. {-89586000 -14400 0 -04}.. {-68414400 -10800 1 -04}.. {-57963600 -14400 0 -04}.. {499752000 -10800 1 -04}.. {511239600 -14400 0 -04}.. {530596800 -10800 1 -04}.. {540270000 -14400 0 -04}.. {562132800 -10800 1 -04}.. {571201200

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Bogota

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):246
                                                                                                                      Entropy (8bit):4.705337479465446
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/290bJhDm2OHDgoHvcuknov/zEXPKV2kR/uFVEV/KVg:MB86290bLmdHDgCvcukCz8O2Y/uF2/Og
                                                                                                                      MD5:DB019451A7D678C3E7AEE706283861F6
                                                                                                                      SHA1:57E63C5372F50CBD1A7FA32688C1B77ADDCC06EB
                                                                                                                      SHA-256:B6ADC16815DC95E537548CA3572D7F93626A6D1DC390DD4CBABAB5AB855BBA30
                                                                                                                      SHA-512:6C94B2D7EFA856E6BD41FC45B0E8D16A40E61D8B895397CD71230047FAD4793DDB9ABAAC57D2841549F161C9389D7E61D54D38F1BAC6F13ED3DD4C68CDD3272C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Bogota) {.. {-9223372036854775808 -17776 0 LMT}.. {-2707671824 -17776 0 BMT}.. {-1739041424 -18000 0 -05}.. {704869200 -14400 1 -05}.. {733896000 -18000 0 -05}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Boise

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8605
                                                                                                                      Entropy (8bit):3.8563913604109064
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:eSwtktXNmGaLV911sF7Lv/PCewtA8CzSPyDLbrcUia:/jXNDPlLv/PCenJzS6cy
                                                                                                                      MD5:005D0BF1320030A7E9CDC97D0C8BB44B
                                                                                                                      SHA1:CB236DA840A49B4BCD261114DCA38DADA567B091
                                                                                                                      SHA-256:93AF910CB2AD2203B71C1AD49D56DF4A4A14D07F885AFD4E755271F1372A517C
                                                                                                                      SHA-512:16A5483392741673BEC020EF6EBE963AB0FB12629D662C586C27A1E9A1BE3FEA8DC3D05A0E84917B8166E48CADA45C74DFABFDC897A6BC94D3C5058D31AD5126
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Boise) {.. {-9223372036854775808 -27889 0 LMT}.. {-2717640000 -28800 0 PST}.. {-1633269600 -25200 1 PDT}.. {-1615129200 -28800 0 PST}.. {-1601820000 -25200 1 PDT}.. {-1583679600 -28800 0 PST}.. {-1471788000 -25200 0 MST}.. {-880210800 -21600 1 MWT}.. {-769395600 -21600 1 MPT}.. {-765388800 -25200 0 MST}.. {-84380400 -21600 1 MDT}.. {-68659200 -25200 0 MST}.. {-52930800 -21600 1 MDT}.. {-37209600 -25200 0 MST}.. {-21481200 -21600 1 MDT}.. {-5760000 -25200 0 MST}.. {9968400 -21600 1 MDT}.. {25689600 -25200 0 MST}.. {41418000 -21600 1 MDT}.. {57744000 -25200 0 MST}.. {73472400 -21600 1 MDT}.. {89193600 -25200 0 MST}.. {104922000 -21600 1 MDT}.. {120643200 -25200 0 MST}.. {126255600 -25200 0 MST}.. {129114000 -21600 0 MDT}.. {152092800 -25200 0 MST}.. {162378000 -21600 1 MDT}.. {183542400 -25200 0 MST}.. {199270800 -21600 1 MDT}.. {

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Buenos_Aires

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):239
                                                                                                                      Entropy (8bit):4.821972751564724
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7/MQA+zAHAIgp/MQA+zE5N/290BFzk5h490/MQA+zd:MByMY/MV+zhp/MV+zE5t290rzy490/MW
                                                                                                                      MD5:6700956D5FE96CEC8D34EB49FF805374
                                                                                                                      SHA1:69B9973EF31AE204EFED7485E59CEA99E00815C8
                                                                                                                      SHA-256:DEFC5C9DA2D4D4146145A50D692A6BFF698C3B0A1F19EFD82AD0EE7678F39FCF
                                                                                                                      SHA-512:A80C03A519F00A4270248E885463090A34B3992B3DEBA94DD6AEBCC50736541655461E4AA10856125B8EF9B92CEB697429EE7088DBC6AB4FAE383FDF11521B7A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Argentina/Buenos_Aires)]} {.. LoadTimeZoneFile America/Argentina/Buenos_Aires..}..set TZData(:America/Buenos_Aires) $TZData(:America/Argentina/Buenos_Aires)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Cambridge_Bay

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7739
                                                                                                                      Entropy (8bit):3.8713679494465016
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:zsGaLV9T1sF7Lv/PCewtA8CzSPyDLbrcUia:h5lLv/PCenJzS6cy
                                                                                                                      MD5:E6AE12CDB55FED492C253E46E2690FE0
                                                                                                                      SHA1:CD3699E50BC1694827E51E4101C713E52FA646C8
                                                                                                                      SHA-256:3E0506A54B562DBC3AA6889DDD39B327FE0B85C63B00F0B39D606921A0936A59
                                                                                                                      SHA-512:BA3D5D5420210E74E74A581C9678224948266828A8FACE06383E41E13475C682F82D288426FB915D618FFE7ED95BD8F1C7E9D59D31CE5B464D5EC1363AB5E340
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Cambridge_Bay) {.. {-9223372036854775808 0 0 -00}.. {-1577923200 -25200 0 MST}.. {-880210800 -21600 1 MWT}.. {-769395600 -21600 1 MPT}.. {-765388800 -25200 0 MST}.. {-147891600 -18000 1 MDDT}.. {-131562000 -25200 0 MST}.. {325674000 -21600 1 MDT}.. {341395200 -25200 0 MST}.. {357123600 -21600 1 MDT}.. {372844800 -25200 0 MST}.. {388573200 -21600 1 MDT}.. {404899200 -25200 0 MST}.. {420022800 -21600 1 MDT}.. {436348800 -25200 0 MST}.. {452077200 -21600 1 MDT}.. {467798400 -25200 0 MST}.. {483526800 -21600 1 MDT}.. {499248000 -25200 0 MST}.. {514976400 -21600 1 MDT}.. {530697600 -25200 0 MST}.. {544611600 -21600 1 MDT}.. {562147200 -25200 0 MST}.. {576061200 -21600 1 MDT}.. {594201600 -25200 0 MST}.. {607510800 -21600 1 MDT}.. {625651200 -25200 0 MST}.. {638960400 -21600 1 MDT}.. {657100800 -25200 0 MST}.. {671014800 -21600 1 MDT}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Campo_Grande

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2918
                                                                                                                      Entropy (8bit):3.6039149423727013
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:591PSeSFESoSQSrSsCSeSPS1cSQSQlSsSyZS2SqLSwZS4vSoSUSLpSzS4X3/SxSs:5VsE3LMuJALTvn1ZdP7ZbvLfeAh+KIic
                                                                                                                      MD5:230A9F7A87BA56C30ACB3B1732F823F3
                                                                                                                      SHA1:8263EA723F2AEA7740C7EC54BE0000A06982D765
                                                                                                                      SHA-256:6D5BD1355016B03EDEA58DF98BEC26281CD372725B2DCB60B4D748D2FB4346C8
                                                                                                                      SHA-512:C357AA33833DBBDC6BC7DD3F23469EADDF08564AF17D7EE935C8AEA5F35B6E3BBDE1E181BC0DBF264051C4BE139261055633D191413DD610B0150AB3CDE161AF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Campo_Grande) {.. {-9223372036854775808 -13108 0 LMT}.. {-1767212492 -14400 0 -04}.. {-1206954000 -10800 1 -04}.. {-1191358800 -14400 0 -04}.. {-1175371200 -10800 1 -04}.. {-1159822800 -14400 0 -04}.. {-633816000 -10800 1 -04}.. {-622065600 -14400 0 -04}.. {-602280000 -10800 1 -04}.. {-591829200 -14400 0 -04}.. {-570744000 -10800 1 -04}.. {-560206800 -14400 0 -04}.. {-539121600 -10800 1 -04}.. {-531349200 -14400 0 -04}.. {-191361600 -10800 1 -04}.. {-184194000 -14400 0 -04}.. {-155160000 -10800 1 -04}.. {-150066000 -14400 0 -04}.. {-128894400 -10800 1 -04}.. {-121122000 -14400 0 -04}.. {-99950400 -10800 1 -04}.. {-89586000 -14400 0 -04}.. {-68414400 -10800 1 -04}.. {-57963600 -14400 0 -04}.. {499752000 -10800 1 -04}.. {511239600 -14400 0 -04}.. {530596800 -10800 1 -04}.. {540270000 -14400 0 -04}.. {562132800 -10800 1 -04}.. {571201

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Cancun

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1412
                                                                                                                      Entropy (8bit):4.034087321254386
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5s5edTS/uVV3iVP/uaP/uAyAhbS+V8S+FfS+UvS+MS+FB3S+QS+rcS+kS+RS+dSB:5DziZAmELf0On9uhcinzPPoUlWQW3
                                                                                                                      MD5:7FBCA91F4B7100C4667F24A9AB263109
                                                                                                                      SHA1:163A77FF9EAC49B00B5F838DF4D47F079ECF6A83
                                                                                                                      SHA-256:FD6C370F82E5CFE374637E0E222E72570857AC3F85143BEEEF9C3D0E7A6C0D04
                                                                                                                      SHA-512:124A5D7F58B38F15A90BA48E63D1D38335371D98A2503E691EC6426EB51E87FD61CA05FCA83573DD1DC06DB9E599302C64D226D5DF13B8A62E0A6943318431BE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Cancun) {.. {-9223372036854775808 -20824 0 LMT}.. {-1514743200 -21600 0 CST}.. {377935200 -18000 0 EST}.. {828860400 -14400 1 EDT}.. {846396000 -18000 0 EST}.. {860310000 -14400 1 EDT}.. {877845600 -18000 0 EST}.. {891759600 -14400 1 EDT}.. {902041200 -18000 0 CDT}.. {909298800 -21600 0 CST}.. {923212800 -18000 1 CDT}.. {941353200 -21600 0 CST}.. {954662400 -18000 1 CDT}.. {972802800 -21600 0 CST}.. {989136000 -18000 1 CDT}.. {1001833200 -21600 0 CST}.. {1018166400 -18000 1 CDT}.. {1035702000 -21600 0 CST}.. {1049616000 -18000 1 CDT}.. {1067151600 -21600 0 CST}.. {1081065600 -18000 1 CDT}.. {1099206000 -21600 0 CST}.. {1112515200 -18000 1 CDT}.. {1130655600 -21600 0 CST}.. {1143964800 -18000 1 CDT}.. {1162105200 -21600 0 CST}.. {1175414400 -18000 1 CDT}.. {1193554800 -21600 0 CST}.. {1207468800 -18000 1 CDT}.. {1225004400 -21600 0

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Caracas

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):284
                                                                                                                      Entropy (8bit):4.588048586971241
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2909+ETlDm2OHXoHv8HkISlvFVFQVgVJUF/R/OXFxWnVVFQVgVVvR/e:MB86290XmdHXCvydSltvAUeFZ/O/qVva
                                                                                                                      MD5:5DDB49759D58931A06740A14F76B431C
                                                                                                                      SHA1:E9AC99265D42D140E12BB4DAAA24FABAC65E79FA
                                                                                                                      SHA-256:D558C25F165E956E980AA8F554AB3BF24E91B51EADBD2B1065EF6DFDA0E2F984
                                                                                                                      SHA-512:318804ED41F36A3A8746C8CD286116787A768B06CAD6057559D1C7105170DE6EAB807EFA52AA8A0E353491B6F8C47D623D4473C1AEAD20B5C00747E07BB282B2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Caracas) {.. {-9223372036854775808 -16064 0 LMT}.. {-2524505536 -16060 0 CMT}.. {-1826739140 -16200 0 -0430}.. {-157750200 -14400 0 -04}.. {1197183600 -16200 0 -0430}.. {1462086000 -14400 0 -04}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Catamarca

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):227
                                                                                                                      Entropy (8bit):4.666638841481612
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7/MMXAXHAIgp/MMXmRN/29094SXAFB5290/MMXAy:MByMY/MYp/MrRt290mh5290/MK
                                                                                                                      MD5:EEB851BE330BCC44A4831763534058B9
                                                                                                                      SHA1:A5FC3E69DDBD3C40D9EB4317BBD5BB6C78751B36
                                                                                                                      SHA-256:37CD6BDAA6C6EEDFAC3288CA1C11F5CBBE8A17E5F2E790E7635A64B867AFBD87
                                                                                                                      SHA-512:7CD0BC822550325EB3198B4AD6CCD38938FA654A03A09C53117560D1FE3FDCD9C892D105F0D7AF44ED52DD7E0475721240D74A10C98619BE9EC4F5410B8FD87D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Argentina/Catamarca)]} {.. LoadTimeZoneFile America/Argentina/Catamarca..}..set TZData(:America/Catamarca) $TZData(:America/Argentina/Catamarca)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Cayenne

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.832612867310476
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2IAcGE91INMXGm2OHEFvpoeoHsdR4FIUPvGXFkUwXvp3VVV:SlSWB9eg/2909qDm2OHEdGeoHm4vOXF6
                                                                                                                      MD5:6052E52C8E5A5F43102C47D895797A1F
                                                                                                                      SHA1:23DBD40AE96C84E44ADCD1AC33E7871D217C17BC
                                                                                                                      SHA-256:873285F3E13CB68DD28EB109ECAD8D260E11A9FF6DF6A4E8E0D4C00B0182695B
                                                                                                                      SHA-512:DDE89C70B6F24AD4F585DC5424A6D029E5C898254C9085C588AE699CED4C8316840FF7C87685D7CFAA2E689F01687985454A0C9E3886342E936C56AB688DF732
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Cayenne) {.. {-9223372036854775808 -12560 0 LMT}.. {-1846269040 -14400 0 -04}.. {-71092800 -10800 0 -03}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Cayman

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.774923706273939
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0u55DyXHAIg20u5cvRL/2IAcGE91mr4IAcGEu5pvn:SlSWB9vsM3y7oDSHAIgpdN/2909Yr49F
                                                                                                                      MD5:AD6E086BEDF05A0BEB66990BD9518BEE
                                                                                                                      SHA1:FA0B7E8D6931E79092A90F7EECBA2293AE886AE3
                                                                                                                      SHA-256:C38C49AE1C3E67BD2118002DCFCC3C0EFB6892FB9B0106908A9282C414D0BF2E
                                                                                                                      SHA-512:A1E40422D15DBCB24A6FE353639A1541FAD7F394D20F8AEB32D4E39667BA264C3E815BAA703B88B90D381540168016A0641CA220BACAF05E80EAA698642B6FFA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Panama)]} {.. LoadTimeZoneFile America/Panama..}..set TZData(:America/Cayman) $TZData(:America/Panama)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Chicago

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):11372
                                                                                                                      Entropy (8bit):3.814348526052702
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:l6u30Ke1rdJ8SUklvgahLi8hbZlNA604qSScBgN+4ctDzIVQ/c/3hNxTh:l1EKwdJ8SUkl4aUqtfA604qSBgI7DBch
                                                                                                                      MD5:763E23AA7FB20F8D7CB2F0E87FAFD153
                                                                                                                      SHA1:B131A10C1C208BB5E5E178ACD21A679FD0537AC5
                                                                                                                      SHA-256:C7707AF88D650F90839E7258356E39D85228B33B6DBCC5C065C3D8733AE28CEE
                                                                                                                      SHA-512:FE9C5D2EA253338DDFD79CC8ED2F94D6817BD770C0895752EFB1917E2313735C18475D67191C29BCCD53DEFFF35C1BF0CA5D98C92091DDCD1E97CD6302DC73A4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Chicago) {.. {-9223372036854775808 -21036 0 LMT}.. {-2717647200 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-1577901600 -21600 0 CST}.. {-1563724800 -18000 1 CDT}.. {-1551632400 -21600 0 CST}.. {-1538928000 -18000 1 CDT}.. {-1520182800 -21600 0 CST}.. {-1504454400 -18000 1 CDT}.. {-1491757200 -21600 0 CST}.. {-1473004800 -18000 1 CDT}.. {-1459702800 -21600 0 CST}.. {-1441555200 -18000 1 CDT}.. {-1428253200 -21600 0 CST}.. {-1410105600 -18000 1 CDT}.. {-1396803600 -21600 0 CST}.. {-1378656000 -18000 1 CDT}.. {-1365354000 -21600 0 CST}.. {-1347206400 -18000 1 CDT}.. {-1333904400 -21600 0 CST}.. {-1315152000 -18000 1 CDT}.. {-1301850000 -21600 0 CST}.. {-1283702400 -18000 1 CDT}.. {-1270400400 -21600 0 CST}.. {-1252252800 -18000 1 CDT}.. {-1238950800

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Chihuahua

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2040
                                                                                                                      Entropy (8bit):4.006586050664275
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5wE2e49WU0S+VS+TjV/NF01YmM/parZ375+XiBn:5wEvU033FS1YrpaV5+yBn
                                                                                                                      MD5:67738E07092EDB5A9F484ED5CA217EFB
                                                                                                                      SHA1:9E428C67AE4BDACA48D189DF60374F3B6523E120
                                                                                                                      SHA-256:93438D65EA8F95691748FF749219FAFA1940469BC61CED0B7CBF995B417F20B4
                                                                                                                      SHA-512:57C9FE7EAE37504465F33B2AB079ED91700528E330D227E94AE8A06C58DEFA65F1EA1CDF89F835910D92D037DADB45E684A2EA96512B08F83650DD33CCEB8EB6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Chihuahua) {.. {-9223372036854775808 -25460 0 LMT}.. {-1514739600 -25200 0 MST}.. {-1343066400 -21600 0 CST}.. {-1234807200 -25200 0 MST}.. {-1220292000 -21600 1 MDT}.. {-1207159200 -25200 0 MST}.. {-1191344400 -21600 0 CST}.. {820476000 -21600 0 CST}.. {828864000 -18000 1 CDT}.. {846399600 -21600 0 CST}.. {860313600 -18000 1 CDT}.. {877849200 -21600 0 CST}.. {883634400 -21600 0 CST}.. {891766800 -21600 0 MDT}.. {909302400 -25200 0 MST}.. {923216400 -21600 1 MDT}.. {941356800 -25200 0 MST}.. {954666000 -21600 1 MDT}.. {972806400 -25200 0 MST}.. {989139600 -21600 1 MDT}.. {1001836800 -25200 0 MST}.. {1018170000 -21600 1 MDT}.. {1035705600 -25200 0 MST}.. {1049619600 -21600 1 MDT}.. {1067155200 -25200 0 MST}.. {1081069200 -21600 1 MDT}.. {1099209600 -25200 0 MST}.. {1112518800 -21600 1 MDT}.. {1130659200 -25200 0 MST}.. {1143968400 -

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Coral_Harbour

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):192
                                                                                                                      Entropy (8bit):4.844590153688034
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0u55DyXHAIg20u5cvRL/2IAcGE9WtEaQXs+IAcGEi:SlSWB9vsM3y7oDSHAIgpdN/2909qEacn
                                                                                                                      MD5:A0BF04CD77026DC1D2749848AB0EE45E
                                                                                                                      SHA1:EA0F1BC11379DF2E421675BC5DE4805CE94B96D6
                                                                                                                      SHA-256:C8CBF5A29CC1D0827390CA6E98B2EFCF90743C6DD0ECA143B300050DD4164041
                                                                                                                      SHA-512:61968B4E42ECC60C801F959D18D13187AD39D9B81FA1A947F6B6862F99D73E3A30849AC4233DB5705D46F5373C42D8748B15BE9B82822971B4F47E601E5766D8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Panama)]} {.. LoadTimeZoneFile America/Panama..}..set TZData(:America/Coral_Harbour) $TZData(:America/Panama)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Cordoba

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):219
                                                                                                                      Entropy (8bit):4.78887878252354
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7/MSHAIgp/M1ovN/29093+90/M7:MByMY/M7p/M16t290c90/M7
                                                                                                                      MD5:C7CCF5CEC7AA60D6063D1C30F4263ADC
                                                                                                                      SHA1:FD8E9AEEEE50656FD3C694CA051895DDC8E5590B
                                                                                                                      SHA-256:28B84710EADEF7AD5E7FA63EF519A9D93996D3BB91DD9018333DE3AC4D8FB8DD
                                                                                                                      SHA-512:6974F8B238977EE5222368C4B79327BB240580819FCA082261D6994781144D81E2E8843B4F1C9D07EFBEE27311C8930BDAC9C0D6D6718F6FB1600D0000576CDE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Argentina/Cordoba)]} {.. LoadTimeZoneFile America/Argentina/Cordoba..}..set TZData(:America/Cordoba) $TZData(:America/Argentina/Cordoba)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Costa_Rica

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):431
                                                                                                                      Entropy (8bit):4.506976345480408
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86290lnmdHd5CvZN/Mi3yvI8/uF+wSJz/uF+IA/uF+i/X8/uF+ZDVxNv:5mnedIvZN/e5S+w+S+LS+i0S+pB
                                                                                                                      MD5:0446EF1A6985A62EDFFB9FFAC7F1DE0E
                                                                                                                      SHA1:A43468E120E585E2DCC20205BA1D1E2CCB6C0BC2
                                                                                                                      SHA-256:E3061DC6FA9F869F013351A9FDF420448592D7F959C2B4404093432508146F7E
                                                                                                                      SHA-512:86D41B0C49489572C3EAEDD5466AA92319C721CCEC9437EBB0F2AAD772FB5ED91A2F2061E00448FB48096B0BAAE9A4E1E644F8AF595B76BE05DBC0C801E6D6ED
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Costa_Rica) {.. {-9223372036854775808 -20173 0 LMT}.. {-2524501427 -20173 0 SJMT}.. {-1545071027 -21600 0 CST}.. {288770400 -18000 1 CDT}.. {297234000 -21600 0 CST}.. {320220000 -18000 1 CDT}.. {328683600 -21600 0 CST}.. {664264800 -18000 1 CDT}.. {678344400 -21600 0 CST}.. {695714400 -18000 1 CDT}.. {700635600 -21600 0 CST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Creston

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.8664633847782905
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0utLaDovXHAIg20utLRYovHRL/2IAcGE9mM7x/h4y:SlSWB9vsM3y7OBHAIgpONYyHN/2909vr
                                                                                                                      MD5:0757DD22C0E297CCE8E6678ECA4B39C7
                                                                                                                      SHA1:81B31299F9A35C8BA2EC1F59EC21129FFCDCD52F
                                                                                                                      SHA-256:A01DDB460420C8765CE8EF7A7D031ABD7BDB17CFA548E7C3B8574C388AA21E17
                                                                                                                      SHA-512:F1AFC0F6371A10E4CB74FB2C8985610AEE6C3511861BC09384EDC99D250E9099A1F4430BFC3B0B396C2702BF9991A5A4ECFD53A82C92883460715FA2C1E04579
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Phoenix)]} {.. LoadTimeZoneFile America/Phoenix..}..set TZData(:America/Creston) $TZData(:America/Phoenix)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Cuiaba

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2912
                                                                                                                      Entropy (8bit):3.588248620238414
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5tSeSFESoSQSrSsCSeSPS1cSQSQlSsSyZS2SqLSwZS4vSoSUSLpSzS4X3/SxS1S4:rVsE3LMuJALTvn1ZdP7ZbvLfeAh+KIil
                                                                                                                      MD5:264E0CEA9491B404993594E64F13479F
                                                                                                                      SHA1:6D4D277FA470A2C7AD0A59B5DA3CC15BEEB74E78
                                                                                                                      SHA-256:2D8281CF3FD9E859C5206F781E264854FA876CB36562A08C6C01343C65F8A508
                                                                                                                      SHA-512:759C19B4DD0E1F7F1176872806BFB1F17ADF9C992E41B96FEA67D77DD67E9DD3C1683E3B6D27FB092C731F534C6A7441BACFFF0301907217A064523B86992E23
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Cuiaba) {.. {-9223372036854775808 -13460 0 LMT}.. {-1767212140 -14400 0 -04}.. {-1206954000 -10800 1 -04}.. {-1191358800 -14400 0 -04}.. {-1175371200 -10800 1 -04}.. {-1159822800 -14400 0 -04}.. {-633816000 -10800 1 -04}.. {-622065600 -14400 0 -04}.. {-602280000 -10800 1 -04}.. {-591829200 -14400 0 -04}.. {-570744000 -10800 1 -04}.. {-560206800 -14400 0 -04}.. {-539121600 -10800 1 -04}.. {-531349200 -14400 0 -04}.. {-191361600 -10800 1 -04}.. {-184194000 -14400 0 -04}.. {-155160000 -10800 1 -04}.. {-150066000 -14400 0 -04}.. {-128894400 -10800 1 -04}.. {-121122000 -14400 0 -04}.. {-99950400 -10800 1 -04}.. {-89586000 -14400 0 -04}.. {-68414400 -10800 1 -04}.. {-57963600 -14400 0 -04}.. {499752000 -10800 1 -04}.. {511239600 -14400 0 -04}.. {530596800 -10800 1 -04}.. {540270000 -14400 0 -04}.. {562132800 -10800 1 -04}.. {571201200 -1

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Curacao

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):201
                                                                                                                      Entropy (8bit):4.876961543280111
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/2909C4e90ppv:MByMYbpwt290690b
                                                                                                                      MD5:9459043060E33E8EDC74E78332E96EDF
                                                                                                                      SHA1:27963FE063965584D0F226BAE9A08EB2954398F0
                                                                                                                      SHA-256:ACCF08CF53C9431E226714DF8BEDE3C91BAF62D5BD7B98CA8B50D7258124D129
                                                                                                                      SHA-512:215D9AFAA7227F4447177CE2ABA5A6F7F2F46A9D787845DD32F10D5C22BF9CBE4047AF5E0E66FA7A4F70EEE064A7EC7B67949E565C3C5C60C31F3C19D6915D76
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Curacao) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Danmarkshavn

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1128
                                                                                                                      Entropy (8bit):3.8794180227436557
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5geNrmFQqFi77FkiVFw1ZFt9SFUXDFH9vMF0mFdS/FyMF8AWXF7HFEJF7cSXHVFS:5/vx7O11pbzvZ+S0xAqe12vey
                                                                                                                      MD5:6E37A78AC686A6B48A78541E1900E33C
                                                                                                                      SHA1:D41F39FDB6D45921B57341E95A006251B4875961
                                                                                                                      SHA-256:968C56F1D0106E1D92C7B094EEF528B6EE1FFA3D7A18BE2F2BA59178C2C0F1E0
                                                                                                                      SHA-512:397623149D95FF9A094750EE697F62DF90124BBBE407FB49FBAE335A61629449F2A61EF4471DBD57745B323DFCF3628611CAE9295F2EF7E4A7412A697651FF68
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Danmarkshavn) {.. {-9223372036854775808 -4480 0 LMT}.. {-1686091520 -10800 0 -03}.. {323845200 -7200 0 -02}.. {338950800 -10800 0 -03}.. {354675600 -7200 1 -02}.. {370400400 -10800 0 -03}.. {386125200 -7200 1 -02}.. {401850000 -10800 0 -03}.. {417574800 -7200 1 -02}.. {433299600 -10800 0 -03}.. {449024400 -7200 1 -02}.. {465354000 -10800 0 -03}.. {481078800 -7200 1 -02}.. {496803600 -10800 0 -03}.. {512528400 -7200 1 -02}.. {528253200 -10800 0 -03}.. {543978000 -7200 1 -02}.. {559702800 -10800 0 -03}.. {575427600 -7200 1 -02}.. {591152400 -10800 0 -03}.. {606877200 -7200 1 -02}.. {622602000 -10800 0 -03}.. {638326800 -7200 1 -02}.. {654656400 -10800 0 -03}.. {670381200 -7200 1 -02}.. {686106000 -10800 0 -03}.. {701830800 -7200 1 -02}.. {717555600 -10800 0 -03}.. {733280400 -7200 1 -02}.. {749005200 -10800 0 -03}.. {764730000 -72

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Dawson

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2967
                                                                                                                      Entropy (8bit):3.9564096415565855
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5IeVvxBn4nRfngnSSXRwEg7MkwY7Twbg7Uwr70vwHg7b6wa7gAHwc7/wzZg7ywJP:5zxKKpj/AOZFCARCeQbvb5wxMN6Ix
                                                                                                                      MD5:F494405F3B250668BE00DC3864B9A2DC
                                                                                                                      SHA1:20843AD6D95DD5D5950E2946BCAE4ECE2B676F70
                                                                                                                      SHA-256:30E875343C81C8DE473E6313A27C55315F38E7CCDBD2CEE5783EC54D269D5807
                                                                                                                      SHA-512:9102BD114436D5FE5A1942E31AE692ECE41F910AC1B6E52C02283801D5AA00CFF22D980C61E69928267D3DD34331E301C7324CA631B71AC2FBBDE06D7914F849
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Dawson) {.. {-9223372036854775808 -33460 0 LMT}.. {-2188996940 -32400 0 YST}.. {-1632056400 -28800 1 YDT}.. {-1615125600 -32400 0 YST}.. {-1596978000 -28800 1 YDT}.. {-1583164800 -32400 0 YST}.. {-880203600 -28800 1 YWT}.. {-769395600 -28800 1 YPT}.. {-765381600 -32400 0 YST}.. {-147884400 -25200 1 YDDT}.. {-131554800 -32400 0 YST}.. {315561600 -28800 0 PST}.. {325677600 -25200 1 PDT}.. {341398800 -28800 0 PST}.. {357127200 -25200 1 PDT}.. {372848400 -28800 0 PST}.. {388576800 -25200 1 PDT}.. {404902800 -28800 0 PST}.. {420026400 -25200 1 PDT}.. {436352400 -28800 0 PST}.. {452080800 -25200 1 PDT}.. {467802000 -28800 0 PST}.. {483530400 -25200 1 PDT}.. {499251600 -28800 0 PST}.. {514980000 -25200 1 PDT}.. {530701200 -28800 0 PST}.. {544615200 -25200 1 PDT}.. {562150800 -28800 0 PST}.. {576064800 -25200 1 PDT}.. {594205200 -28800 0 P

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Dawson_Creek

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1940
                                                                                                                      Entropy (8bit):4.024810417421672
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5/eUv5wk7Zw9JmnRsw78wP+7bw+7zwN7SynwpBZ7Fwk47H+wW73wo5775w572Iwl:5DuY/YRRvkGZ+R64CjSUlTGS
                                                                                                                      MD5:7868720D39782147B2BD6B039A5BF7E0
                                                                                                                      SHA1:6F66404E5CCFF7F020269A316D792D5E7AD4C280
                                                                                                                      SHA-256:540804BECDEAB92340EF02D32A62BFD550B71A3DB8D829BE426EE4D210004643
                                                                                                                      SHA-512:9CCD124FF954CA2988F07286FFE9ED740E0CEF5F4D76BF090367B74A577E91BF5590EDFE12AFC83ACF5CBFC88C5A68867C58082A2777D08C326A7B18889B08E2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Dawson_Creek) {.. {-9223372036854775808 -28856 0 LMT}.. {-2713881544 -28800 0 PST}.. {-1632060000 -25200 1 PDT}.. {-1615129200 -28800 0 PST}.. {-880207200 -25200 1 PWT}.. {-769395600 -25200 1 PPT}.. {-765385200 -28800 0 PST}.. {-725817600 -28800 0 PST}.. {-715788000 -25200 1 PDT}.. {-702486000 -28800 0 PST}.. {-684338400 -25200 1 PDT}.. {-671036400 -28800 0 PST}.. {-652888800 -25200 1 PDT}.. {-639586800 -28800 0 PST}.. {-620834400 -25200 1 PDT}.. {-608137200 -28800 0 PST}.. {-589384800 -25200 1 PDT}.. {-576082800 -28800 0 PST}.. {-557935200 -25200 1 PDT}.. {-544633200 -28800 0 PST}.. {-526485600 -25200 1 PDT}.. {-513183600 -28800 0 PST}.. {-495036000 -25200 1 PDT}.. {-481734000 -28800 0 PST}.. {-463586400 -25200 1 PDT}.. {-450284400 -28800 0 PST}.. {-431532000 -25200 1 PDT}.. {-418230000 -28800 0 PST}.. {-400082400 -25200 1 PDT}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Denver

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8920
                                                                                                                      Entropy (8bit):3.8540632258197514
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:gjGtwmGaLV911sF7Lv/PCewtA8CzSPyDLbrcUia:gUwDPlLv/PCenJzS6cy
                                                                                                                      MD5:0D649599A899ECB3FCF2783DCEE3E37B
                                                                                                                      SHA1:ACC796BE75F41A12FB1F8CCBD2B2839AF9876FFE
                                                                                                                      SHA-256:3FE2EE8C05C5D6F268B58BD9FC3E3A845DEA257473B29F7B3FB403E917448F3C
                                                                                                                      SHA-512:C10D41AB95439B8E978F12F9F58D1ACC9AD15404123FA5FBA0D1CC716E5CF5DA6BD2252450055AC3998DBCB8DD49F7A82ACD53413E3EE78CDA2C42F603DE2C56
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Denver) {.. {-9223372036854775808 -25196 0 LMT}.. {-2717643600 -25200 0 MST}.. {-1633273200 -21600 1 MDT}.. {-1615132800 -25200 0 MST}.. {-1601823600 -21600 1 MDT}.. {-1583683200 -25200 0 MST}.. {-1577898000 -25200 0 MST}.. {-1570374000 -21600 1 MDT}.. {-1551628800 -25200 0 MST}.. {-1538924400 -21600 1 MDT}.. {-1534089600 -25200 0 MST}.. {-883587600 -25200 0 MST}.. {-880210800 -21600 1 MWT}.. {-769395600 -21600 1 MPT}.. {-765388800 -25200 0 MST}.. {-757357200 -25200 0 MST}.. {-147884400 -21600 1 MDT}.. {-131558400 -25200 0 MST}.. {-116434800 -21600 1 MDT}.. {-100108800 -25200 0 MST}.. {-94669200 -25200 0 MST}.. {-84380400 -21600 1 MDT}.. {-68659200 -25200 0 MST}.. {-52930800 -21600 1 MDT}.. {-37209600 -25200 0 MST}.. {-21481200 -21600 1 MDT}.. {-5760000 -25200 0 MST}.. {9968400 -21600 1 MDT}.. {25689600 -25200 0 MST}.. {41418000 -2

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Detroit

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8430
                                                                                                                      Entropy (8bit):3.826664943157435
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:SGiS1A5tCt/cL1BRP0HY2iU7KKdFL6Aa2K4gSLf8e:SG/K5ItON0HY2iUmUFLqU
                                                                                                                      MD5:2BBA922E9377D257CBDF6E1367BBB1A2
                                                                                                                      SHA1:6F33A44834E8041E78660A326A5DDAF3D7F9DC2A
                                                                                                                      SHA-256:84F6897B87D3978D30D35097B78C55434CE55EB65D6E488A391DFC3B3BB5A8FE
                                                                                                                      SHA-512:D225824945C08A3521A8288B92B26DFFA712ED3505E72DEDE4A7D1777E58DEA79ADF3F042D22624E4142DD4203BAA4DFF8EB08B7033FDF00059F6C39954EA1A1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Detroit) {.. {-9223372036854775808 -19931 0 LMT}.. {-2051202469 -21600 0 CST}.. {-1724083200 -18000 0 EST}.. {-883594800 -18000 0 EST}.. {-880218000 -14400 1 EWT}.. {-769395600 -14400 1 EPT}.. {-765396000 -18000 0 EST}.. {-757364400 -18000 0 EST}.. {-684349200 -14400 1 EDT}.. {-671047200 -18000 0 EST}.. {-80506740 -14400 0 EDT}.. {-68666400 -18000 0 EST}.. {-52938000 -14400 1 EDT}.. {-37216800 -18000 0 EST}.. {-31518000 -18000 0 EST}.. {94712400 -18000 0 EST}.. {104914800 -14400 1 EDT}.. {120636000 -18000 0 EST}.. {126687600 -14400 1 EDT}.. {152085600 -18000 0 EST}.. {157784400 -18000 0 EST}.. {167814000 -14400 0 EDT}.. {183535200 -18000 0 EST}.. {199263600 -14400 1 EDT}.. {215589600 -18000 0 EST}.. {230713200 -14400 1 EDT}.. {247039200 -18000 0 EST}.. {262767600 -14400 1 EDT}.. {278488800 -18000 0 EST}.. {294217200 -14400 1 EDT}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Dominica

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):202
                                                                                                                      Entropy (8bit):4.86856578093135
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290TL3290ppv:MByMYbpwt290Tr290b
                                                                                                                      MD5:398D8DBB24CEA2D174EF05F63869C94A
                                                                                                                      SHA1:6D0E04165952E873E6ECA33A0E54761B747F0A98
                                                                                                                      SHA-256:3DA98AA7D3085845779BE8ED6C93CCBDA92191F17CA67BBF779803E21DA2ABF3
                                                                                                                      SHA-512:2652AFD1A3F8A4B84078A964005FE10C64491EC2D47CDE57D5066D07D1D837308FD696F53B9E7B6B0E72F86F9A85128B8CBF5F302F91EADE6D840DF946DE85CD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Dominica) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Edmonton

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8600
                                                                                                                      Entropy (8bit):3.8579895970456137
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:7SabOGaLm911sF7Lv/PCewtA8CzSPyDLbrcUia:7vf4lLv/PCenJzS6cy
                                                                                                                      MD5:EBD169ECA4D45EED28BF7B27809361BC
                                                                                                                      SHA1:E89C8484A29D792FB6349CFDFDD30C2FA6B78B6B
                                                                                                                      SHA-256:026D51D73D30A3710288F440E0C337E44E3A14D0AA2D7B6C6E53AF43FC72A90C
                                                                                                                      SHA-512:45C936ED7D4AF95261180547013454AAEC9FA7672B52AC6077DD99D9FEB6DDD57652FE4EC67BF81F1588384F3027A1872E0C72D9CAEB980B66D2CB6EE9B8ABB0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Edmonton) {.. {-9223372036854775808 -27232 0 LMT}.. {-1998663968 -25200 0 MST}.. {-1632063600 -21600 1 MDT}.. {-1615132800 -25200 0 MST}.. {-1600614000 -21600 1 MDT}.. {-1596816000 -25200 0 MST}.. {-1567954800 -21600 1 MDT}.. {-1551628800 -25200 0 MST}.. {-1536505200 -21600 1 MDT}.. {-1523203200 -25200 0 MST}.. {-1504450800 -21600 1 MDT}.. {-1491753600 -25200 0 MST}.. {-1473001200 -21600 1 MDT}.. {-1459699200 -25200 0 MST}.. {-880210800 -21600 1 MWT}.. {-769395600 -21600 1 MPT}.. {-765388800 -25200 0 MST}.. {-715791600 -21600 1 MDT}.. {-702489600 -25200 0 MST}.. {73472400 -21600 1 MDT}.. {89193600 -25200 0 MST}.. {104922000 -21600 1 MDT}.. {120643200 -25200 0 MST}.. {136371600 -21600 1 MDT}.. {152092800 -25200 0 MST}.. {167821200 -21600 1 MDT}.. {183542400 -25200 0 MST}.. {199270800 -21600 1 MDT}.. {215596800 -25200 0 MST}.. {23072

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Eirunepe

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1230
                                                                                                                      Entropy (8bit):3.7989525000422963
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5OXUepdkZss/uuD/uVK/uNC/uvFe/uxJs/u74O/u83C/uc8J/uhF8/uNHs/ulU6w:5OXCZsMw57XJh4CxUF/A6GTrtSUUhfL0
                                                                                                                      MD5:6766E75702D8C2D1C986DFCEFCE554F9
                                                                                                                      SHA1:39553F80D82BC0134FAF70C9830B96BDCBCEFF1C
                                                                                                                      SHA-256:48FC987E5999EA79F24797E0450FE4DAB7CF320DFAD7A47A8A1E037077EC42C9
                                                                                                                      SHA-512:A812D0D4254BB0B7DB7AE116652D2A8F97D22C59F2709A17D1CE435FCFB38B807A4E0ED6EA114A66897E29D85226875FA84D28B254A5D17BD1CBA95FAD8349B7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Eirunepe) {.. {-9223372036854775808 -16768 0 LMT}.. {-1767208832 -18000 0 -05}.. {-1206950400 -14400 1 -05}.. {-1191355200 -18000 0 -05}.. {-1175367600 -14400 1 -05}.. {-1159819200 -18000 0 -05}.. {-633812400 -14400 1 -05}.. {-622062000 -18000 0 -05}.. {-602276400 -14400 1 -05}.. {-591825600 -18000 0 -05}.. {-570740400 -14400 1 -05}.. {-560203200 -18000 0 -05}.. {-539118000 -14400 1 -05}.. {-531345600 -18000 0 -05}.. {-191358000 -14400 1 -05}.. {-184190400 -18000 0 -05}.. {-155156400 -14400 1 -05}.. {-150062400 -18000 0 -05}.. {-128890800 -14400 1 -05}.. {-121118400 -18000 0 -05}.. {-99946800 -14400 1 -05}.. {-89582400 -18000 0 -05}.. {-68410800 -14400 1 -05}.. {-57960000 -18000 0 -05}.. {499755600 -14400 1 -05}.. {511243200 -18000 0 -05}.. {530600400 -14400 1 -05}.. {540273600 -18000 0 -05}.. {562136400 -14400 1 -05}.. {571204800

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\El_Salvador

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):279
                                                                                                                      Entropy (8bit):4.760311149376001
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/29078iPDm2OHvJ4YoHxHhgdrV/uF+IcmJ3/uF+ivNv:MB8629078AmdHx4YCJSB/uF+QV/uF+w9
                                                                                                                      MD5:CEF7277443EB6990E72C7EA7F79A122C
                                                                                                                      SHA1:1D3FEA364B3DC129DE3998A1455D5588EBAA6FF8
                                                                                                                      SHA-256:C02C6E79398553BD07BEA0BE4B7F0EBDD8BC821595909CFFB49DE4290A0D1D0F
                                                                                                                      SHA-512:E6FC530B2CCF010B8D38BC3F49A6859B5C68F4AB604E6305CE75FBE4FC9FF3FCD0187DEBEF6DAE652EEF9695568DBDE31F426E404CC3CC206D78183E0D919234
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/El_Salvador) {.. {-9223372036854775808 -21408 0 LMT}.. {-1546279392 -21600 0 CST}.. {547020000 -18000 1 CDT}.. {559717200 -21600 0 CST}.. {578469600 -18000 1 CDT}.. {591166800 -21600 0 CST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Ensenada

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.836337676384058
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0qfSfXHAIg20qfORL/2IAcGE7JM7QIAcGEqfBn:SlSWB9vsM3y7ekHAIgpeON/2907390eB
                                                                                                                      MD5:005D9C0E50291616A727CFB74A9FD37E
                                                                                                                      SHA1:846AE6720382B4F67B37B4256E45246C81DAF899
                                                                                                                      SHA-256:3E363BF82545F24CCE8CFA6EEC97BA6E1C2A7730B2A9CE6C48F784821D308A5D
                                                                                                                      SHA-512:452326D11D01825764BC40A77D17444D822F3AA202582233DD8B122798478FA83E3A27A02508EAC4CF0C7922AC2563742D773AA870562AE496B34FBB41FBAD63
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Tijuana)]} {.. LoadTimeZoneFile America/Tijuana..}..set TZData(:America/Ensenada) $TZData(:America/Tijuana)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Fort_Nelson

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4578
                                                                                                                      Entropy (8bit):3.8944281193962818
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5QIgsB/YRRvkGZ+R64CjSUlTG5Al5pj/A1ZFCARCeQbvb5+:6IgzR864CjSETG5sjgZkR/bvt+
                                                                                                                      MD5:4A4E023F635C4202018EA9E8F85B5047
                                                                                                                      SHA1:38E121FE2D419413E9E791B6C22BFC8D9F7554BC
                                                                                                                      SHA-256:AB15023807E7C7D1026C9970D190F1B405D48952464025242C2BB6C6BBB8391A
                                                                                                                      SHA-512:F10D21A2C841224879D1C817FC7F477DF582E1BC3603666B55199C098D51D1D5429F8C088C1083C07FC7588AE5C42A1DFBCC6B7C636AD1BE84ED657807A229E5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Fort_Nelson) {.. {-9223372036854775808 -29447 0 LMT}.. {-2713880953 -28800 0 PST}.. {-1632060000 -25200 1 PDT}.. {-1615129200 -28800 0 PST}.. {-880207200 -25200 1 PWT}.. {-769395600 -25200 1 PPT}.. {-765385200 -28800 0 PST}.. {-757353600 -28800 0 PST}.. {-725817600 -28800 0 PST}.. {-715788000 -25200 1 PDT}.. {-702486000 -28800 0 PST}.. {-684338400 -25200 1 PDT}.. {-671036400 -28800 0 PST}.. {-652888800 -25200 1 PDT}.. {-639586800 -28800 0 PST}.. {-620834400 -25200 1 PDT}.. {-608137200 -28800 0 PST}.. {-589384800 -25200 1 PDT}.. {-576082800 -28800 0 PST}.. {-557935200 -25200 1 PDT}.. {-544633200 -28800 0 PST}.. {-526485600 -25200 1 PDT}.. {-513183600 -28800 0 PST}.. {-495036000 -25200 1 PDT}.. {-481734000 -28800 0 PST}.. {-463586400 -25200 1 PDT}.. {-450284400 -28800 0 PST}.. {-431532000 -25200 1 PDT}.. {-418230000 -28800 0 PST}.. {

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Fort_Wayne

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):231
                                                                                                                      Entropy (8bit):4.778858143786314
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y73GK7JHAIgp3GKZRN/290HXYAp4903GK8:MByMY3GK7Kp3GKnt290Hz4903GK8
                                                                                                                      MD5:24C369A3091452DCA7AAEBF4F48F5289
                                                                                                                      SHA1:2C2174CB16F490689E6FAC17B6D18F4A0DBD2DC9
                                                                                                                      SHA-256:C8948616262CF6990739343ABBBD237E572DB49310099E21DD8F9E317F7D11B3
                                                                                                                      SHA-512:80F579572754579706B4EEA49BF30456F3231A308E0616DC430E2428A04992412773421542E4F7FE4E4C7491BA88942FA44B49E87E95A2183211AC2AB523B231
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Indiana/Indianapolis)]} {.. LoadTimeZoneFile America/Indiana/Indianapolis..}..set TZData(:America/Fort_Wayne) $TZData(:America/Indiana/Indianapolis)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Fortaleza

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1423
                                                                                                                      Entropy (8bit):3.784027854102512
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5MeajcChlrLPsw6kSS3h5R14eH8tf3GvIkuoYVZaIBXR8nd:5rChlvEw6kSSx5H4a8tf3fkuoYVZDNRo
                                                                                                                      MD5:E7939C9A3F83D73B82A6DE359365EFD4
                                                                                                                      SHA1:06D6E257DA7C317CAFAF6C0B04567A2453CC1660
                                                                                                                      SHA-256:C0A836BDAF07F0376B7B0833A0AB3D52BA6E3E1D6F95E247E1AD351CD1096066
                                                                                                                      SHA-512:E2BEA04084489B26ADD9A768D2580C1FF7EBAC8A3EA36818F49E85FB14E01500D59D53904F5A17F4DABEF27B4CC2FC3F977EE4C125E5CE739BBE90C130ED3B07
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Fortaleza) {.. {-9223372036854775808 -9240 0 LMT}.. {-1767216360 -10800 0 -03}.. {-1206957600 -7200 1 -03}.. {-1191362400 -10800 0 -03}.. {-1175374800 -7200 1 -03}.. {-1159826400 -10800 0 -03}.. {-633819600 -7200 1 -03}.. {-622069200 -10800 0 -03}.. {-602283600 -7200 1 -03}.. {-591832800 -10800 0 -03}.. {-570747600 -7200 1 -03}.. {-560210400 -10800 0 -03}.. {-539125200 -7200 1 -03}.. {-531352800 -10800 0 -03}.. {-191365200 -7200 1 -03}.. {-184197600 -10800 0 -03}.. {-155163600 -7200 1 -03}.. {-150069600 -10800 0 -03}.. {-128898000 -7200 1 -03}.. {-121125600 -10800 0 -03}.. {-99954000 -7200 1 -03}.. {-89589600 -10800 0 -03}.. {-68418000 -7200 1 -03}.. {-57967200 -10800 0 -03}.. {499748400 -7200 1 -03}.. {511236000 -10800 0 -03}.. {530593200 -7200 1 -03}.. {540266400 -10800 0 -03}.. {562129200 -7200 1 -03}.. {571197600 -10800 0 -03}.

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Glace_Bay

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8372
                                                                                                                      Entropy (8bit):3.8225708746657316
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:w4lTPB10KvnpNWMPm4bPJWXtRbALtuFW4ng2CEBJuQaeEy9P19OBYEi/B51B7/BI:wKCC
                                                                                                                      MD5:1C8B0B85BB5578E84A4867546111F946
                                                                                                                      SHA1:E08A96F5B369FA53BC1F3F839EC14FF9D334F727
                                                                                                                      SHA-256:58C207CBD9DE7A7BB15E48A62CEA9F15DA184B945133DEE88EFF29FD8B66B29E
                                                                                                                      SHA-512:54CFBF208AB3E58AFB6BEC40265A452A3C4C684D7F278F51D6495FCA544652A1A5E05BC45F600911191B33C936E5D7D43A28FD2B0884AAB9F63B7AD5EFD574A1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Glace_Bay) {.. {-9223372036854775808 -14388 0 LMT}.. {-2131646412 -14400 0 AST}.. {-1632074400 -10800 1 ADT}.. {-1615143600 -14400 0 AST}.. {-880221600 -10800 1 AWT}.. {-769395600 -10800 1 APT}.. {-765399600 -14400 0 AST}.. {-536443200 -14400 0 AST}.. {-526500000 -10800 1 ADT}.. {-513198000 -14400 0 AST}.. {-504907200 -14400 0 AST}.. {63086400 -14400 0 AST}.. {73461600 -10800 1 ADT}.. {89182800 -14400 0 AST}.. {104911200 -10800 1 ADT}.. {120632400 -14400 0 AST}.. {126244800 -14400 0 AST}.. {136360800 -10800 1 ADT}.. {152082000 -14400 0 AST}.. {167810400 -10800 1 ADT}.. {183531600 -14400 0 AST}.. {199260000 -10800 1 ADT}.. {215586000 -14400 0 AST}.. {230709600 -10800 1 ADT}.. {247035600 -14400 0 AST}.. {262764000 -10800 1 ADT}.. {278485200 -14400 0 AST}.. {294213600 -10800 1 ADT}.. {309934800 -14400 0 AST}.. {325663200 -10800 1 ADT}

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Godthab

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):180
                                                                                                                      Entropy (8bit):4.973070790103308
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0wQbSeyXHAIg20wQboAFARL/2IAcGE5GZJ4IAcGEH:SlSWB9vsM3y7lbSeSHAIgplbLFAN/291
                                                                                                                      MD5:8263D2B39C2EC3B38A179F8BAD5972DD
                                                                                                                      SHA1:18D3462F6846768E16036E860DE90FB345C93047
                                                                                                                      SHA-256:5FB2CFBA25CE2F49D4C3911AFF8E7E1FF84EFC2D01F5783772E88246BFBC56AC
                                                                                                                      SHA-512:C175CAF972459759553001D48921268E9C6268CED56021BA6339F8CE3DD032DA6180E2B82974D3DCD0DC5F21566DFDBFBE1B6CF24E5E893F2335A449452DB27F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Nuuk)]} {.. LoadTimeZoneFile America/Nuuk..}..set TZData(:America/Godthab) $TZData(:America/Nuuk)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Goose_Bay

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):10353
                                                                                                                      Entropy (8bit):3.864463676759425
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:zfSacO8f7/ewzlrfFj18KvnpNWMPm4bPJvSuYUHgA0G19OBYEi/B51B7/Bm6BTdW:zfSacOI7/V3SuYUHgAuCC
                                                                                                                      MD5:0D646C67105FD0525E7CCC79585CE9DF
                                                                                                                      SHA1:06D91FDD8FEEDC299E40079569372F97A9AC6F04
                                                                                                                      SHA-256:52D2478289682BF95BFB93D64D679E888C9D23C0F68DFFF7E6E34BFC44B3D892
                                                                                                                      SHA-512:FD672613C2B65E12425415630A2F489917EB80DDED41338C9AA7D5D3C6B54E52C516A32493593F518DACF22A91D7A9D2C96DB9C5F1BE2C3BB9842D274BDC04FF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Goose_Bay) {.. {-9223372036854775808 -14500 0 LMT}.. {-2713895900 -12652 0 NST}.. {-1640982548 -12652 0 NST}.. {-1632076148 -9052 1 NDT}.. {-1615145348 -12652 0 NST}.. {-1609446548 -12652 0 NST}.. {-1096921748 -12600 0 NST}.. {-1072989000 -12600 0 NST}.. {-1061670600 -9000 1 NDT}.. {-1048973400 -12600 0 NST}.. {-1030221000 -9000 1 NDT}.. {-1017523800 -12600 0 NST}.. {-998771400 -9000 1 NDT}.. {-986074200 -12600 0 NST}.. {-966717000 -9000 1 NDT}.. {-954624600 -12600 0 NST}.. {-935267400 -9000 1 NDT}.. {-922570200 -12600 0 NST}.. {-903817800 -9000 1 NDT}.. {-891120600 -12600 0 NST}.. {-872368200 -9000 0 NWT}.. {-769395600 -9000 1 NPT}.. {-765401400 -12600 0 NST}.. {-757369800 -12600 0 NST}.. {-746044200 -9000 1 NDT}.. {-733347000 -12600 0 NST}.. {-714594600 -9000 1 NDT}.. {-701897400 -12600 0 NST}.. {-683145000 -9000 1 NDT}.. {-67044

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Grand_Turk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7522
                                                                                                                      Entropy (8bit):3.84007813579738
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:pGStCt/cL1BRv0HY2iU7KKdFL6Aa2K4gSLf8e:pvItOx0HY2iUmUFLqU
                                                                                                                      MD5:A17723CE27EC99D1506C45AB1531085B
                                                                                                                      SHA1:A83ED7BD09514A829CC8F2EA47BA113F5DCA1090
                                                                                                                      SHA-256:560B39485CED4C2A0E85A66EB875331E5879104187D92CB7F05C2F635E34AC99
                                                                                                                      SHA-512:110D1253D6915DB046247E4FD3BA9B881146BC3896DE779215E0CC6D1DCC59958C355441955509F5D38E3A3BA166DFD0F2F277000E9E89D6551FBEA0C16974B9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Grand_Turk) {.. {-9223372036854775808 -17072 0 LMT}.. {-2524504528 -18430 0 KMT}.. {-1827687170 -18000 0 EST}.. {284014800 -18000 0 EST}.. {294217200 -14400 1 EDT}.. {309938400 -18000 0 EST}.. {325666800 -14400 1 EDT}.. {341388000 -18000 0 EST}.. {357116400 -14400 1 EDT}.. {372837600 -18000 0 EST}.. {388566000 -14400 1 EDT}.. {404892000 -18000 0 EST}.. {420015600 -14400 1 EDT}.. {436341600 -18000 0 EST}.. {452070000 -14400 1 EDT}.. {467791200 -18000 0 EST}.. {483519600 -14400 1 EDT}.. {499240800 -18000 0 EST}.. {514969200 -14400 1 EDT}.. {530690400 -18000 0 EST}.. {544604400 -14400 1 EDT}.. {562140000 -18000 0 EST}.. {576054000 -14400 1 EDT}.. {594194400 -18000 0 EST}.. {607503600 -14400 1 EDT}.. {625644000 -18000 0 EST}.. {638953200 -14400 1 EDT}.. {657093600 -18000 0 EST}.. {671007600 -14400 1 EDT}.. {688543200 -18000 0 EST}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Grenada

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):201
                                                                                                                      Entropy (8bit):4.892013473075135
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/2905Qb90ppv:MByMYbpwt290Ob90b
                                                                                                                      MD5:4B9ABEA103F55509550F8B42D88E84B7
                                                                                                                      SHA1:E3AA1BCE5E260264E74F77E59C4071B7E496AB41
                                                                                                                      SHA-256:EBED070E8E67C5F12FF6E03FE508BE90789F17C793DFE61237B4045B8222580F
                                                                                                                      SHA-512:568E375464FF264C5048CB35995945BDE1D5BCC3A108B2A4D0F8389EBF18B4C58EBB1C2122F10BA777D512504A59C7EFDF6069EABD2A5DEA3189204B7F7A6EB4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Grenada) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Guadeloupe

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):204
                                                                                                                      Entropy (8bit):4.9138787435596765
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/2905AJLr490ppv:MByMYbpwt290qJLr490b
                                                                                                                      MD5:92B091A06198E233B73DF12DFCD818D5
                                                                                                                      SHA1:C529488D09F86755E4F22CB4F0E3013C3A1B978D
                                                                                                                      SHA-256:6CB1930532831D12057FCB484C60DB64A60A4F6D8195DAFD464826923116A294
                                                                                                                      SHA-512:55EAE03CDECAC43BEDD3AA1A32C632A46808F29FF4D97A330F818544E4D10B9E9BA909D6627C38065EB7AC8E2C395FA37797F532CCFC8AB89D4698CCDE17F985
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Guadeloupe) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Guatemala

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):399
                                                                                                                      Entropy (8bit):4.513185345162455
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862906GGmdHKznC972f/uF+mP/uF+K67Jqd3/uF+eBxE/uF+DAWNv:5neQCgfS+6S+K67Yd3S+e0S+1
                                                                                                                      MD5:569CDE7CE1AB84C0F16A25E85A418334
                                                                                                                      SHA1:EADE79AB6EDD98C7FE8B10B480C5C530CA014F5C
                                                                                                                      SHA-256:14F6A98D602F3648C816B110F3A0BA375E1FFE8FA06BEEAB419DC1ABFA6EDCAF
                                                                                                                      SHA-512:AE2ACBF09EED857906811BE2984D6BF92BF2955A9FE2F9F3FFEBB6790902F5C2C870F8561CA13AD9CB7826EECA434BED7CFE7D0D2739996BACEE506D0EB730DC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Guatemala) {.. {-9223372036854775808 -21724 0 LMT}.. {-1617040676 -21600 0 CST}.. {123055200 -18000 1 CDT}.. {130914000 -21600 0 CST}.. {422344800 -18000 1 CDT}.. {433054800 -21600 0 CST}.. {669708000 -18000 1 CDT}.. {684219600 -21600 0 CST}.. {1146376800 -18000 1 CDT}.. {1159678800 -21600 0 CST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Guayaquil

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):249
                                                                                                                      Entropy (8bit):4.745656594295655
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2905xDm2OHHjGeoHv5laITicKpKV0EX/uFhfF/KVg:MB86290jmdHHLCv5FT/gOR/uFpF/Og
                                                                                                                      MD5:DF661E312C6CE279CD6829120BE33CF2
                                                                                                                      SHA1:4ACDB31E27EF9175C5452BF95F94F9BC280A237F
                                                                                                                      SHA-256:6806AA5814BDC679C6EF653C518D2699114BE71D973F49C0864F622038DC2048
                                                                                                                      SHA-512:04E7FD01F4DAD981EE8A02487F4A889015C41D07D6DCF420183D387E2188FF3239E345B5D65FB195CA485F5C7B4AD8CFEF51FFFC11EE0C91F0C88FF7B7EF17C1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Guayaquil) {.. {-9223372036854775808 -19160 0 LMT}.. {-2524502440 -18840 0 QMT}.. {-1230749160 -18000 0 -05}.. {722926800 -14400 1 -05}.. {728884800 -18000 0 -05}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Guyana

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):248
                                                                                                                      Entropy (8bit):4.673559445766137
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2905R3SDm2OHRLx5oH8ZOXFxSyZ1yV/KMMdVVFAKFZ4KVR/ON:MB86290LGmdHBnC8ZODhyV/4d/OeZ4Ke
                                                                                                                      MD5:F06C226D8D53EF8859AD91D7EBA5959C
                                                                                                                      SHA1:E0B4E6F4ADCB10F1D79FFD928E8684FFE0C0DC5F
                                                                                                                      SHA-256:4078D2E361D04A66F22F652E3810CDF7F630CF89399B47E4EC7B1D32B400FD85
                                                                                                                      SHA-512:B4385650A0C69B7BD66415CC4BB9FCA854DBB1427E9F2D6C1D8CDB8CCEF9ECBD699C66A83A9AC289DABC5CDBB0A2B044E4097E9A2977AE1802B3BF6E2BB518CF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Guyana) {.. {-9223372036854775808 -13959 0 LMT}.. {-1843589241 -14400 0 -04}.. {-1730577600 -13500 0 -0345}.. {176096700 -10800 0 -03}.. {701841600 -14400 0 -04}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Halifax

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):11124
                                                                                                                      Entropy (8bit):3.8106487461849885
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:YpQamC9XD81iWQSufutTLBCN8RWnWQ7Z/xVpmtBwXiCDLxcGMe++wzlrfFj10Kvn:2kXCvNc/1/CC
                                                                                                                      MD5:6FB9E47841FF397CE36A36C8280E2089
                                                                                                                      SHA1:DA210300DC3D94FC3D8BA0A4531341BCA5C5936C
                                                                                                                      SHA-256:01E11C7B07925D05E9E1876C310A2B87E0E80EF115D062225212E472B7A964F1
                                                                                                                      SHA-512:F61B5A8A7532BBD54A4976DF17A1C6CF51BCC6DC396482FBE169C3081AF27B6CA863F0CDE3E483C59F5A5BD3365592F6984A97173C736B41D3CEEDAD4263A4E5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Halifax) {.. {-9223372036854775808 -15264 0 LMT}.. {-2131645536 -14400 0 AST}.. {-1696276800 -10800 1 ADT}.. {-1680469200 -14400 0 AST}.. {-1640980800 -14400 0 AST}.. {-1632074400 -10800 1 ADT}.. {-1615143600 -14400 0 AST}.. {-1609444800 -14400 0 AST}.. {-1566763200 -10800 1 ADT}.. {-1557090000 -14400 0 AST}.. {-1535486400 -10800 1 ADT}.. {-1524949200 -14400 0 AST}.. {-1504468800 -10800 1 ADT}.. {-1493413200 -14400 0 AST}.. {-1472414400 -10800 1 ADT}.. {-1461963600 -14400 0 AST}.. {-1440964800 -10800 1 ADT}.. {-1429390800 -14400 0 AST}.. {-1409515200 -10800 1 ADT}.. {-1396731600 -14400 0 AST}.. {-1376856000 -10800 1 ADT}.. {-1366491600 -14400 0 AST}.. {-1346616000 -10800 1 ADT}.. {-1333832400 -14400 0 AST}.. {-1313956800 -10800 1 ADT}.. {-1303678800 -14400 0 AST}.. {-1282507200 -10800 1 ADT}.. {-1272661200 -14400 0 AST}.. {-1251057600

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Havana

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8729
                                                                                                                      Entropy (8bit):3.8227313494100867
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:BEsWduCtQA/gF6Y3Umjm67yLb5RCzhV28I:BBWACb/gF6Y3UmjBy7
                                                                                                                      MD5:564980AECB32F5778422EA15E8956879
                                                                                                                      SHA1:545209C95043721C1839CCE5FEFD1A6F2DE3FE5F
                                                                                                                      SHA-256:96B62BFBF0C05CF970245597C691F89EBF631175796459642A85287F131D0215
                                                                                                                      SHA-512:25FE5DAA55E3466EAE1CDC73918F189403C3360D4E82D72D745FA04A374DE04F479AA9811D6154FC70CC8EA620F18035EA6A3074116806D4405936FA017CE8E6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Havana) {.. {-9223372036854775808 -19768 0 LMT}.. {-2524501832 -19776 0 HMT}.. {-1402813824 -18000 0 CST}.. {-1311534000 -14400 1 CDT}.. {-1300996800 -18000 0 CST}.. {-933534000 -14400 1 CDT}.. {-925675200 -18000 0 CST}.. {-902084400 -14400 1 CDT}.. {-893620800 -18000 0 CST}.. {-870030000 -14400 1 CDT}.. {-862171200 -18000 0 CST}.. {-775681200 -14400 1 CDT}.. {-767822400 -18000 0 CST}.. {-744231600 -14400 1 CDT}.. {-736372800 -18000 0 CST}.. {-144702000 -14400 1 CDT}.. {-134251200 -18000 0 CST}.. {-113425200 -14400 1 CDT}.. {-102542400 -18000 0 CST}.. {-86295600 -14400 1 CDT}.. {-72907200 -18000 0 CST}.. {-54154800 -14400 1 CDT}.. {-41457600 -18000 0 CST}.. {-21495600 -14400 1 CDT}.. {-5774400 -18000 0 CST}.. {9954000 -14400 1 CDT}.. {25675200 -18000 0 CST}.. {41403600 -14400 1 CDT}.. {57729600 -18000 0 CST}.. {73458000 -14400 1 CD

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Hermosillo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):616
                                                                                                                      Entropy (8bit):4.351214377567366
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86290e2mdH5NCtXwl3UXmMMmxL+voudQCvX70qKOV9kYNv:5Ie5k9WUQwuz/Vyu
                                                                                                                      MD5:E35A6C6E9DCF0CA34BFA2993CE445D6C
                                                                                                                      SHA1:4FF9C7EDBC73B1AE0815661571B7199379AF479C
                                                                                                                      SHA-256:C0A87DC3A474D25083F0CEA0C323D8E780D937453CAD23C98AF367D81AC2CA2D
                                                                                                                      SHA-512:56A728ABCD3EA91D2492E1331B3F76F31EF5675BCD95A692F9D94F91518B72569FD8DF1BB0515668E8A9BE0347018B391C65761D316903CA27C59883BBE0DE80
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Hermosillo) {.. {-9223372036854775808 -26632 0 LMT}.. {-1514739600 -25200 0 MST}.. {-1343066400 -21600 0 CST}.. {-1234807200 -25200 0 MST}.. {-1220292000 -21600 1 MDT}.. {-1207159200 -25200 0 MST}.. {-1191344400 -21600 0 CST}.. {-873828000 -25200 0 MST}.. {-661539600 -28800 0 PST}.. {28800 -25200 0 MST}.. {828867600 -21600 1 MDT}.. {846403200 -25200 0 MST}.. {860317200 -21600 1 MDT}.. {877852800 -25200 0 MST}.. {891766800 -21600 1 MDT}.. {909302400 -25200 0 MST}.. {915174000 -25200 0 MST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Indiana\Indianapolis

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7230
                                                                                                                      Entropy (8bit):3.882344472808608
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:nys0KHK1BRP0HY2iU7KKdFL6Aa2K4gSLf8e:nyBKHkN0HY2iUmUFLqU
                                                                                                                      MD5:7824B3F2D20F16A9DCC8E0F7DC45C1B8
                                                                                                                      SHA1:77014A0502DA1342EFA41B64C5613839B627354B
                                                                                                                      SHA-256:4B114545167326F066AB3A798180896B43AC6FDC3B80D32BCC917B5A4A2359EB
                                                                                                                      SHA-512:03F6A18C03E79E9177D16CD7AB75AC117197638370FA675BC2854A5A563021F865F3F0672B237B83098787AB9D419AC33D67F28324B1E25AD8560B5838F70807
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Indiana/Indianapolis) {.. {-9223372036854775808 -20678 0 LMT}.. {-2717647200 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-1577901600 -21600 0 CST}.. {-900259200 -18000 1 CDT}.. {-891795600 -21600 0 CST}.. {-883591200 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-757360800 -21600 0 CST}.. {-747244800 -18000 1 CDT}.. {-733942800 -21600 0 CST}.. {-715795200 -18000 1 CDT}.. {-702493200 -21600 0 CST}.. {-684345600 -18000 1 CDT}.. {-671043600 -21600 0 CST}.. {-652896000 -18000 1 CDT}.. {-639594000 -21600 0 CST}.. {-620841600 -18000 1 CDT}.. {-608144400 -21600 0 CST}.. {-589392000 -18000 1 CDT}.. {-576090000 -21600 0 CST}.. {-557942400 -18000 1 CDT}.. {-544640400 -21600 0 CST}.. {-526492800 -18000 1

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Indiana\Knox

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8755
                                                                                                                      Entropy (8bit):3.8394539560522585
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:+q2KeNrdJ8SvAgahLi8hDlNA604qSScBgN+4ctDzIVQ/c/3hNxTh:+FKUdJ8SvPaUqbA604qSBgI7DBch
                                                                                                                      MD5:8AF080A022DA0737E94742C50EAAC62E
                                                                                                                      SHA1:704F0565B53AA8A20F70B79A7958D4D07085E07A
                                                                                                                      SHA-256:F1253F5F3F5AACD1A5E1F4636DD4E083F4B2A8BD995CF3E684CDD384641849F1
                                                                                                                      SHA-512:26AAF6D24B2E2B60451E19A514533DFAEC74F01F9B1AEB9F86690669C14130D77AE1CBFB9FC9091E1CD1FC1CBC2799BB05026DB68768C3CCB960355C18D111ED
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Indiana/Knox) {.. {-9223372036854775808 -20790 0 LMT}.. {-2717647200 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-725824800 -21600 0 CST}.. {-715795200 -18000 1 CDT}.. {-702493200 -21600 0 CST}.. {-684345600 -18000 1 CDT}.. {-671043600 -21600 0 CST}.. {-652896000 -18000 1 CDT}.. {-639594000 -21600 0 CST}.. {-620841600 -18000 1 CDT}.. {-608144400 -21600 0 CST}.. {-589392000 -18000 1 CDT}.. {-576090000 -21600 0 CST}.. {-557942400 -18000 1 CDT}.. {-544640400 -21600 0 CST}.. {-526492800 -18000 1 CDT}.. {-513190800 -21600 0 CST}.. {-495043200 -18000 1 CDT}.. {-481741200 -21600 0 CST}.. {-463593600 -18000 1 CDT}.. {-447267600 -21600 0 CST}.. {-431539200 -18000 1 CDT}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Indiana\Marengo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7273
                                                                                                                      Entropy (8bit):3.8700915866109535
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:7qvrv7+X1BRP0HY2iU7KKdFL6Aa2K4gSLf8e:7Kv7+bN0HY2iUmUFLqU
                                                                                                                      MD5:C1A10440E6CCE4C5052E2510182D9AA7
                                                                                                                      SHA1:56D4F3CCA1245D626BADA74CF3F6BAE8034BF58D
                                                                                                                      SHA-256:675162381639598E7100E90663D42780F8EE1CB62BD6DA5B948B494F98C02FE3
                                                                                                                      SHA-512:96B71472AD38ECFC589F935D9F5F1C8D42C8E942D8772FB6A77F9B9C0E2BD7A07FA61729E57EC02356121518E33797A784679F8DED2FCA3FC79F5C114783DD57
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Indiana/Marengo) {.. {-9223372036854775808 -20723 0 LMT}.. {-2717647200 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-599594400 -21600 0 CST}.. {-589392000 -18000 1 CDT}.. {-576090000 -21600 0 CST}.. {-495043200 -18000 1 CDT}.. {-481741200 -21600 0 CST}.. {-463593600 -18000 1 CDT}.. {-450291600 -21600 0 CST}.. {-431539200 -18000 1 CDT}.. {-418237200 -21600 0 CST}.. {-400089600 -18000 1 CDT}.. {-386787600 -21600 0 CST}.. {-368640000 -18000 1 CDT}.. {-355338000 -21600 0 CST}.. {-337190400 -18000 1 CDT}.. {-323888400 -21600 0 CST}.. {-305740800 -18000 1 CDT}.. {-292438800 -21600 0 CST}.. {-273686400 -18000 0 EST}.. {-31518000 -18000 0 EST}.. {-21488400 -14400 1 EDT}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Indiana\Petersburg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7611
                                                                                                                      Entropy (8bit):3.87971256165061
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:TqervJ8SUklggahyBRP0HY2iU7KKdFL6Aa2K4gSLf8e:TpvJ8SUklvaQN0HY2iUmUFLqU
                                                                                                                      MD5:A86042668CD478AFFC05D3383EDEE8FF
                                                                                                                      SHA1:6476526F94A247C0ECF3B2813F2C5A4FB93E457E
                                                                                                                      SHA-256:23B8FA75CE0A9555DFD84549723A12679FF7FC5FAA58E4B745BA3C547071FF53
                                                                                                                      SHA-512:07A5487A087108E6D6E88580865885CA6243EF04BE8263FC913F38CADB8EA016386E8BBAD39F65FD081F1A2F14316FEAF008855E9CF2019B169D9511916AFF67
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Indiana/Petersburg) {.. {-9223372036854775808 -20947 0 LMT}.. {-2717647200 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-473364000 -21600 0 CST}.. {-462996000 -18000 1 CDT}.. {-450291600 -21600 0 CST}.. {-431539200 -18000 1 CDT}.. {-418237200 -21600 0 CST}.. {-400089600 -18000 1 CDT}.. {-386787600 -21600 0 CST}.. {-368640000 -18000 1 CDT}.. {-355338000 -21600 0 CST}.. {-337190400 -18000 1 CDT}.. {-323888400 -21600 0 CST}.. {-305740800 -18000 1 CDT}.. {-292438800 -21600 0 CST}.. {-273686400 -18000 1 CDT}.. {-257965200 -21600 0 CST}.. {-242236800 -18000 1 CDT}.. {-226515600 -21600 0 CST}.. {-210787200 -18000 1 CDT}.. {-195066000 -21600 0 CST}.. {-179337600 -18000 1 CD

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Indiana\Tell_City

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7100
                                                                                                                      Entropy (8bit):3.8613085681914607
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:yqxrvJ8SUklLgzNA604qSScBgN+4ctDzIVQ/c/3hNxTh:yUvJ8SUkl8BA604qSBgI7DBch
                                                                                                                      MD5:E7FE9B7CFBC6505C446056967DEBC87B
                                                                                                                      SHA1:81ADAD89F040F62E87D2F26D1D98B3E52710F695
                                                                                                                      SHA-256:D368123DB703B55244700876906775837D408C274C5A5801D80B77EADB6D5853
                                                                                                                      SHA-512:9C0746DE18C80B548AA443D59BB9971BDC304975717C5FCDEBDE72828ACF408FA1D687F87C42E7B8D6D0284C9F792EA236BF79C815947BE773D07364B630AC99
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Indiana/Tell_City) {.. {-9223372036854775808 -20823 0 LMT}.. {-2717647200 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-757360800 -21600 0 CST}.. {-462996000 -18000 1 CDT}.. {-450291600 -21600 0 CST}.. {-431539200 -18000 1 CDT}.. {-418237200 -21600 0 CST}.. {-400089600 -18000 1 CDT}.. {-386787600 -21600 0 CST}.. {-368640000 -18000 1 CDT}.. {-355338000 -21600 0 CST}.. {-337190400 -18000 1 CDT}.. {-323888400 -21600 0 CST}.. {-305740800 -18000 1 CDT}.. {-292438800 -21600 0 CST}.. {-273686400 -18000 1 CDT}.. {-257965200 -21600 0 CST}.. {-242236800 -18000 1 CDT}.. {-226515600 -21600 0 CST}.. {-210787200 -18000 1 CDT}.. {-195066000 -21600 0 CST}.. {-179337600 -18000 0 EST

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Indiana\Vevay

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6563
                                                                                                                      Entropy (8bit):3.866646181493734
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:juqv01BRP0HY2iU7KKdFL6Aa2K4gSLf8e:CoKN0HY2iUmUFLqU
                                                                                                                      MD5:2CCFC3980C321ED8A852759C0BCCB12C
                                                                                                                      SHA1:A8BFE02E4E71B28EF8E284E808F6EDE7C231F8FF
                                                                                                                      SHA-256:0623233AA39A1A82038A56DF255ADF49E648777375B8499491C8897EBEA1CDF1
                                                                                                                      SHA-512:A4C77689BC9BF871C756D05BAC4157F0FD324D10AC7D15F3543344C6F8C7FC9218AB7ADFBCE70C8ECCDD6EC15FD7960503FC7A8223FECE6D4227BF0BB04190C7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Indiana/Vevay) {.. {-9223372036854775808 -20416 0 LMT}.. {-2717647200 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-495043200 -18000 0 EST}.. {-31518000 -18000 0 EST}.. {-21488400 -14400 1 EDT}.. {-5767200 -18000 0 EST}.. {9961200 -14400 1 EDT}.. {25682400 -18000 0 EST}.. {41410800 -14400 1 EDT}.. {57736800 -18000 0 EST}.. {73465200 -14400 1 EDT}.. {89186400 -18000 0 EST}.. {94712400 -18000 0 EST}.. {1136091600 -18000 0 EST}.. {1143961200 -14400 1 EDT}.. {1162101600 -18000 0 EST}.. {1173596400 -14400 1 EDT}.. {1194156000 -18000 0 EST}.. {1205046000 -14400 1 EDT}.. {1225605600 -18000 0 EST}.. {1236495600 -14400 1 EDT}.. {1257055200 -18000 0 EST}.. {1268550000 -144

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Indiana\Vincennes

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7226
                                                                                                                      Entropy (8bit):3.879195938909716
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:Vq8rdJ5UklpRBRP0HY2iU7KKdFL6Aa2K4gSLf8e:VbdJ5Uklp/N0HY2iUmUFLqU
                                                                                                                      MD5:56D1930F5FAE2456DEC6C9AB1B0233E1
                                                                                                                      SHA1:F6ED52EF769DF2C015C181BCFF3DC0E24497C768
                                                                                                                      SHA-256:B8452B6AA739A78AC6D03806463B03D4175639593E19FAA3CA4B0D0FB77F18C9
                                                                                                                      SHA-512:AFCFF383DB441DA9154B639A88700D0604F487A20E830146B14061E485A991AD8DC279AF8C0C2329265CF14C901207B9058157FAA1C039082EB7630916834156
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Indiana/Vincennes) {.. {-9223372036854775808 -21007 0 LMT}.. {-2717647200 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-757360800 -21600 0 CST}.. {-747244800 -18000 1 CDT}.. {-733942800 -21600 0 CST}.. {-526492800 -18000 1 CDT}.. {-513190800 -21600 0 CST}.. {-495043200 -18000 1 CDT}.. {-481741200 -21600 0 CST}.. {-462996000 -18000 1 CDT}.. {-450291600 -21600 0 CST}.. {-431539200 -18000 1 CDT}.. {-418237200 -21600 0 CST}.. {-400089600 -18000 1 CDT}.. {-386787600 -21600 0 CST}.. {-368640000 -18000 1 CDT}.. {-355338000 -21600 0 CST}.. {-337190400 -18000 1 CDT}.. {-323888400 -21600 0 CST}.. {-305740800 -18000 1 CDT}.. {-289414800 -21600 0 CST}.. {-273686400 -18000 1 CDT

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Indiana\Winamac

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7410
                                                                                                                      Entropy (8bit):3.8775722319777968
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:uq0KeKrv7c1BRP0HY2iU7KKdFL6Aa2K4gSLf8e:unKxv7yN0HY2iUmUFLqU
                                                                                                                      MD5:880526DC23E7BDB00506D7EC2A885907
                                                                                                                      SHA1:DB3B13A2A4BF80E7B71C7F0604A0A80EF070B9BA
                                                                                                                      SHA-256:4B293FDB7680C4597B8C885333719214492ECF09BD5EA342D1EC15F2BF9C8605
                                                                                                                      SHA-512:42EEDC5EA28781D62A457F4843F38D0A3FEFCAD83BA01B07CEF0FA169C6440960E04BABD272C5E9AF2F4B0DBB2A786EF9221A48F084F16752E6D0EA66C31911E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Indiana/Winamac) {.. {-9223372036854775808 -20785 0 LMT}.. {-2717647200 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-757360800 -21600 0 CST}.. {-747244800 -18000 1 CDT}.. {-733942800 -21600 0 CST}.. {-715795200 -18000 1 CDT}.. {-702493200 -21600 0 CST}.. {-684345600 -18000 1 CDT}.. {-671043600 -21600 0 CST}.. {-652896000 -18000 1 CDT}.. {-639594000 -21600 0 CST}.. {-620841600 -18000 1 CDT}.. {-608144400 -21600 0 CST}.. {-589392000 -18000 1 CDT}.. {-576090000 -21600 0 CST}.. {-557942400 -18000 1 CDT}.. {-544640400 -21600 0 CST}.. {-526492800 -18000 1 CDT}.. {-513190800 -21600 0 CST}.. {-495043200 -18000 1 CDT}.. {-481741200 -21600 0 CST}.. {-463593600 -18000 1 CDT}.

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Indianapolis

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):233
                                                                                                                      Entropy (8bit):4.7047837427916095
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y73GK7JHAIgp3GKZRN/2903GfJ4903GK8:MByMY3GK7Kp3GKnt2903GfJ4903GK8
                                                                                                                      MD5:DEE404D54FD707C4A27F464B5F19D135
                                                                                                                      SHA1:AD95D04738F6B15A93DED1DE6B5FA9F47C8E38CB
                                                                                                                      SHA-256:437DA148B94DBA4CEA402169878541DB9C3419ABAB6750D1C36625DD3053019E
                                                                                                                      SHA-512:421D6AF30F0C64EA6CB9F9DC4E7EF9E8EE5945F81A5E82A6D959D32AD69F325770DB6A07D8F52EFE7EE7F6C3AD4E1F34AA30A6B5E006C928119A54E746D6FE6B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Indiana/Indianapolis)]} {.. LoadTimeZoneFile America/Indiana/Indianapolis..}..set TZData(:America/Indianapolis) $TZData(:America/Indiana/Indianapolis)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Inuvik

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7638
                                                                                                                      Entropy (8bit):3.8629745113156004
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:/nGaLV911sF7Lv/PCewtA8CzSPyDLbrcUia:/GPlLv/PCenJzS6cy
                                                                                                                      MD5:DBF9C2CCF786A593C9D6E4F4BB37ACE9
                                                                                                                      SHA1:4D2332A530A36E6DB2802DD9FA2DAF5C0594D5EA
                                                                                                                      SHA-256:5A1F7F5EDAD0251B73C33E7B5DDEE194646E9D3992B169DC1A64D155765D472C
                                                                                                                      SHA-512:70D75371497CED3B6C731C95299CDD5F8F49C3C6EEDDF31EB05D008769D76ACFE8BFA9A2ECE45BD0BA2E279BBEF65945955791EFC04A569F5CAA13665CD2545F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Inuvik) {.. {-9223372036854775808 0 0 -00}.. {-536457600 -28800 0 PST}.. {-147888000 -21600 1 PDDT}.. {-131558400 -28800 0 PST}.. {315558000 -25200 0 MST}.. {325674000 -21600 1 MDT}.. {341395200 -25200 0 MST}.. {357123600 -21600 1 MDT}.. {372844800 -25200 0 MST}.. {388573200 -21600 1 MDT}.. {404899200 -25200 0 MST}.. {420022800 -21600 1 MDT}.. {436348800 -25200 0 MST}.. {452077200 -21600 1 MDT}.. {467798400 -25200 0 MST}.. {483526800 -21600 1 MDT}.. {499248000 -25200 0 MST}.. {514976400 -21600 1 MDT}.. {530697600 -25200 0 MST}.. {544611600 -21600 1 MDT}.. {562147200 -25200 0 MST}.. {576061200 -21600 1 MDT}.. {594201600 -25200 0 MST}.. {607510800 -21600 1 MDT}.. {625651200 -25200 0 MST}.. {638960400 -21600 1 MDT}.. {657100800 -25200 0 MST}.. {671014800 -21600 1 MDT}.. {688550400 -25200 0 MST}.. {702464400 -21600 1 MDT}.. {7200000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Iqaluit

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7671
                                                                                                                      Entropy (8bit):3.832645570123566
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:7FE5Ct/cQ1BRP0HY2iU7KKdFL6Aa2K4gSLf8e:7FEct/N0HY2iUmUFLqU
                                                                                                                      MD5:8020712BBA127EA8AB52E8F5DB14286E
                                                                                                                      SHA1:DAEBC76FE10770D3FC2B5E1C14823B2B5543BA35
                                                                                                                      SHA-256:AFC4627879F4A618F5E3BA9EA123F3212E161F4CCFD0DF46F3B6B7CD2E2C0D7E
                                                                                                                      SHA-512:2F5C63F427A5DEDD5BF2B3867BE4C13774E9276C1472BF4170BCB2DA462B848CC8088743D032765133EE138388DF4217E4FC1475B12D2C8AF657A45ED6FEDE93
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Iqaluit) {.. {-9223372036854775808 0 0 -00}.. {-865296000 -14400 0 EWT}.. {-769395600 -14400 1 EPT}.. {-765396000 -18000 0 EST}.. {-147898800 -10800 1 EDDT}.. {-131569200 -18000 0 EST}.. {325666800 -14400 1 EDT}.. {341388000 -18000 0 EST}.. {357116400 -14400 1 EDT}.. {372837600 -18000 0 EST}.. {388566000 -14400 1 EDT}.. {404892000 -18000 0 EST}.. {420015600 -14400 1 EDT}.. {436341600 -18000 0 EST}.. {452070000 -14400 1 EDT}.. {467791200 -18000 0 EST}.. {483519600 -14400 1 EDT}.. {499240800 -18000 0 EST}.. {514969200 -14400 1 EDT}.. {530690400 -18000 0 EST}.. {544604400 -14400 1 EDT}.. {562140000 -18000 0 EST}.. {576054000 -14400 1 EDT}.. {594194400 -18000 0 EST}.. {607503600 -14400 1 EDT}.. {625644000 -18000 0 EST}.. {638953200 -14400 1 EDT}.. {657093600 -18000 0 EST}.. {671007600 -14400 1 EDT}.. {688543200 -18000 0 EST}.. {7024

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Jamaica

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):847
                                                                                                                      Entropy (8bit):4.206296468996689
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5seRvZGjFS/uk1p/uue/udYR/u+zN5hi/uW9/uoUF0/u8Bb/u33RU/uMZ8/unuR3:5jUjFo1pFGzfAYFqB43RMER3
                                                                                                                      MD5:95B59E3EA2A270A34BDF98AA899203C8
                                                                                                                      SHA1:93599597797F4BAFE5C75179FB795058B1E3527D
                                                                                                                      SHA-256:4B9D5177CBA057CD53D53120A49B8A47ECCB00150018581A84851E9D5437D643
                                                                                                                      SHA-512:032BC07F9E92B756A0732AECC2DFEC4C89A58B3D6D3CA57A0F99F2AD1D51676804C7B6CE50EB3B37BB8A1EF382168AC83989D609D37C57308E29B51F1FDEFB1E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Jamaica) {.. {-9223372036854775808 -18430 0 LMT}.. {-2524503170 -18430 0 KMT}.. {-1827687170 -18000 0 EST}.. {126248400 -18000 0 EST}.. {126687600 -14400 1 EDT}.. {152085600 -18000 0 EST}.. {162370800 -14400 1 EDT}.. {183535200 -18000 0 EST}.. {199263600 -14400 1 EDT}.. {215589600 -18000 0 EST}.. {230713200 -14400 1 EDT}.. {247039200 -18000 0 EST}.. {262767600 -14400 1 EDT}.. {278488800 -18000 0 EST}.. {294217200 -14400 1 EDT}.. {309938400 -18000 0 EST}.. {325666800 -14400 1 EDT}.. {341388000 -18000 0 EST}.. {357116400 -14400 1 EDT}.. {372837600 -18000 0 EST}.. {388566000 -14400 1 EDT}.. {404892000 -18000 0 EST}.. {420015600 -14400 1 EDT}.. {436341600 -18000 0 EST}.. {441781200 -18000 0 EST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Jujuy

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):211
                                                                                                                      Entropy (8bit):4.94277888588308
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7/MI6HAIgp/MIwRN/290pPGe90/MIz:MByMY/Myp/M9Rt290h390/M4
                                                                                                                      MD5:E020D4F9CB1AF91D373CD9F3C2247428
                                                                                                                      SHA1:0ADF2E9F8D9F8641E066764BA1BAF068F0332CE9
                                                                                                                      SHA-256:4A0495852CD4D0652B82FB57024645916DB8F192EEF9A82AFD580D87F4D496ED
                                                                                                                      SHA-512:03190F0E7EC35A358670B1617CB5C17EA3DD41195B2C4B748479D80ABAB4DB395293F688D94B87662D0469F6C5885CF7E7C9A995493A191905753F740DF659E1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Argentina/Jujuy)]} {.. LoadTimeZoneFile America/Argentina/Jujuy..}..set TZData(:America/Jujuy) $TZData(:America/Argentina/Jujuy)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Juneau

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8682
                                                                                                                      Entropy (8bit):3.9620285142779728
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:/fCG0rHPC9+j1giaJCUbtp0nFI+g/iexpCVaBnNnt61nctE1:/aG0rq9DiaJCUbPI+D/iMpCIBSuk
                                                                                                                      MD5:8160A0D27EECEF40F6F34A06D5D02BE6
                                                                                                                      SHA1:7CAA64F83BAA0C23EE05A72BB1079AA552FA2F3D
                                                                                                                      SHA-256:5FBE6A1FA2D3DFE23C7378E425F32BEBCA44735DA25EA075A7E5CE24BFD4049D
                                                                                                                      SHA-512:59B8D04595007B45E582E6D17734999074CA67A93F5DF742EFE1EB78DB8ABD359D4C3B213B678C6A46040A13AAB709A994B6A532D720D3EF6FCA2730ABF4885E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Juneau) {.. {-9223372036854775808 54139 0 LMT}.. {-3225223727 -32261 0 LMT}.. {-2188954939 -28800 0 PST}.. {-883584000 -28800 0 PST}.. {-880207200 -25200 1 PWT}.. {-769395600 -25200 1 PPT}.. {-765385200 -28800 0 PST}.. {-757353600 -28800 0 PST}.. {-31507200 -28800 0 PST}.. {-21477600 -25200 1 PDT}.. {-5756400 -28800 0 PST}.. {9972000 -25200 1 PDT}.. {25693200 -28800 0 PST}.. {41421600 -25200 1 PDT}.. {57747600 -28800 0 PST}.. {73476000 -25200 1 PDT}.. {89197200 -28800 0 PST}.. {104925600 -25200 1 PDT}.. {120646800 -28800 0 PST}.. {126698400 -25200 1 PDT}.. {152096400 -28800 0 PST}.. {162381600 -25200 1 PDT}.. {183546000 -28800 0 PST}.. {199274400 -25200 1 PDT}.. {215600400 -28800 0 PST}.. {230724000 -25200 1 PDT}.. {247050000 -28800 0 PST}.. {262778400 -25200 1 PDT}.. {278499600 -28800 0 PST}.. {294228000 -25200 1 PDT}.. {309949

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Kentucky\Louisville

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9553
                                                                                                                      Entropy (8bit):3.853353361425414
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:tfTwKdrdJ9+StCt/cL1BRP0HY2iU7KKdFL6Aa2K4gSLf8e:tfUKNdJ9+SItON0HY2iUmUFLqU
                                                                                                                      MD5:D721B38F1FFF1A6F5C02B72ECC06CDE5
                                                                                                                      SHA1:E70D99A9FC1DA9F30389129EE00FE20FA79D66A8
                                                                                                                      SHA-256:9EB1F2B19C44A55D6CC9FD1465BAF6535856941C067831E4B5E0494665014BF5
                                                                                                                      SHA-512:3C82A8C27026228F359FD96A4306F1BC337DE655FD1BA02C4399162E44DE59AD58CE569DA5AEA36E586C3BDEE7256420AABB84B44D277E244FE5AD771B4BE307
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Kentucky/Louisville) {.. {-9223372036854775808 -20582 0 LMT}.. {-2717647200 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-1546279200 -21600 0 CST}.. {-1535904000 -18000 1 CDT}.. {-1525280400 -21600 0 CST}.. {-905097600 -18000 1 CDT}.. {-891795600 -21600 0 CST}.. {-883591200 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-757360800 -21600 0 CST}.. {-747251940 -18000 1 CDT}.. {-744224400 -21600 0 CST}.. {-620841600 -18000 1 CDT}.. {-608144400 -21600 0 CST}.. {-589392000 -18000 1 CDT}.. {-576090000 -21600 0 CST}.. {-557942400 -18000 1 CDT}.. {-544640400 -21600 0 CST}.. {-526492800 -18000 1 CDT}.. {-513190800 -21600 0 CST}.. {-495043200 -18000 1 CDT}.. {-481741200 -21600 0 CST}.. {-463593600 -18000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Kentucky\Monticello

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8558
                                                                                                                      Entropy (8bit):3.869494272122571
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:4F8qMahLi8hR1BRP0HY2iU7KKdFL6Aa2K4gSLf8e:4F8HaUqJN0HY2iUmUFLqU
                                                                                                                      MD5:AED6497590DA305D16AC034979C8B1E9
                                                                                                                      SHA1:AD6F1788310A3A5A761873FEF1A32416B7DBCA89
                                                                                                                      SHA-256:1C6C7FB0AE628EB6BB305B51859C4E5594A6B0876C386ED9C1C3355E7CB37AE1
                                                                                                                      SHA-512:58D960AB5F2D9F8E4DD0171E5E36CE2E072F74A7AFDBC43F9340BBCF0CDC0D060AC895F9FCF551F4CC7EB6DBF2E9835C8C3D58E87CA4FBC98C720F51C462EDCD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Kentucky/Monticello) {.. {-9223372036854775808 -20364 0 LMT}.. {-2717647200 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-757360800 -21600 0 CST}.. {-63136800 -21600 0 CST}.. {-52934400 -18000 1 CDT}.. {-37213200 -21600 0 CST}.. {-21484800 -18000 1 CDT}.. {-5763600 -21600 0 CST}.. {9964800 -18000 1 CDT}.. {25686000 -21600 0 CST}.. {41414400 -18000 1 CDT}.. {57740400 -21600 0 CST}.. {73468800 -18000 1 CDT}.. {89190000 -21600 0 CST}.. {104918400 -18000 1 CDT}.. {120639600 -21600 0 CST}.. {126691200 -18000 1 CDT}.. {152089200 -21600 0 CST}.. {162374400 -18000 1 CDT}.. {183538800 -21600 0 CST}.. {199267200 -18000 1 CDT}.. {215593200 -21600 0 CST}.. {230716800 -18000

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Knox_IN

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):204
                                                                                                                      Entropy (8bit):4.8670778268802195
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y73GKaHAIgp3GKIN/2901iZ903GKT:MByMY3GKDp3GKIt290Q903GKT
                                                                                                                      MD5:50434016470AC512A8E2BEBA0BCEBC15
                                                                                                                      SHA1:F3541F6EE201FA33C66042F5C11A26434D37D42C
                                                                                                                      SHA-256:D66E77E6FF789D4D6CA13CDB204B977E1FE64BE9AFEE7B41F2C17ED8217FD025
                                                                                                                      SHA-512:EB1FF97050B7E067DCB68FF7C8F912C8A0C02144BB8E2EAA58C1136C6CC4A2B98C897DD23BB1E9C82D9AF6D028EE45227F97676CB34B6B830CDF5D707B990E57
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Indiana/Knox)]} {.. LoadTimeZoneFile America/Indiana/Knox..}..set TZData(:America/Knox_IN) $TZData(:America/Indiana/Knox)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Kralendijk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):204
                                                                                                                      Entropy (8bit):4.9362668992592456
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/2901Qv090ppv:MByMYbpwt290ev090b
                                                                                                                      MD5:FE9CEC6C50DF451B599B98AE8A434FF7
                                                                                                                      SHA1:60F997825766662B2C5415FBE4D65CEA6D326537
                                                                                                                      SHA-256:5AF9B28C48661FDC81762D249B716BA077F0A40ECF431D34A893BB7EABA57965
                                                                                                                      SHA-512:1311605021871BAFAF321AA48B352262C6BA42149101CCD4FDD4000435B2584AC564E0F76D481BB181767C010FD922BAA4E4EBB401AC2FF27B21874D89332872
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Kralendijk) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\La_Paz

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):218
                                                                                                                      Entropy (8bit):4.902526230255025
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/290WDm2OHphvoHvKZdcyFXmBVVON:MB86290ymdHphvCvKfcyy/ON
                                                                                                                      MD5:3BC04900A19D0152A31B353C6715A97B
                                                                                                                      SHA1:58A6D49E0B6FA00CBEAFD695D604D740AD63C54E
                                                                                                                      SHA-256:5488D98AA3C29D710C6AF92C42ACE36550A5BFF78C155CDF8769EE31F71CF033
                                                                                                                      SHA-512:65302935090F98A81443A1E1158911F57C3A1564564CD401CA72DDBF66D967DB564EF5AE8A4083D83984B9EF55AB53159010EFE2DB5D7A723F7EA61A1795322D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/La_Paz) {.. {-9223372036854775808 -16356 0 LMT}.. {-2524505244 -16356 0 CMT}.. {-1205954844 -12756 1 BST}.. {-1192307244 -14400 0 -04}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Lima

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):460
                                                                                                                      Entropy (8bit):4.2444415392593875
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86290B2mdH4VCvvCOt/Os/OCQXR/uFfC3/O3e/uFbs/OX/OqF/O+8/OOS1F5/D:59etvqOVLOR/uGD/utsg38xSP5r
                                                                                                                      MD5:5F41E848D2DDE91261F45CB577B1B0A9
                                                                                                                      SHA1:DF284499CF57479ADE5E1D3DC01D6DCCF6AFDFE1
                                                                                                                      SHA-256:6E01002F264DF9A6FC247F95399F4F42DCCC7AB890B0C259DE93DCC97DEC89CE
                                                                                                                      SHA-512:2F5472F812734E892182632B8A34A4AD7B342541D0C3F1107BD95FFBE25D9351A0CDF5F58F35A1F37365DDF8A8A5D883C89C3CC40A9AD09D54CA152DC6BE1A09
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Lima) {.. {-9223372036854775808 -18492 0 LMT}.. {-2524503108 -18516 0 LMT}.. {-1938538284 -14400 0 -05}.. {-1002052800 -18000 0 -05}.. {-986756400 -14400 1 -05}.. {-971035200 -18000 0 -05}.. {-955306800 -14400 1 -05}.. {-939585600 -18000 0 -05}.. {512712000 -18000 0 -05}.. {544248000 -18000 0 -05}.. {638942400 -18000 0 -05}.. {765172800 -18000 0 -05}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Los_Angeles

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9726
                                                                                                                      Entropy (8bit):3.8515163794355916
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:/uX68CWSgG0U9bFzN6IkWq/WHQt/RY4yP:/uX68CWSgGVbGBt/M
                                                                                                                      MD5:4D4F198238E4E76753411896239041C3
                                                                                                                      SHA1:AD41D199DF0B794B5AB7F165C8A141787FAAC9A9
                                                                                                                      SHA-256:DA3F7572F04E6AE78B8F044761E6F48D37EE259A9C1FE15A67072CC64A299FDB
                                                                                                                      SHA-512:BA39D174B73B1D4B09E8AC07291BED0B9658A4330AE50881080F0E37C35BD8A6F55C49F1D649ED1F19CE47002435D8724048759DFC813BF9C2E9B06B581486FF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Los_Angeles) {.. {-9223372036854775808 -28378 0 LMT}.. {-2717640000 -28800 0 PST}.. {-1633269600 -25200 1 PDT}.. {-1615129200 -28800 0 PST}.. {-1601820000 -25200 1 PDT}.. {-1583679600 -28800 0 PST}.. {-880207200 -25200 1 PWT}.. {-769395600 -25200 1 PPT}.. {-765385200 -28800 0 PST}.. {-757353600 -28800 0 PST}.. {-687967140 -25200 1 PDT}.. {-662655600 -28800 0 PST}.. {-620838000 -25200 1 PDT}.. {-608137200 -28800 0 PST}.. {-589388400 -25200 1 PDT}.. {-576082800 -28800 0 PST}.. {-557938800 -25200 1 PDT}.. {-544633200 -28800 0 PST}.. {-526489200 -25200 1 PDT}.. {-513183600 -28800 0 PST}.. {-495039600 -25200 1 PDT}.. {-481734000 -28800 0 PST}.. {-463590000 -25200 1 PDT}.. {-450284400 -28800 0 PST}.. {-431535600 -25200 1 PDT}.. {-418230000 -28800 0 PST}.. {-400086000 -25200 1 PDT}.. {-386780400 -28800 0 PST}.. {-368636400 -25200 1 PDT}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Louisville

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):228
                                                                                                                      Entropy (8bit):4.911677030377383
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y71PiKp4o2HAIgp1PiKp4BvN/290hp4901PiKp44v:MByMYPyApPydt290P490Pyi
                                                                                                                      MD5:ACE87B25FE5604C83127A9F148A34C8C
                                                                                                                      SHA1:25C8D85B4740C53F40421D0DADCA95225EAB7829
                                                                                                                      SHA-256:F85C1253F4C1D3E85757D3DEA4FD3C61F1AA7BE6BAAE8CB8579278412905ACB2
                                                                                                                      SHA-512:AC0662B19F336474B146E06778E1FB43B941ABC8FD51BDB31B2640C94CCDFBE7659960EF4FD18329AFA7AD11316FC08D3CF33BB27931EA70AA7218667A8D0737
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Kentucky/Louisville)]} {.. LoadTimeZoneFile America/Kentucky/Louisville..}..set TZData(:America/Louisville) $TZData(:America/Kentucky/Louisville)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Lower_Princes

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):207
                                                                                                                      Entropy (8bit):4.900350318979456
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290h48h490ppv:MByMYbpwt290/490b
                                                                                                                      MD5:83CE86174ADB5F276AABD26FE132BB55
                                                                                                                      SHA1:925E3F4A5DB1A2C33B3A537C8DBC9CFE309FA340
                                                                                                                      SHA-256:1E786229B84CE86DB6316B24C85F7CF4CFE66011F973053AD0E108BFCC9A9DE2
                                                                                                                      SHA-512:BA2AC5571D772B577735BC8E43FF8023228BC61A974DCCE0EAE20EC9B11FC757E56CABDAE00933A99834108114E598B7EC149BB017EB80BE18301A655F341A36
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Lower_Princes) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Maceio

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1539
                                                                                                                      Entropy (8bit):3.7453889877550512
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5QChlvEw6kSSx5H4a8tf3fkuoLdNYVZDNR8nd:OIlvEwJSSxdF8tfMuoLdNYVZJR8nd
                                                                                                                      MD5:EB0EDF4E075E3CF9F8EDF2B689C2FE54
                                                                                                                      SHA1:9713D7E8AA0E7164824657D00DE6C49483D2BD19
                                                                                                                      SHA-256:F65C5957D434A87324AAD35991E7666E426A20C40432540D9A3CB1EEE9141761
                                                                                                                      SHA-512:0A0D1E4E0BD7D854E8F139E6F7A9BBC66422B73F7A6C2E1F1B6D2CA400B24B3D220AB519B6AEAA743443E9A4B748709CDF2C276BF52C5382669B12734A469125
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Maceio) {.. {-9223372036854775808 -8572 0 LMT}.. {-1767217028 -10800 0 -03}.. {-1206957600 -7200 1 -03}.. {-1191362400 -10800 0 -03}.. {-1175374800 -7200 1 -03}.. {-1159826400 -10800 0 -03}.. {-633819600 -7200 1 -03}.. {-622069200 -10800 0 -03}.. {-602283600 -7200 1 -03}.. {-591832800 -10800 0 -03}.. {-570747600 -7200 1 -03}.. {-560210400 -10800 0 -03}.. {-539125200 -7200 1 -03}.. {-531352800 -10800 0 -03}.. {-191365200 -7200 1 -03}.. {-184197600 -10800 0 -03}.. {-155163600 -7200 1 -03}.. {-150069600 -10800 0 -03}.. {-128898000 -7200 1 -03}.. {-121125600 -10800 0 -03}.. {-99954000 -7200 1 -03}.. {-89589600 -10800 0 -03}.. {-68418000 -7200 1 -03}.. {-57967200 -10800 0 -03}.. {499748400 -7200 1 -03}.. {511236000 -10800 0 -03}.. {530593200 -7200 1 -03}.. {540266400 -10800 0 -03}.. {562129200 -7200 1 -03}.. {571197600 -10800 0 -03}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Managua

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):611
                                                                                                                      Entropy (8bit):4.303621439025158
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86290znTjmdHOYCvprv5EU/dLAyW+/uF+kX8/uF+RZ//dAWcP/QAWcx/uF+rbE:5GnPeOdvhxD1pLS+S8S+RVqzo4xS+3SJ
                                                                                                                      MD5:FB09D1F064C30F9E223FA119A8875098
                                                                                                                      SHA1:C66173FEB21761AEA649301D77FBB77ACF3A6FB1
                                                                                                                      SHA-256:F0F0CCE8DE92D848A62B56EF48E01D763B80153C077230C435D464CF1733BA38
                                                                                                                      SHA-512:BC3D841FF48FD0DE7C9ABF5DAE3A42C876BD4D7FBD6684B4513EC7ECC92D938A7133BCC873AD46E453DD1863E843E5C7DD14FFDB41B593E90BEB5CD8F7E66202
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Managua) {.. {-9223372036854775808 -20708 0 LMT}.. {-2524500892 -20712 0 MMT}.. {-1121105688 -21600 0 CST}.. {105084000 -18000 0 EST}.. {161758800 -21600 0 CST}.. {290584800 -18000 1 CDT}.. {299134800 -21600 0 CST}.. {322034400 -18000 1 CDT}.. {330584400 -21600 0 CST}.. {694260000 -18000 0 EST}.. {717310800 -21600 0 CST}.. {725868000 -18000 0 EST}.. {852094800 -21600 0 CST}.. {1113112800 -18000 1 CDT}.. {1128229200 -21600 0 CST}.. {1146384000 -18000 1 CDT}.. {1159682400 -21600 0 CST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Manaus

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1166
                                                                                                                      Entropy (8bit):3.7842934576858482
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5GnqeKwnSRs//SFs/pS9/MHSW/WOSr/nSso/TSL/SSU/iS5X/LcSi/xScd/ZlSQz:5mSeSFESoSQSrSsCSeSPS1cSQSQlSsSQ
                                                                                                                      MD5:E42719A9B0165490BB9E0E899EFB3643
                                                                                                                      SHA1:2991D7EC31F47E32D2C8DB89A0F87D814122DD1B
                                                                                                                      SHA-256:DC54E6D4FE14458B0462FA0E15B960FD4290930ADC0D13453BF49B436ED8C143
                                                                                                                      SHA-512:F75024E27A2D679A667EA70EC948F983C7B823FDA5962DD88697D61147A6C2B1499E58BA8B01170653C4D025900491AE8E21925500DE39EACBAF883F7E62D874
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Manaus) {.. {-9223372036854775808 -14404 0 LMT}.. {-1767211196 -14400 0 -04}.. {-1206954000 -10800 1 -04}.. {-1191358800 -14400 0 -04}.. {-1175371200 -10800 1 -04}.. {-1159822800 -14400 0 -04}.. {-633816000 -10800 1 -04}.. {-622065600 -14400 0 -04}.. {-602280000 -10800 1 -04}.. {-591829200 -14400 0 -04}.. {-570744000 -10800 1 -04}.. {-560206800 -14400 0 -04}.. {-539121600 -10800 1 -04}.. {-531349200 -14400 0 -04}.. {-191361600 -10800 1 -04}.. {-184194000 -14400 0 -04}.. {-155160000 -10800 1 -04}.. {-150066000 -14400 0 -04}.. {-128894400 -10800 1 -04}.. {-121122000 -14400 0 -04}.. {-99950400 -10800 1 -04}.. {-89586000 -14400 0 -04}.. {-68414400 -10800 1 -04}.. {-57963600 -14400 0 -04}.. {499752000 -10800 1 -04}.. {511239600 -14400 0 -04}.. {530596800 -10800 1 -04}.. {540270000 -14400 0 -04}.. {562132800 -10800 1 -04}.. {571201200 -1

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Marigot

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):201
                                                                                                                      Entropy (8bit):4.900738604616686
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290zzJ/90ppv:MByMYbpwt290zzN90b
                                                                                                                      MD5:8C60DE8E522FE5D51EACD643FD8EA132
                                                                                                                      SHA1:2E09A71DF340ECA6F7AEBD978070D56A627049EC
                                                                                                                      SHA-256:5C26D7CE93F91CC4F5ED87E9388B1B180EF9D84681044FD23CC01A628A1284CA
                                                                                                                      SHA-512:D2D522D041AFA638542F6FF00F5F40325E3F117C5035BA71F676B4956B054542C67A753055D17E2E2EEA925F13EACC0969D01EC18E40D274D8EA408F92777EA2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Marigot) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Martinique

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):251
                                                                                                                      Entropy (8bit):4.849143012086458
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/290zlEDm2OHfueoHv9dMIqR5lRfT/VVFUFkmR/lAov:MB86290zimdHfnCv9dMIqR5lVb/uFkmD
                                                                                                                      MD5:CFE10EE56115D3A5F44E047B3661D8ED
                                                                                                                      SHA1:03F598CFC9AEDE2F588339B439B2361F2EBDE34F
                                                                                                                      SHA-256:D411FB42798E93B106275EC0E054F8F3C4E9FB49431C656448739C7F20C46EDE
                                                                                                                      SHA-512:25D6760FDF2F1B0DD91A41D29BDB7048FAE27A03F7B9D9C955ECF4C32E8402836D007B39FE62B93E7BEA017681A0C8AFC1C4CAFD823B0A6C41EDAF09DDF3435D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Martinique) {.. {-9223372036854775808 -14660 0 LMT}.. {-2524506940 -14660 0 FFMT}.. {-1851537340 -14400 0 AST}.. {323841600 -10800 1 ADT}.. {338958000 -14400 0 AST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Matamoros

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6745
                                                                                                                      Entropy (8bit):3.8432520851585372
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:aD5NA604qSScBgN+4ctDzIVQ/c/3hNxTh:aDbA604qSBgI7DBch
                                                                                                                      MD5:FC4A24AE95BA6E36285F09AB2FCEE56F
                                                                                                                      SHA1:54ED1CD69247064B5EC775E907790D19E93A4626
                                                                                                                      SHA-256:59C658CEA1BF5392A8F16295A09A74230EFB52EF7BF783E493E9A9C1799036F2
                                                                                                                      SHA-512:2E8E65C487090DC8EE90F8575360A00E74C134CE34E83D4296E2CC32B773F9F0151F4049BFD1BEEAFE7B441E8684AF9FB50287E42FBD5182E4051D1FC39932E3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Matamoros) {.. {-9223372036854775808 -23400 0 LMT}.. {-1514743200 -21600 0 CST}.. {568015200 -21600 0 CST}.. {576057600 -18000 1 CDT}.. {594198000 -21600 0 CST}.. {599637600 -21600 0 CST}.. {828864000 -18000 1 CDT}.. {846399600 -21600 0 CST}.. {860313600 -18000 1 CDT}.. {877849200 -21600 0 CST}.. {891763200 -18000 1 CDT}.. {909298800 -21600 0 CST}.. {923212800 -18000 1 CDT}.. {941353200 -21600 0 CST}.. {954662400 -18000 1 CDT}.. {972802800 -21600 0 CST}.. {989136000 -18000 1 CDT}.. {1001833200 -21600 0 CST}.. {1018166400 -18000 1 CDT}.. {1035702000 -21600 0 CST}.. {1049616000 -18000 1 CDT}.. {1067151600 -21600 0 CST}.. {1081065600 -18000 1 CDT}.. {1099206000 -21600 0 CST}.. {1112515200 -18000 1 CDT}.. {1130655600 -21600 0 CST}.. {1143964800 -18000 1 CDT}.. {1162105200 -21600 0 CST}.. {1175414400 -18000 1 CDT}.. {1193554800 -21600 0

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Mazatlan

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2067
                                                                                                                      Entropy (8bit):3.990817847620547
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5GtXed9WUQwuz/V/NF01YmM/parZ375+XiB+:5sNUIdFS1YrpaV5+yB+
                                                                                                                      MD5:43467194416FCF6F0D67AD2456D78646
                                                                                                                      SHA1:1FDF02EF7354D9DB71F545D32AE52D018E99D801
                                                                                                                      SHA-256:8140084EA9D6A478C34A114D9E216DC05450ECBE4809B2CDA194B40452E2AA0F
                                                                                                                      SHA-512:EB5CD3E95779391F096EE9A7B16920C6C9E8A90F38C7A3CBE2B0E123D088A127C5BBE21F5883DCDAD4FBB2410ED052EDE3D4F1E260483D97FEBB7BA7022874C1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Mazatlan) {.. {-9223372036854775808 -25540 0 LMT}.. {-1514739600 -25200 0 MST}.. {-1343066400 -21600 0 CST}.. {-1234807200 -25200 0 MST}.. {-1220292000 -21600 1 MDT}.. {-1207159200 -25200 0 MST}.. {-1191344400 -21600 0 CST}.. {-873828000 -25200 0 MST}.. {-661539600 -28800 0 PST}.. {28800 -25200 0 MST}.. {828867600 -21600 1 MDT}.. {846403200 -25200 0 MST}.. {860317200 -21600 1 MDT}.. {877852800 -25200 0 MST}.. {891766800 -21600 1 MDT}.. {909302400 -25200 0 MST}.. {923216400 -21600 1 MDT}.. {941356800 -25200 0 MST}.. {954666000 -21600 1 MDT}.. {972806400 -25200 0 MST}.. {989139600 -21600 1 MDT}.. {1001836800 -25200 0 MST}.. {1018170000 -21600 1 MDT}.. {1035705600 -25200 0 MST}.. {1049619600 -21600 1 MDT}.. {1067155200 -25200 0 MST}.. {1081069200 -21600 1 MDT}.. {1099209600 -25200 0 MST}.. {1112518800 -21600 1 MDT}.. {1130659200 -2520

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Mendoza

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):219
                                                                                                                      Entropy (8bit):4.812188311941308
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7/MeHAIgp/MSvYovN/290zpH+90/MX:MByMY/M/p/MSA6t290zpe90/MX
                                                                                                                      MD5:2A3BFEEFBB684FB3B420A6B53B588BDC
                                                                                                                      SHA1:CC5C0BB90D847CCBB45688A8DA460AD575D64617
                                                                                                                      SHA-256:D6B308A1619F2DE450DACBFEF0E11B237DF7375A80C90899DD02B827688CB4B8
                                                                                                                      SHA-512:4A35C80D3454E039383FFEB06DC84933B3201BE2487C42A448AF3DA5ABAEEB9882263C011CDD3194E121EC1C31FC80120BF7829F280A79996E376CFA828EE215
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Argentina/Mendoza)]} {.. LoadTimeZoneFile America/Argentina/Mendoza..}..set TZData(:America/Mendoza) $TZData(:America/Argentina/Mendoza)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Menominee

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8410
                                                                                                                      Entropy (8bit):3.8311875423131534
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:6quShLi8hbZlNA604qSScBgN+4ctDzIVQ/c/3hNxTh:6lSUqtfA604qSBgI7DBch
                                                                                                                      MD5:C74D31382279219F805D2B138C58FBF7
                                                                                                                      SHA1:06E2FED0A3BDF62F3D390A4054B6A2D7C1863DD3
                                                                                                                      SHA-256:B0863F8B66F0848020651B69E7997307D62209259AE653FDC1A0FAFC8E793068
                                                                                                                      SHA-512:7B42CBDC119651E2B2EE8B8F934801D3147A8B72EE060A0D0EA1C0C12CA9ABD03F1A102A85BF8E7424B45620151CE107D16A9173F4AA7597EDB3109840C1B2AE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Menominee) {.. {-9223372036854775808 -21027 0 LMT}.. {-2659759773 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-757360800 -21600 0 CST}.. {-747244800 -18000 1 CDT}.. {-733942800 -21600 0 CST}.. {-116438400 -18000 1 CDT}.. {-100112400 -21600 0 CST}.. {-21484800 -18000 0 EST}.. {104914800 -21600 0 CST}.. {104918400 -18000 1 CDT}.. {120639600 -21600 0 CST}.. {126691200 -18000 1 CDT}.. {152089200 -21600 0 CST}.. {162374400 -18000 1 CDT}.. {183538800 -21600 0 CST}.. {199267200 -18000 1 CDT}.. {215593200 -21600 0 CST}.. {230716800 -18000 1 CDT}.. {247042800 -21600 0 CST}.. {262771200 -18000 1 CDT}.. {278492400 -21600 0 CST}.. {294220800 -18000 1 CDT}.. {309942000 -2160

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Merida

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1877
                                                                                                                      Entropy (8bit):3.9636871490767147
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5bu36fELf0On9uhcinzPPoUlWQnH7eelN5Lh9LY5Lj:1qehpYtj
                                                                                                                      MD5:34909341A29FF048D83B707D12A728A5
                                                                                                                      SHA1:A4D4EC31681DB5F9DA899E20C6789D10827E6D86
                                                                                                                      SHA-256:ADE65ADDEEA027D1BE70DC7C12513B61FDF36289021E66982D527C7FEE2A2D19
                                                                                                                      SHA-512:57EED40425680CE2C05D961D3F21EE2E0D204E1FD6D3DB5F1EF7AC349AA269F9397D4E2121BD13BC3DE34205564FBE009CEEB5ADE4052EA742CBA15A91F5822B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Merida) {.. {-9223372036854775808 -21508 0 LMT}.. {-1514743200 -21600 0 CST}.. {377935200 -18000 0 EST}.. {407653200 -21600 0 CST}.. {828864000 -18000 1 CDT}.. {846399600 -21600 0 CST}.. {860313600 -18000 1 CDT}.. {877849200 -21600 0 CST}.. {891763200 -18000 1 CDT}.. {909298800 -21600 0 CST}.. {923212800 -18000 1 CDT}.. {941353200 -21600 0 CST}.. {954662400 -18000 1 CDT}.. {972802800 -21600 0 CST}.. {989136000 -18000 1 CDT}.. {1001833200 -21600 0 CST}.. {1018166400 -18000 1 CDT}.. {1035702000 -21600 0 CST}.. {1049616000 -18000 1 CDT}.. {1067151600 -21600 0 CST}.. {1081065600 -18000 1 CDT}.. {1099206000 -21600 0 CST}.. {1112515200 -18000 1 CDT}.. {1130655600 -21600 0 CST}.. {1143964800 -18000 1 CDT}.. {1162105200 -21600 0 CST}.. {1175414400 -18000 1 CDT}.. {1193554800 -21600 0 CST}.. {1207468800 -18000 1 CDT}.. {1225004400 -21600 0

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Metlakatla

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6705
                                                                                                                      Entropy (8bit):3.985641709481311
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:4DCG0haiaJCUbtp0nFI+g/iexpCVaBnNnt61nctE1:42G0IiaJCUbPI+D/iMpCIBSuk
                                                                                                                      MD5:4999FE49C1640402CB432BC1EB667479
                                                                                                                      SHA1:2ED0044927A66856090793ED6E5FF634617C8C40
                                                                                                                      SHA-256:2574831391092AD44D7B2806EEF30D59CE3BAE872111917DD39EC51EFDD62E5F
                                                                                                                      SHA-512:39DE1D24037F3FFA3101BBAA885939074E596479F68013CDA9CE53A061EA704F63FB55C15B68B66B0E29E3F07ADC0BDC2D78A2D289277E75D2EF95F54988DB74
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Metlakatla) {.. {-9223372036854775808 54822 0 LMT}.. {-3225223727 -31578 0 LMT}.. {-2188955622 -28800 0 PST}.. {-883584000 -28800 0 PST}.. {-880207200 -25200 1 PWT}.. {-769395600 -25200 1 PPT}.. {-765385200 -28800 0 PST}.. {-757353600 -28800 0 PST}.. {-31507200 -28800 0 PST}.. {-21477600 -25200 1 PDT}.. {-5756400 -28800 0 PST}.. {9972000 -25200 1 PDT}.. {25693200 -28800 0 PST}.. {41421600 -25200 1 PDT}.. {57747600 -28800 0 PST}.. {73476000 -25200 1 PDT}.. {89197200 -28800 0 PST}.. {104925600 -25200 1 PDT}.. {120646800 -28800 0 PST}.. {126698400 -25200 1 PDT}.. {152096400 -28800 0 PST}.. {162381600 -25200 1 PDT}.. {183546000 -28800 0 PST}.. {199274400 -25200 1 PDT}.. {215600400 -28800 0 PST}.. {230724000 -25200 1 PDT}.. {247050000 -28800 0 PST}.. {262778400 -25200 1 PDT}.. {278499600 -28800 0 PST}.. {294228000 -25200 1 PDT}.. {30

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Mexico_City

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2261
                                                                                                                      Entropy (8bit):3.9546083289866267
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5CBUBUI+n36fELf5On9uhcinzPPoUlWQnH7eelN5Lh9LY5Lj:EB7qehpYtj
                                                                                                                      MD5:7A67EA7FF5AC0E9B088298007A9370F4
                                                                                                                      SHA1:531583F67E0C6ABA95B5A664A555BF40BF743CE8
                                                                                                                      SHA-256:E83DB749E6AA87FD56829C2810D0F93A4194E3EE2CB0BDC12114B1EF55E92E96
                                                                                                                      SHA-512:2C9035B415E36A769782FCFA15D79E5FEACA232439D1442407C8CD8C144EE9991030D9D58D2AD54CF6C0840BF78C81921B82BECBC74ABBD0DAC627F77772F52F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Mexico_City) {.. {-9223372036854775808 -23796 0 LMT}.. {-1514739600 -25200 0 MST}.. {-1343066400 -21600 0 CST}.. {-1234807200 -25200 0 MST}.. {-1220292000 -21600 1 MDT}.. {-1207159200 -25200 0 MST}.. {-1191344400 -21600 0 CST}.. {-975261600 -18000 1 CDT}.. {-963169200 -21600 0 CST}.. {-917114400 -18000 1 CDT}.. {-907354800 -21600 0 CST}.. {-821901600 -18000 1 CWT}.. {-810068400 -21600 0 CST}.. {-627501600 -18000 1 CDT}.. {-612990000 -21600 0 CST}.. {828864000 -18000 1 CDT}.. {846399600 -21600 0 CST}.. {860313600 -18000 1 CDT}.. {877849200 -21600 0 CST}.. {891763200 -18000 1 CDT}.. {909298800 -21600 0 CST}.. {923212800 -18000 1 CDT}.. {941353200 -21600 0 CST}.. {954662400 -18000 1 CDT}.. {972802800 -21600 0 CST}.. {989136000 -18000 1 CDT}.. {1001836800 -21600 0 CST}.. {1014184800 -21600 0 CST}.. {1018166400 -18000 1 CDT}.. {10357020

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Miquelon

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7080
                                                                                                                      Entropy (8bit):3.5379714312244217
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:2UViR+iORv7bw1aW5AnMyxH5e+fHbxMfOp6D7bF8qMmqyiqV1mjZe7JhlgXY7FWN:02l5qJZS
                                                                                                                      MD5:C68889AA813C399939FCFA54E9CE0DFB
                                                                                                                      SHA1:F3D58D7BEFF2D1CB94FECE00C31FEF5BDF58C231
                                                                                                                      SHA-256:1B131AC968F95652667BD7EB1F6D667C8F679B31270D82B4B4271E787386CCCA
                                                                                                                      SHA-512:EBAF8210919E34668E9DDFCB546E5A62F35954957AAE956B6302BF296C7D4CF51E1B10FB13217CB3EEB430DAC246217EB4E9250CB4109C95D8A4367457D02771
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Miquelon) {.. {-9223372036854775808 -13480 0 LMT}.. {-1850328920 -14400 0 AST}.. {326001600 -10800 0 -03}.. {536468400 -10800 0 -02}.. {544597200 -7200 1 -02}.. {562132800 -10800 0 -02}.. {576046800 -7200 1 -02}.. {594187200 -10800 0 -02}.. {607496400 -7200 1 -02}.. {625636800 -10800 0 -02}.. {638946000 -7200 1 -02}.. {657086400 -10800 0 -02}.. {671000400 -7200 1 -02}.. {688536000 -10800 0 -02}.. {702450000 -7200 1 -02}.. {719985600 -10800 0 -02}.. {733899600 -7200 1 -02}.. {752040000 -10800 0 -02}.. {765349200 -7200 1 -02}.. {783489600 -10800 0 -02}.. {796798800 -7200 1 -02}.. {814939200 -10800 0 -02}.. {828853200 -7200 1 -02}.. {846388800 -10800 0 -02}.. {860302800 -7200 1 -02}.. {877838400 -10800 0 -02}.. {891752400 -7200 1 -02}.. {909288000 -10800 0 -02}.. {923202000 -7200 1 -02}.. {941342400 -10800 0 -02}.. {954651600 -7200

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Moncton

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):10507
                                                                                                                      Entropy (8bit):3.8204583916930557
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:X9+FPHyXFRsivcQYM+T7Z/xVQzxmtBWIXrObx29x8sLxcGMe++wzlrfFjxKvnpNM:gF6L0d0F2TzNc/1cYUH+CC
                                                                                                                      MD5:80B88F57B837CD2478815796618A6AC6
                                                                                                                      SHA1:CC2BE0213E9F0D3B307A8311D7A1013582E8A338
                                                                                                                      SHA-256:D977D045DE5CDAEB41189B91963E03EF845CA4B45E496649B4CB541EE1B5DD22
                                                                                                                      SHA-512:9410CBD706CAABFFF88DFF75235597D844B45A061EBD796F6708D7CEAB680273571A17935B7CCFC7C466ABF293C286D0886F47880E692F74C4E8BFB41729C73C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Moncton) {.. {-9223372036854775808 -15548 0 LMT}.. {-2715882052 -18000 0 EST}.. {-2131642800 -14400 0 AST}.. {-1632074400 -10800 1 ADT}.. {-1615143600 -14400 0 AST}.. {-1167595200 -14400 0 AST}.. {-1153681200 -10800 1 ADT}.. {-1145822400 -14400 0 AST}.. {-1122231600 -10800 1 ADT}.. {-1114372800 -14400 0 AST}.. {-1090782000 -10800 1 ADT}.. {-1082923200 -14400 0 AST}.. {-1059332400 -10800 1 ADT}.. {-1051473600 -14400 0 AST}.. {-1027882800 -10800 1 ADT}.. {-1020024000 -14400 0 AST}.. {-996433200 -10800 1 ADT}.. {-988574400 -14400 0 AST}.. {-965674800 -10800 1 ADT}.. {-955396800 -14400 0 AST}.. {-934743600 -10800 1 ADT}.. {-923947200 -14400 0 AST}.. {-904503600 -10800 1 ADT}.. {-891892800 -14400 0 AST}.. {-883598400 -14400 0 AST}.. {-880221600 -10800 1 AWT}.. {-769395600 -10800 1 APT}.. {-765399600 -14400 0 AST}.. {-757368000 -14400 0 AST

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Monterrey

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1940
                                                                                                                      Entropy (8bit):3.9628147491173964
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5JZKy36fELf0On9uhcinzPPoUlWQnH7eelN5Lh9LY5Lj:XwDqehpYtj
                                                                                                                      MD5:4AE2B33D9DACE0E582FA456B361C50B7
                                                                                                                      SHA1:5D62287F072F3687EF130BB1A9DD97BB2ABCF91C
                                                                                                                      SHA-256:F5A66A403BF40BE7EAB188F3CEC8D7DB700F60084F7B856AB87E0AA4A0F2C0B6
                                                                                                                      SHA-512:39BE803FD47709A1120FC8E09DB9B294DE41F69C7DD86AAB03AD8D0878B160B21D82B16398125559B792DAE99D5D917AE466C536001FEC1E618B68ACA9A80322
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Monterrey) {.. {-9223372036854775808 -24076 0 LMT}.. {-1514743200 -21600 0 CST}.. {568015200 -21600 0 CST}.. {576057600 -18000 1 CDT}.. {594198000 -21600 0 CST}.. {599637600 -21600 0 CST}.. {828864000 -18000 1 CDT}.. {846399600 -21600 0 CST}.. {860313600 -18000 1 CDT}.. {877849200 -21600 0 CST}.. {891763200 -18000 1 CDT}.. {909298800 -21600 0 CST}.. {923212800 -18000 1 CDT}.. {941353200 -21600 0 CST}.. {954662400 -18000 1 CDT}.. {972802800 -21600 0 CST}.. {989136000 -18000 1 CDT}.. {1001833200 -21600 0 CST}.. {1018166400 -18000 1 CDT}.. {1035702000 -21600 0 CST}.. {1049616000 -18000 1 CDT}.. {1067151600 -21600 0 CST}.. {1081065600 -18000 1 CDT}.. {1099206000 -21600 0 CST}.. {1112515200 -18000 1 CDT}.. {1130655600 -21600 0 CST}.. {1143964800 -18000 1 CDT}.. {1162105200 -21600 0 CST}.. {1175414400 -18000 1 CDT}.. {1193554800 -21600 0

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Montevideo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2936
                                                                                                                      Entropy (8bit):3.6410670126139046
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5JgQkS4SaEcSyS0sZSUS2kSVSXSulSASX5kAXJMsCXrUari3akaWCa3M+lafpI6L:X5kH4c9GT0E01jm5keJMRXrUEi3akaWO
                                                                                                                      MD5:D78DEBC7C0B15B31635DDC34C49248BC
                                                                                                                      SHA1:DB2FF76DB3A79BE52E2DFD4C7B8B6592946772F9
                                                                                                                      SHA-256:214F97A3BCB2378CCE23D280EA6A3B691604F82E383628F666BE585BB8494932
                                                                                                                      SHA-512:E5FCD0B54F61910E70B1D0EE9911C5B4AFF850F16B651A01D69A63A97880913B0BAB99B0D864C4E613594734FA72CCA0E9607B1ADB6E75957C790990114FD0A4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Montevideo) {.. {-9223372036854775808 -13491 0 LMT}.. {-1942690509 -13491 0 MMT}.. {-1567455309 -14400 0 -04}.. {-1459627200 -10800 0 -0330}.. {-1443819600 -12600 0 -0330}.. {-1428006600 -10800 1 -0330}.. {-1412283600 -12600 0 -0330}.. {-1396470600 -10800 1 -0330}.. {-1380747600 -12600 0 -0330}.. {-1141590600 -10800 1 -0330}.. {-1128286800 -12600 0 -0330}.. {-1110141000 -10800 1 -0330}.. {-1096837200 -12600 0 -0330}.. {-1078691400 -10800 1 -0330}.. {-1065387600 -12600 0 -0330}.. {-1047241800 -10800 1 -0330}.. {-1033938000 -12600 0 -0330}.. {-1015187400 -10800 1 -0330}.. {-1002488400 -12600 0 -0330}.. {-983737800 -10800 1 -0330}.. {-971038800 -12600 0 -0330}.. {-954707400 -10800 1 -0330}.. {-938984400 -12600 0 -0330}.. {-920838600 -10800 1 -0330}.. {-907534800 -12600 0 -0330}.. {-896819400 -10800 1 -0330}.. {-853621200 -9000 0 -03}.. {-84

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Montreal

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.748877320903638
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0qMKLRXnXHAIg20qMKLRE6RL/2IAcGEzQ21h4IAcH:SlSWB9vsM3y7RQtHAIgpRQPN/290zQgp
                                                                                                                      MD5:9130CD86BD6417DB877BF9D8F3080CE1
                                                                                                                      SHA1:76C37982C37FE54ED539AC14B5A513817E42937C
                                                                                                                      SHA-256:97F48948EF5108FE1F42D548EA47C88D4B51BF1896EE92634C7ED55555B06DBD
                                                                                                                      SHA-512:EE036350AF95414392BD93DFF528F67D9A93EB192A30056ECBC3D2396AB4B2938B3C096C3EC2BC739294D4C4B7261C427B0AAEB9559F5381CB7F375892781820
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Toronto)]} {.. LoadTimeZoneFile America/Toronto..}..set TZData(:America/Montreal) $TZData(:America/Toronto)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Montserrat

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):204
                                                                                                                      Entropy (8bit):4.878534808314885
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290zQ1HK90ppv:MByMYbpwt290zQ490b
                                                                                                                      MD5:CB5988A2508285B42C2BD487B8F9D6E1
                                                                                                                      SHA1:EAD740A566245B682CE5E284D389DFAE66DF05D9
                                                                                                                      SHA-256:6C3EE46983A3DAA91C9ADF4B18D6B4B80F1505B0057569B66D5B465D4C09B9C1
                                                                                                                      SHA-512:48796213A67F0E3BC56B54CE4D8BE098E74BA5808C9A1082D9381CB729ADFA2ACB9CE9E39A3244B3901405761C97AEE28D44C3BF7239ECC71175C62E152029C4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Montserrat) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Nassau

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):188
                                                                                                                      Entropy (8bit):4.785765433607229
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0qMKLRXnXHAIg20qMKLRE6RL/2IAcGEwEzEeIAcGu:SlSWB9vsM3y7RQtHAIgpRQPN/290xzEf
                                                                                                                      MD5:F7DAD684104D917E0F29F6951EA627AC
                                                                                                                      SHA1:E57B5CA730D90C5865CF32FEC4872F71E033D21C
                                                                                                                      SHA-256:A889810B8BB42CD206D8F8961164AD03CCFBB1924D583075489F78AFA10EAF67
                                                                                                                      SHA-512:8284F2A357A32B2F5A211904F65E3B5C37B77C9BF38C85DFA0A95A73457F3076EC12F09BC767B4D0B8FC86BF69D01A17A7BF685BAB72F3E519A397D050DA0C3B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Toronto)]} {.. LoadTimeZoneFile America/Toronto..}..set TZData(:America/Nassau) $TZData(:America/Toronto)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\New_York

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):11373
                                                                                                                      Entropy (8bit):3.8110553140357086
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:HeohzORhK1a8phYvNoStCt/cL1BRP0HY2iU7KKdFL6Aa2K4gSLf8e:+uORhK1a8phYloSItON0HY2iUmUFLqU
                                                                                                                      MD5:385C3BDD3E41E5E75CEF0658322B5CDE
                                                                                                                      SHA1:0334C21C8316ED2EE16FC98B1E8867D5E0916C00
                                                                                                                      SHA-256:7BA7DA179AA7DF26AC25E7ACCD9BD83784174445285A0D9CCBD7D6A9AA34F4BC
                                                                                                                      SHA-512:764B680FB8414B5AC8FB110247C19B1004A4453DD2BAC94BF3CFD80281FF3679A5B1D212238509165E022269503ED14A54B0EF73AF7014344752E6A627657D1F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/New_York) {.. {-9223372036854775808 -17762 0 LMT}.. {-2717650800 -18000 0 EST}.. {-1633280400 -14400 1 EDT}.. {-1615140000 -18000 0 EST}.. {-1601830800 -14400 1 EDT}.. {-1583690400 -18000 0 EST}.. {-1577905200 -18000 0 EST}.. {-1570381200 -14400 1 EDT}.. {-1551636000 -18000 0 EST}.. {-1536512400 -14400 1 EDT}.. {-1523210400 -18000 0 EST}.. {-1504458000 -14400 1 EDT}.. {-1491760800 -18000 0 EST}.. {-1473008400 -14400 1 EDT}.. {-1459706400 -18000 0 EST}.. {-1441558800 -14400 1 EDT}.. {-1428256800 -18000 0 EST}.. {-1410109200 -14400 1 EDT}.. {-1396807200 -18000 0 EST}.. {-1378659600 -14400 1 EDT}.. {-1365357600 -18000 0 EST}.. {-1347210000 -14400 1 EDT}.. {-1333908000 -18000 0 EST}.. {-1315155600 -14400 1 EDT}.. {-1301853600 -18000 0 EST}.. {-1283706000 -14400 1 EDT}.. {-1270404000 -18000 0 EST}.. {-1252256400 -14400 1 EDT}.. {-123895440

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Nipigon

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.799414617322291
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0qMKLRXnXHAIg20qMKLRE6RL/2IAcGEwMueh4IAcH:SlSWB9vsM3y7RQtHAIgpRQPN/2905u+p
                                                                                                                      MD5:B01CC44E5139066F87ADFF16728B98BF
                                                                                                                      SHA1:4464E187AFF336C9137094308C270BB822974DF1
                                                                                                                      SHA-256:55C37BF1A579A22A790ADE6585CE95BEC02DA356E84D2EF7832C422A4484FF9D
                                                                                                                      SHA-512:A45166FFE444982593CBAC3E683D25D9EDB070DB6CD059A83D1C52099F409FFBFE6EA68D255AD000AF142BF8C8D100271531852263677184597877B7BF318847
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Toronto)]} {.. LoadTimeZoneFile America/Toronto..}..set TZData(:America/Nipigon) $TZData(:America/Toronto)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Nome

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8680
                                                                                                                      Entropy (8bit):3.965662913874442
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:OrBvOs5vzC9+j1giaJCUbtp0nFI+g/iexpCVaBnNnt61nctE1:OrBvOsM9DiaJCUbPI+D/iMpCIBSuk
                                                                                                                      MD5:9A5F536932FED5A93E2C3DEB81960CD1
                                                                                                                      SHA1:8E78396D280DD3A9564CEFC7FB722437F3C4D003
                                                                                                                      SHA-256:8E971C9560CCE548B46626D072E62AB0F4C9682BF6A6ABFB4D0E8D63745402FE
                                                                                                                      SHA-512:60CFDBCE87F9CD7F27E071D66B97E60F62E56F413DC867BC809490B30D00045D0757710D6B5724148E2A28BD1E45FB662391820E6350D998002BF67B16776645
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Nome) {.. {-9223372036854775808 46702 0 LMT}.. {-3225223727 -39698 0 LMT}.. {-2188947502 -39600 0 NST}.. {-883573200 -39600 0 NST}.. {-880196400 -36000 1 NWT}.. {-769395600 -36000 1 NPT}.. {-765374400 -39600 0 NST}.. {-757342800 -39600 0 NST}.. {-86878800 -39600 0 BST}.. {-31496400 -39600 0 BST}.. {-21466800 -36000 1 BDT}.. {-5745600 -39600 0 BST}.. {9982800 -36000 1 BDT}.. {25704000 -39600 0 BST}.. {41432400 -36000 1 BDT}.. {57758400 -39600 0 BST}.. {73486800 -36000 1 BDT}.. {89208000 -39600 0 BST}.. {104936400 -36000 1 BDT}.. {120657600 -39600 0 BST}.. {126709200 -36000 1 BDT}.. {152107200 -39600 0 BST}.. {162392400 -36000 1 BDT}.. {183556800 -39600 0 BST}.. {199285200 -36000 1 BDT}.. {215611200 -39600 0 BST}.. {230734800 -36000 1 BDT}.. {247060800 -39600 0 BST}.. {262789200 -36000 1 BDT}.. {278510400 -39600 0 BST}.. {29423880

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Noronha

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1397
                                                                                                                      Entropy (8bit):3.78056049136398
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5TenykFxCFbF3YCFE2FBCFDFr9CFaFPBCFoF2CFTFKCFDuF1CF2F1CFWFhCFGF3a:5quY9EmFYBosNZNW/bWsBzgCccq7JYN9
                                                                                                                      MD5:B4F4530FCE4BF5690042A2DA40413D56
                                                                                                                      SHA1:52D5F2102485F5B326C888A287ED83CA18833BBC
                                                                                                                      SHA-256:9011C76295E6B17CC1973876B497BEE21B9E6562FB25DF66140F811A1FFA9765
                                                                                                                      SHA-512:08CAF75226D190D9FF0AA62AD84B13F1BF9047338A690847DF5B448BDB731A877F3E186298AFD704F4F4E133FF3F3128B098F9D90AE9A8E726AE52F84A7DA2E3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Noronha) {.. {-9223372036854775808 -7780 0 LMT}.. {-1767217820 -7200 0 -02}.. {-1206961200 -3600 1 -02}.. {-1191366000 -7200 0 -02}.. {-1175378400 -3600 1 -02}.. {-1159830000 -7200 0 -02}.. {-633823200 -3600 1 -02}.. {-622072800 -7200 0 -02}.. {-602287200 -3600 1 -02}.. {-591836400 -7200 0 -02}.. {-570751200 -3600 1 -02}.. {-560214000 -7200 0 -02}.. {-539128800 -3600 1 -02}.. {-531356400 -7200 0 -02}.. {-191368800 -3600 1 -02}.. {-184201200 -7200 0 -02}.. {-155167200 -3600 1 -02}.. {-150073200 -7200 0 -02}.. {-128901600 -3600 1 -02}.. {-121129200 -7200 0 -02}.. {-99957600 -3600 1 -02}.. {-89593200 -7200 0 -02}.. {-68421600 -3600 1 -02}.. {-57970800 -7200 0 -02}.. {499744800 -3600 1 -02}.. {511232400 -7200 0 -02}.. {530589600 -3600 1 -02}.. {540262800 -7200 0 -02}.. {562125600 -3600 1 -02}.. {571194000 -7200 0 -02}.. {592970400 -

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\North_Dakota\Beulah

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8557
                                                                                                                      Entropy (8bit):3.8810445182855253
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:WEktwmGaLV911sF9A604qSScBgN+4ctDzIVQ/c/3hNxTh:WBwDPPA604qSBgI7DBch
                                                                                                                      MD5:10AF9E9461DD03DA4F0AF0595EB36E6C
                                                                                                                      SHA1:57AC9BDE3AC665E49D9D2463A4BFA38C053A4A54
                                                                                                                      SHA-256:D0D8B108453265B60F525A4EC04DE9555087CD6AC5DDBA980B3A96CF0FCD68D1
                                                                                                                      SHA-512:B6DC7D2709A19B911E086C988DB8346F42DBF7601D9E51E3093C6AF897570E43E5F1C101FE88BC5251F3DCC3B532DB22FFE8A12A4D0151BC52AF3E6DDEA7D23A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/North_Dakota/Beulah) {.. {-9223372036854775808 -24427 0 LMT}.. {-2717643600 -25200 0 MST}.. {-1633273200 -21600 1 MDT}.. {-1615132800 -25200 0 MST}.. {-1601823600 -21600 1 MDT}.. {-1583683200 -25200 0 MST}.. {-880210800 -21600 1 MWT}.. {-769395600 -21600 1 MPT}.. {-765388800 -25200 0 MST}.. {-84380400 -21600 1 MDT}.. {-68659200 -25200 0 MST}.. {-52930800 -21600 1 MDT}.. {-37209600 -25200 0 MST}.. {-21481200 -21600 1 MDT}.. {-5760000 -25200 0 MST}.. {9968400 -21600 1 MDT}.. {25689600 -25200 0 MST}.. {41418000 -21600 1 MDT}.. {57744000 -25200 0 MST}.. {73472400 -21600 1 MDT}.. {89193600 -25200 0 MST}.. {104922000 -21600 1 MDT}.. {120643200 -25200 0 MST}.. {126694800 -21600 1 MDT}.. {152092800 -25200 0 MST}.. {162378000 -21600 1 MDT}.. {183542400 -25200 0 MST}.. {199270800 -21600 1 MDT}.. {215596800 -25200 0 MST}.. {230720400 -21600 1

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\North_Dakota\Center

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8557
                                                                                                                      Entropy (8bit):3.867423227197841
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:ZEktwmGaLV9tZlNA604qSScBgN+4ctDzIVQ/c/3hNxTh:ZBwD6fA604qSBgI7DBch
                                                                                                                      MD5:33C03AD65753D7ADB45FC4899B504D1A
                                                                                                                      SHA1:ED719BB67A64DB49901BA38A945A6BA998646B8D
                                                                                                                      SHA-256:ABC2B6C97D9E9FBA37AC582ADBA2CE996890D090060E083405D75CDAED9EABE0
                                                                                                                      SHA-512:69592E8A370C8A5173827500CDDF8190AB44EA87CD7E0C416055CB7958B13A737801EA6B0FFE6032CB3F14F05001BF9DA83E4AEB20F385019B2985ECE7ACB40E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/North_Dakota/Center) {.. {-9223372036854775808 -24312 0 LMT}.. {-2717643600 -25200 0 MST}.. {-1633273200 -21600 1 MDT}.. {-1615132800 -25200 0 MST}.. {-1601823600 -21600 1 MDT}.. {-1583683200 -25200 0 MST}.. {-880210800 -21600 1 MWT}.. {-769395600 -21600 1 MPT}.. {-765388800 -25200 0 MST}.. {-84380400 -21600 1 MDT}.. {-68659200 -25200 0 MST}.. {-52930800 -21600 1 MDT}.. {-37209600 -25200 0 MST}.. {-21481200 -21600 1 MDT}.. {-5760000 -25200 0 MST}.. {9968400 -21600 1 MDT}.. {25689600 -25200 0 MST}.. {41418000 -21600 1 MDT}.. {57744000 -25200 0 MST}.. {73472400 -21600 1 MDT}.. {89193600 -25200 0 MST}.. {104922000 -21600 1 MDT}.. {120643200 -25200 0 MST}.. {126694800 -21600 1 MDT}.. {152092800 -25200 0 MST}.. {162378000 -21600 1 MDT}.. {183542400 -25200 0 MST}.. {199270800 -21600 1 MDT}.. {215596800 -25200 0 MST}.. {230720400 -21600 1

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\North_Dakota\New_Salem

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8560
                                                                                                                      Entropy (8bit):3.879452555978431
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:GEktwmGaLV9nlNA604qSScBgN+4ctDzIVQ/c/3hNxTh:GBwD2fA604qSBgI7DBch
                                                                                                                      MD5:3D3DC12209293086FD843738A4FE87FB
                                                                                                                      SHA1:8103DFA18B5F3F36AF0B53FA350E0F2D300E6289
                                                                                                                      SHA-256:8803FF7C81C933B57178B9D3C502FB4268D9AA594A3C638A7F17AF60B12D300D
                                                                                                                      SHA-512:39BB939780A71B817F82D2B7F56815D33926D150525161051A9950E5A98BA9184670AFC884A1C69D56EADBD6198E3082975448EFBA5FE8A336DB071E6BAB8EF2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/North_Dakota/New_Salem) {.. {-9223372036854775808 -24339 0 LMT}.. {-2717643600 -25200 0 MST}.. {-1633273200 -21600 1 MDT}.. {-1615132800 -25200 0 MST}.. {-1601823600 -21600 1 MDT}.. {-1583683200 -25200 0 MST}.. {-880210800 -21600 1 MWT}.. {-769395600 -21600 1 MPT}.. {-765388800 -25200 0 MST}.. {-84380400 -21600 1 MDT}.. {-68659200 -25200 0 MST}.. {-52930800 -21600 1 MDT}.. {-37209600 -25200 0 MST}.. {-21481200 -21600 1 MDT}.. {-5760000 -25200 0 MST}.. {9968400 -21600 1 MDT}.. {25689600 -25200 0 MST}.. {41418000 -21600 1 MDT}.. {57744000 -25200 0 MST}.. {73472400 -21600 1 MDT}.. {89193600 -25200 0 MST}.. {104922000 -21600 1 MDT}.. {120643200 -25200 0 MST}.. {126694800 -21600 1 MDT}.. {152092800 -25200 0 MST}.. {162378000 -21600 1 MDT}.. {183542400 -25200 0 MST}.. {199270800 -21600 1 MDT}.. {215596800 -25200 0 MST}.. {230720400 -2160

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Nuuk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7429
                                                                                                                      Entropy (8bit):3.5470060859729253
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:0ixKXpbzvZ+FxAqe12voJ0euJFNgIHc/QEeF5Z1V8tCSfifK3facfzQWWLQelXuC:0LRJq9LstgV
                                                                                                                      MD5:FC9CEA4B9654D0957F55CB0E1B25A3E7
                                                                                                                      SHA1:8BFC3E8CEC34C4087579D3DA727143E3EC045B77
                                                                                                                      SHA-256:12917DAAA60134BFE56E6979BB27B58A3F295C32BAE02B233E849BCED6B8BCA2
                                                                                                                      SHA-512:355628F2EFF86605653A1EE7D976CE8B3229A4169D35576F6007FABAB37DD280D8F296EE88BECE3D84D3A1C476F23275D1D77CAF157E9A98672CBF14801D7292
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Nuuk) {.. {-9223372036854775808 -12416 0 LMT}.. {-1686083584 -10800 0 -03}.. {323845200 -7200 0 -02}.. {338950800 -10800 0 -03}.. {354675600 -7200 1 -02}.. {370400400 -10800 0 -03}.. {386125200 -7200 1 -02}.. {401850000 -10800 0 -03}.. {417574800 -7200 1 -02}.. {433299600 -10800 0 -03}.. {449024400 -7200 1 -02}.. {465354000 -10800 0 -03}.. {481078800 -7200 1 -02}.. {496803600 -10800 0 -03}.. {512528400 -7200 1 -02}.. {528253200 -10800 0 -03}.. {543978000 -7200 1 -02}.. {559702800 -10800 0 -03}.. {575427600 -7200 1 -02}.. {591152400 -10800 0 -03}.. {606877200 -7200 1 -02}.. {622602000 -10800 0 -03}.. {638326800 -7200 1 -02}.. {654656400 -10800 0 -03}.. {670381200 -7200 1 -02}.. {686106000 -10800 0 -03}.. {701830800 -7200 1 -02}.. {717555600 -10800 0 -03}.. {733280400 -7200 1 -02}.. {749005200 -10800 0 -03}.. {764730000 -7200 1 -0

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Ojinaga

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2069
                                                                                                                      Entropy (8bit):3.994692300159945
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5Pe89WU0S+VS+TjV/NF01YluO53ON4Lvf3Pn:5gU033FS1YluOQiLvf3Pn
                                                                                                                      MD5:0CB80C895BB4BFD36043F1CAAFB604B7
                                                                                                                      SHA1:2EC2CA1D31EF1804E4EC26F449CA0D3C4F7AA7A0
                                                                                                                      SHA-256:FC857E4DD0A4AE60A7C56637C752205E20442C7AE62158435BEFCA838174108D
                                                                                                                      SHA-512:4BE44FF49AC588F1B441AB1B2678F5A0F0B60DB5C69F3F45C7447FC5A0175146F9FF83E132A5256CF7E559809EF7394C23DF9156A295D84D3A67EE917E661EED
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Ojinaga) {.. {-9223372036854775808 -25060 0 LMT}.. {-1514739600 -25200 0 MST}.. {-1343066400 -21600 0 CST}.. {-1234807200 -25200 0 MST}.. {-1220292000 -21600 1 MDT}.. {-1207159200 -25200 0 MST}.. {-1191344400 -21600 0 CST}.. {820476000 -21600 0 CST}.. {828864000 -18000 1 CDT}.. {846399600 -21600 0 CST}.. {860313600 -18000 1 CDT}.. {877849200 -21600 0 CST}.. {883634400 -21600 0 CST}.. {891766800 -21600 0 MDT}.. {909302400 -25200 0 MST}.. {923216400 -21600 1 MDT}.. {941356800 -25200 0 MST}.. {954666000 -21600 1 MDT}.. {972806400 -25200 0 MST}.. {989139600 -21600 1 MDT}.. {1001836800 -25200 0 MST}.. {1018170000 -21600 1 MDT}.. {1035705600 -25200 0 MST}.. {1049619600 -21600 1 MDT}.. {1067155200 -25200 0 MST}.. {1081069200 -21600 1 MDT}.. {1099209600 -25200 0 MST}.. {1112518800 -21600 1 MDT}.. {1130659200 -25200 0 MST}.. {1143968400 -21

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Panama

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):186
                                                                                                                      Entropy (8bit):4.970379147398626
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2IAcGEu5YfMXGm2OHGf8xYoHv5BidhZvFsc1HRX1va0v:SlSWB9eg/290ZDm2OHDxYoHv5GhZd93p
                                                                                                                      MD5:AA408A43079EC8933DE271BE3DA2B502
                                                                                                                      SHA1:421A867DB3FD4779C5F759D0B657D8EB5FB2218B
                                                                                                                      SHA-256:990213DDE00ADCEB74C8D1ECAF81B9C77963E4AB1F35767F7349236FC8E917DF
                                                                                                                      SHA-512:1FB740527555A8E128E05709D05720A249BCBA4B6434D00226C07426E6283AA48973F75268F36E6044F0F0650E012781C8E5519B7EA916C625BBF018B29E9961
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Panama) {.. {-9223372036854775808 -19088 0 LMT}.. {-2524502512 -19176 0 CMT}.. {-1946918424 -18000 0 EST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Pangnirtung

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7736
                                                                                                                      Entropy (8bit):3.8533019559841972
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:tTqPm4bPJWXtRbALtuO/N0HY2iUmUFLqU:Izod
                                                                                                                      MD5:6BA298F9CEB6406802A01C13313F8EF1
                                                                                                                      SHA1:D77C113CFA927EF65461781FD080F590C8CFCBB9
                                                                                                                      SHA-256:1FB962ECC1E5F02E1001C70460FFF720B114554F9AA7956D6DA154DBEA87B4D7
                                                                                                                      SHA-512:C7F4E2DA503A3167098CFAB7AEC8D75A32D6B081E6777DE7BA3D6B4558D0C44D2CD8A0F1626968295031BABFD2CB96B031B4C00A44F2C554B5B217AE67E69EB4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Pangnirtung) {.. {-9223372036854775808 0 0 -00}.. {-1546300800 -14400 0 AST}.. {-880221600 -10800 1 AWT}.. {-769395600 -10800 1 APT}.. {-765399600 -14400 0 AST}.. {-147902400 -7200 1 ADDT}.. {-131572800 -14400 0 AST}.. {325663200 -10800 1 ADT}.. {341384400 -14400 0 AST}.. {357112800 -10800 1 ADT}.. {372834000 -14400 0 AST}.. {388562400 -10800 1 ADT}.. {404888400 -14400 0 AST}.. {420012000 -10800 1 ADT}.. {436338000 -14400 0 AST}.. {452066400 -10800 1 ADT}.. {467787600 -14400 0 AST}.. {483516000 -10800 1 ADT}.. {499237200 -14400 0 AST}.. {514965600 -10800 1 ADT}.. {530686800 -14400 0 AST}.. {544600800 -10800 1 ADT}.. {562136400 -14400 0 AST}.. {576050400 -10800 1 ADT}.. {594190800 -14400 0 AST}.. {607500000 -10800 1 ADT}.. {625640400 -14400 0 AST}.. {638949600 -10800 1 ADT}.. {657090000 -14400 0 AST}.. {671004000 -10800 1 ADT}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Paramaribo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):253
                                                                                                                      Entropy (8bit):4.784405839512086
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/290olofDm2OHekeoHXFIV/1Vw/9vVOzFZg/VVFAKV:MB86290oloLmdHeVCXqV/k/9v4zW/OW
                                                                                                                      MD5:BFCE7E2618D6935031D6941AD6DDD8E3
                                                                                                                      SHA1:1953CD224FB2363B10372C0476760F3FB020CB00
                                                                                                                      SHA-256:B3EE44B3526BEDFC25B806371D3C465FDBD6CC647F30BF093750651E4A0C1BE4
                                                                                                                      SHA-512:31262DF034E084DA4CDB57B99178594C29129F61F3535E5D8245B8BB4AB6BF314307B0F5E58B74C349684CD761C9CDE44EB10407FB135BA6427D3D1E9DA99B40
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Paramaribo) {.. {-9223372036854775808 -13240 0 LMT}.. {-1861906760 -13252 0 PMT}.. {-1104524348 -13236 0 PMT}.. {-765317964 -12600 0 -0330}.. {465449400 -10800 0 -03}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Phoenix

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):496
                                                                                                                      Entropy (8bit):4.444598497301421
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86290OXmdH514YCvb8o1W4S9xRvhhHRVxORBYUNv:5tekdvYP1x52yq
                                                                                                                      MD5:062ECA57C0B795780240CD7AFE70BDA0
                                                                                                                      SHA1:89D71A11DD8D4E000F7FADBDDC77C4C1DC1195F7
                                                                                                                      SHA-256:DFA0EC91804B789A1A7E1B1977710435D2589A5B54C1579C8E1F5BF96D2FD007
                                                                                                                      SHA-512:7D123AA872E0B8286A26E338AE0F8E0D7A6F0F2EA8B1EBEC6DBB59477C812985CB246AD397D0901A58FDB7FF14171CF60169DC15C538B95C58BD2D46106A7A4D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Phoenix) {.. {-9223372036854775808 -26898 0 LMT}.. {-2717643600 -25200 0 MST}.. {-1633273200 -21600 1 MDT}.. {-1615132800 -25200 0 MST}.. {-1601823600 -21600 1 MDT}.. {-1583683200 -25200 0 MST}.. {-880210800 -21600 1 MWT}.. {-820519140 -25200 0 MST}.. {-796841940 -25200 0 MST}.. {-94669200 -25200 0 MST}.. {-84380400 -21600 1 MDT}.. {-68659200 -25200 0 MST}.. {-56221200 -25200 0 MST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Port-au-Prince

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6613
                                                                                                                      Entropy (8bit):3.8549788442269395
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5Ux+E2p3T6ZqrNSMEBPMcywh4NF5zCC7IOTWa1HW1241UWK9BDL+3XC4BMrS2LxP:KOfS0HY2iU7KKdFL6Aa2K4gSLf8e
                                                                                                                      MD5:A720323DF122C70C1530788DB24700BA
                                                                                                                      SHA1:20674BD7D84CC686ABBB5D6B36B520A5E9C813ED
                                                                                                                      SHA-256:A89C580899AD2FF8DF45A783BB90D501DC32C28B92931CA18ABD13453E76244B
                                                                                                                      SHA-512:02B71E537B9FDAF1B68E381F0007CCBBA53EB70719ED38F51B56C5BFA64C7E3D9797053C9DE3A920E5CAFA09BBC062FCED62B5D6B9213AFA8286B95DEDAB0532
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Port-au-Prince) {.. {-9223372036854775808 -17360 0 LMT}.. {-2524504240 -17340 0 PPMT}.. {-1670483460 -18000 0 EST}.. {421218000 -14400 1 EDT}.. {436334400 -18000 0 EST}.. {452062800 -14400 1 EDT}.. {467784000 -18000 0 EST}.. {483512400 -14400 1 EDT}.. {499233600 -18000 0 EST}.. {514962000 -14400 1 EDT}.. {530683200 -18000 0 EST}.. {546411600 -14400 1 EDT}.. {562132800 -18000 0 EST}.. {576050400 -14400 1 EDT}.. {594194400 -18000 0 EST}.. {607500000 -14400 1 EDT}.. {625644000 -18000 0 EST}.. {638949600 -14400 1 EDT}.. {657093600 -18000 0 EST}.. {671004000 -14400 1 EDT}.. {688543200 -18000 0 EST}.. {702453600 -14400 1 EDT}.. {719992800 -18000 0 EST}.. {733903200 -14400 1 EDT}.. {752047200 -18000 0 EST}.. {765352800 -14400 1 EDT}.. {783496800 -18000 0 EST}.. {796802400 -14400 1 EDT}.. {814946400 -18000 0 EST}.. {828856800 -14400 1 EDT}

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Port_of_Spain

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):207
                                                                                                                      Entropy (8bit):4.919510214047913
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290e7490ppv:MByMYbpwt290190b
                                                                                                                      MD5:4AB394CB233B101627136EB5E070CF9B
                                                                                                                      SHA1:F00600CD2DB10FE157C3696F665B9759EEA85F99
                                                                                                                      SHA-256:A4952380C89A6903FFE5BF8707B94B1BB72568FFD03DB04BF4D98E38AC82EEB7
                                                                                                                      SHA-512:58F4AD08FA10F1884FA641C4EA778C0FC013EABBD68DF5DE04D5B301227396260C3D669DB33DD6A6B33F1550C24BBD7777D756DF0D61CEEAF5EC6541EDFA296C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Port_of_Spain) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Porto_Acre

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):201
                                                                                                                      Entropy (8bit):4.866417687745155
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7thteSHAIgpth9RN/290msh490th4:MByMYdIp7t290v490I
                                                                                                                      MD5:6B570E79FA2AA7D6CB1E56A11EE0A37C
                                                                                                                      SHA1:396A2C9BBE4F264DD5A4F2E44D3E63C57F52186B
                                                                                                                      SHA-256:52921EEA2A1925DF06CEA4638ED4128FAAA8FBA40ED4E0741650B419E5152DCB
                                                                                                                      SHA-512:FA75A179664BED02A0F5BC1B7C3DD5F3E986544A151634BA4C4401476F5999714C89E240D9AF805484D1BEC04A1A562157FAEECA1603C4FF8CFFB424B9DEB560
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Rio_Branco)]} {.. LoadTimeZoneFile America/Rio_Branco..}..set TZData(:America/Porto_Acre) $TZData(:America/Rio_Branco)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Porto_Velho

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1051
                                                                                                                      Entropy (8bit):3.851275104153641
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5Xe4QJnSRs//SFs/pS9/MHSW/WOSr/nSso/TSL/SSU/iS5X/LcSi/xScd/ZlSQ/8:5kSeSFESoSQSrSsCSeSPS1cSQSQlSsSX
                                                                                                                      MD5:03046BA6F8344C32AD7A22748DC871AB
                                                                                                                      SHA1:AB9ED078D80AE99EF6DE4BF34AC45359B82D1284
                                                                                                                      SHA-256:E6E6F6753E7D443052A64D4DB07B8D443CE13A573946E7D0A19CDD4BBA4A2F04
                                                                                                                      SHA-512:620953BB4C8CF203262EC0C1F807543D24B9894C3B531AE57F7CEF630452CC9AC7CA41D43A6D8891F9CF17594E9EE34CF501F8508E7C0669A8E5EF9C70B6EAA3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Porto_Velho) {.. {-9223372036854775808 -15336 0 LMT}.. {-1767210264 -14400 0 -04}.. {-1206954000 -10800 1 -04}.. {-1191358800 -14400 0 -04}.. {-1175371200 -10800 1 -04}.. {-1159822800 -14400 0 -04}.. {-633816000 -10800 1 -04}.. {-622065600 -14400 0 -04}.. {-602280000 -10800 1 -04}.. {-591829200 -14400 0 -04}.. {-570744000 -10800 1 -04}.. {-560206800 -14400 0 -04}.. {-539121600 -10800 1 -04}.. {-531349200 -14400 0 -04}.. {-191361600 -10800 1 -04}.. {-184194000 -14400 0 -04}.. {-155160000 -10800 1 -04}.. {-150066000 -14400 0 -04}.. {-128894400 -10800 1 -04}.. {-121122000 -14400 0 -04}.. {-99950400 -10800 1 -04}.. {-89586000 -14400 0 -04}.. {-68414400 -10800 1 -04}.. {-57963600 -14400 0 -04}.. {499752000 -10800 1 -04}.. {511239600 -14400 0 -04}.. {530596800 -10800 1 -04}.. {540270000 -14400 0 -04}.. {562132800 -10800 1 -04}.. {5712012

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Puerto_Rico

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):283
                                                                                                                      Entropy (8bit):4.781646667761219
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/290piDm2OH9VoHvMlFoeVVF70ZVVFUFkzk/lLJpR/lAov:MB862908mdHvCvMlGe/J0Z/uFkzk/lL1
                                                                                                                      MD5:E2E2E0D6677FFF2E37BBFC3522F2A9AA
                                                                                                                      SHA1:4C1C93E14FBC00B8B1E78B8D9631599164305EB1
                                                                                                                      SHA-256:2981248A9F14EBFC8791EC5453170376CBD549557E495EA0E331CC18556C958E
                                                                                                                      SHA-512:F056B03EB9945823F5284C840E06E298DD2DE854F1555CD16D0BB19D962B73EF34A05683E6369B0D89CB7C3F7D082C312CCA6F8C6A0BB53F5C75FE4A863FCD95
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Puerto_Rico) {.. {-9223372036854775808 -15865 0 LMT}.. {-2233035335 -14400 0 AST}.. {-873057600 -10800 0 AWT}.. {-769395600 -10800 1 APT}.. {-765399600 -14400 0 AST}.. {-757368000 -14400 0 AST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Punta_Arenas

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3729
                                                                                                                      Entropy (8bit):3.6253057710886956
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:2RPW7xUQjzoMUBI0nuUoDKlHslPlgiot7JC/Xk8NWse4r4g5xCEmSdLkUsZOn+ZW:247xUQjzoMUBI0nuUoDK6lPlgiot7JCV
                                                                                                                      MD5:D4ECD2A380E55A10FB97AB1D29C619F3
                                                                                                                      SHA1:AAAFF44590F08623BE6F61EA6EFF6488C99A73BF
                                                                                                                      SHA-256:4E626BD8B9182E56ADA1E9276585E945957431EA9BEA949CE071305E4E3C70A2
                                                                                                                      SHA-512:677EE7093A53B48DE526C5877DB7128E8746831FE0DC44A38EB84050757E6017C9471EEF9AFCCEEEB5794D1608E486840804C01BD6276EA53F3C7823B05ED62B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Punta_Arenas) {.. {-9223372036854775808 -17020 0 LMT}.. {-2524504580 -16965 0 SMT}.. {-1892661435 -18000 0 -05}.. {-1688410800 -16965 0 SMT}.. {-1619205435 -14400 0 -04}.. {-1593806400 -16965 0 SMT}.. {-1335986235 -18000 0 -05}.. {-1335985200 -14400 1 -05}.. {-1317585600 -18000 0 -05}.. {-1304362800 -14400 1 -05}.. {-1286049600 -18000 0 -05}.. {-1272826800 -14400 1 -05}.. {-1254513600 -18000 0 -05}.. {-1241290800 -14400 1 -05}.. {-1222977600 -18000 0 -05}.. {-1209754800 -14400 1 -05}.. {-1191355200 -18000 0 -05}.. {-1178132400 -14400 0 -04}.. {-870552000 -18000 0 -05}.. {-865278000 -14400 0 -04}.. {-736632000 -14400 1 -04}.. {-718056000 -18000 0 -05}.. {-713649600 -14400 0 -04}.. {-36619200 -10800 1 -04}.. {-23922000 -14400 0 -04}.. {-3355200 -10800 1 -04}.. {7527600 -14400 0 -04}.. {24465600 -10800 1 -04}.. {37767600 -14400 0 -04}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Rainy_River

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):196
                                                                                                                      Entropy (8bit):4.926514352074701
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7pYHAIgppuRN/290ly90pl:MByMY/pcRt290w90X
                                                                                                                      MD5:552FBD2FBAD42F79C7993124D9CCC54B
                                                                                                                      SHA1:9029B7CCE8A5AD0F14C05FFBCDA4CA225DEC1708
                                                                                                                      SHA-256:FEC74A3FCBD9B99FDFF24B54223DA187958697CBE756A54592F6171C69F1403F
                                                                                                                      SHA-512:96315C32C1D0DEF804A560022DA12B3C63200A680F2A37D1B03E1C9EA413842EB6051E1C2315AE4E7C374280AD0E59832F834A8D6D66E259EF62735A77917ECE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Winnipeg)]} {.. LoadTimeZoneFile America/Winnipeg..}..set TZData(:America/Rainy_River) $TZData(:America/Winnipeg)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Rankin_Inlet

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7614
                                                                                                                      Entropy (8bit):3.8349162993762267
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:Wi8h4ZlNA604qSScBgN+4ctDzIVQ/c/3hNxTh:bqOfA604qSBgI7DBch
                                                                                                                      MD5:793DAEDB7E3077DE52DCC3C8A7CBEC5B
                                                                                                                      SHA1:37562E9F28D51DED41FFD5FF2FF19E2E4E453B7A
                                                                                                                      SHA-256:AA8866D58BEAB07548180628FF423887BBF48AADB1B55392B288F7310F94A9B1
                                                                                                                      SHA-512:68A32B41DC2D3E730D6BE53656B0D566AB1BCC1E189A2FFDB5687A947EF4F4008BC17456F8CE0D59C838EEA87A44400231A44E6AB35BEDBF5D7779E1CD7EFD8A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Rankin_Inlet) {.. {-9223372036854775808 0 0 -00}.. {-410227200 -21600 0 CST}.. {-147895200 -14400 1 CDDT}.. {-131565600 -21600 0 CST}.. {325670400 -18000 1 CDT}.. {341391600 -21600 0 CST}.. {357120000 -18000 1 CDT}.. {372841200 -21600 0 CST}.. {388569600 -18000 1 CDT}.. {404895600 -21600 0 CST}.. {420019200 -18000 1 CDT}.. {436345200 -21600 0 CST}.. {452073600 -18000 1 CDT}.. {467794800 -21600 0 CST}.. {483523200 -18000 1 CDT}.. {499244400 -21600 0 CST}.. {514972800 -18000 1 CDT}.. {530694000 -21600 0 CST}.. {544608000 -18000 1 CDT}.. {562143600 -21600 0 CST}.. {576057600 -18000 1 CDT}.. {594198000 -21600 0 CST}.. {607507200 -18000 1 CDT}.. {625647600 -21600 0 CST}.. {638956800 -18000 1 CDT}.. {657097200 -21600 0 CST}.. {671011200 -18000 1 CDT}.. {688546800 -21600 0 CST}.. {702460800 -18000 1 CDT}.. {719996400 -21600 0 CST}.. {7

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Recife

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1420
                                                                                                                      Entropy (8bit):3.78262494063765
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5aLexyGcChlrLPsw6kSS3h5R14eH8tf3GvIkuoYVZaI1kR8nd:5eTChlvEw6kSSx5H4a8tf3fkuoYVZDm+
                                                                                                                      MD5:4D12651CEE804EB9F29567CB37F12031
                                                                                                                      SHA1:54B2613475B8BDB1DBCCA53A4895DA021F66BDC0
                                                                                                                      SHA-256:A36AD4614FC9A2A433712B555156EDE03980B88EB91D8DC7E8B10451D6D7F7D3
                                                                                                                      SHA-512:E6690F6B6DF613C8B7289A2DB71FBC9B87B997707A6C3B4B45BDE8F347082AE8C69F212BAACE50F3C04E325ABE0976AF1F61107BDF8A15D5B88F11FAE11A9D00
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Recife) {.. {-9223372036854775808 -8376 0 LMT}.. {-1767217224 -10800 0 -03}.. {-1206957600 -7200 1 -03}.. {-1191362400 -10800 0 -03}.. {-1175374800 -7200 1 -03}.. {-1159826400 -10800 0 -03}.. {-633819600 -7200 1 -03}.. {-622069200 -10800 0 -03}.. {-602283600 -7200 1 -03}.. {-591832800 -10800 0 -03}.. {-570747600 -7200 1 -03}.. {-560210400 -10800 0 -03}.. {-539125200 -7200 1 -03}.. {-531352800 -10800 0 -03}.. {-191365200 -7200 1 -03}.. {-184197600 -10800 0 -03}.. {-155163600 -7200 1 -03}.. {-150069600 -10800 0 -03}.. {-128898000 -7200 1 -03}.. {-121125600 -10800 0 -03}.. {-99954000 -7200 1 -03}.. {-89589600 -10800 0 -03}.. {-68418000 -7200 1 -03}.. {-57967200 -10800 0 -03}.. {499748400 -7200 1 -03}.. {511236000 -10800 0 -03}.. {530593200 -7200 1 -03}.. {540266400 -10800 0 -03}.. {562129200 -7200 1 -03}.. {571197600 -10800 0 -03}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Regina

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1781
                                                                                                                      Entropy (8bit):4.034282439637634
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86290hjmdHfCv24Q1NAvHaE+YB+Q4kRcMxIeRUVX/SEQd1rRR9xRv0+Ro/wPjp:5EjeavTGOtAVvSRBpx0yq1epwD+yz+
                                                                                                                      MD5:14B29B4391B643E5707096ADCC33C57E
                                                                                                                      SHA1:B3F875ABB79C634C74307B7CB7B276B13AEE11D1
                                                                                                                      SHA-256:50105E788288CF4C680B29BBDCDE94D8713A5361B38C6C469FD97CF05503FF7D
                                                                                                                      SHA-512:D92A51547DF2C1AB6E6CDEFF34C07B755D3F6BB5E7DD1907693E7658EDE4D2BADC5DEFDB658ADD0F8D8F14B3B87CEA17BC00DAC364C5CB7ACBF8778C245276A9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Regina) {.. {-9223372036854775808 -25116 0 LMT}.. {-2030202084 -25200 0 MST}.. {-1632063600 -21600 1 MDT}.. {-1615132800 -25200 0 MST}.. {-1251651600 -21600 1 MDT}.. {-1238349600 -25200 0 MST}.. {-1220202000 -21600 1 MDT}.. {-1206900000 -25200 0 MST}.. {-1188752400 -21600 1 MDT}.. {-1175450400 -25200 0 MST}.. {-1156698000 -21600 1 MDT}.. {-1144000800 -25200 0 MST}.. {-1125248400 -21600 1 MDT}.. {-1111946400 -25200 0 MST}.. {-1032714000 -21600 1 MDT}.. {-1016992800 -25200 0 MST}.. {-1001264400 -21600 1 MDT}.. {-986148000 -25200 0 MST}.. {-969814800 -21600 1 MDT}.. {-954093600 -25200 0 MST}.. {-937760400 -21600 1 MDT}.. {-922039200 -25200 0 MST}.. {-906310800 -21600 1 MDT}.. {-890589600 -25200 0 MST}.. {-880210800 -21600 1 MWT}.. {-769395600 -21600 1 MPT}.. {-765388800 -25200 0 MST}.. {-748450800 -21600 1 MDT}.. {-732729600 -25200 0 MST

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Resolute

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7610
                                                                                                                      Entropy (8bit):3.8312000314798085
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:li8h4Z80NA604qSScBgN+4ctDzIVQ/c/3hNxTh:EqOzA604qSBgI7DBch
                                                                                                                      MD5:541EACD872723603971058CB205121D7
                                                                                                                      SHA1:8F7DFD5ECA2913846D9342839AE1C60882153DA0
                                                                                                                      SHA-256:643CC43E3F906779C040E1F0C20E78D6E95CC7301B3C7370A8ADBCBD76A8C5E8
                                                                                                                      SHA-512:971D06D3FB67B7AE79EEDB6D3EBB805B5992C2BF4A7166016B405E21BFB25D9A87A757E8065073D5FBEB9084F6F742269A5BF432BF2F03D30913DB092E1AB3A1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Resolute) {.. {-9223372036854775808 0 0 -00}.. {-704937600 -21600 0 CST}.. {-147895200 -14400 1 CDDT}.. {-131565600 -21600 0 CST}.. {325670400 -18000 1 CDT}.. {341391600 -21600 0 CST}.. {357120000 -18000 1 CDT}.. {372841200 -21600 0 CST}.. {388569600 -18000 1 CDT}.. {404895600 -21600 0 CST}.. {420019200 -18000 1 CDT}.. {436345200 -21600 0 CST}.. {452073600 -18000 1 CDT}.. {467794800 -21600 0 CST}.. {483523200 -18000 1 CDT}.. {499244400 -21600 0 CST}.. {514972800 -18000 1 CDT}.. {530694000 -21600 0 CST}.. {544608000 -18000 1 CDT}.. {562143600 -21600 0 CST}.. {576057600 -18000 1 CDT}.. {594198000 -21600 0 CST}.. {607507200 -18000 1 CDT}.. {625647600 -21600 0 CST}.. {638956800 -18000 1 CDT}.. {657097200 -21600 0 CST}.. {671011200 -18000 1 CDT}.. {688546800 -21600 0 CST}.. {702460800 -18000 1 CDT}.. {719996400 -21600 0 CST}.. {73391

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Rio_Branco

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1112
                                                                                                                      Entropy (8bit):3.8413073465060457
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5Ybe/k5Yss/uuD/uVK/uNC/uvFe/uxJs/u74O/u83C/uc8J/uhF8/uNHs/ulU6Gs:505YsMw57XJh4CxUF/A6GTrtSUDwr
                                                                                                                      MD5:7E23FDE0E158E8ED2E7536EDE70D2588
                                                                                                                      SHA1:319052BE076DC79F130E807D68B11CCAA0636340
                                                                                                                      SHA-256:28082D20872B61D6098D31D1C40F12464A946A933CD9AF74475C5AF384210890
                                                                                                                      SHA-512:BE078ED12F05AB5CEE5D77212EB76A01A1BC52EEAA17E3B91D93B88D75E5281B6AF164E712A9AB0F57A21B3CDB20F6FCCADB73CAC4745B5D2E665D18F9F06B55
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Rio_Branco) {.. {-9223372036854775808 -16272 0 LMT}.. {-1767209328 -18000 0 -05}.. {-1206950400 -14400 1 -05}.. {-1191355200 -18000 0 -05}.. {-1175367600 -14400 1 -05}.. {-1159819200 -18000 0 -05}.. {-633812400 -14400 1 -05}.. {-622062000 -18000 0 -05}.. {-602276400 -14400 1 -05}.. {-591825600 -18000 0 -05}.. {-570740400 -14400 1 -05}.. {-560203200 -18000 0 -05}.. {-539118000 -14400 1 -05}.. {-531345600 -18000 0 -05}.. {-191358000 -14400 1 -05}.. {-184190400 -18000 0 -05}.. {-155156400 -14400 1 -05}.. {-150062400 -18000 0 -05}.. {-128890800 -14400 1 -05}.. {-121118400 -18000 0 -05}.. {-99946800 -14400 1 -05}.. {-89582400 -18000 0 -05}.. {-68410800 -14400 1 -05}.. {-57960000 -18000 0 -05}.. {499755600 -14400 1 -05}.. {511243200 -18000 0 -05}.. {530600400 -14400 1 -05}.. {540273600 -18000 0 -05}.. {562136400 -14400 1 -05}.. {57120480

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Rosario

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):219
                                                                                                                      Entropy (8bit):4.801485647578614
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7/MSHAIgp/M1ovN/290rI5290/M7:MByMY/M7p/M16t290r190/M7
                                                                                                                      MD5:90830F3B1F91FE48AC2944C7C92A3F6E
                                                                                                                      SHA1:777377AE4959DDD2B472EB6041A23A5B93D64BB6
                                                                                                                      SHA-256:0117D33D4F326AA536162D36A02439FBD5F2EB3B4F540B5BA91ED7747DDAC180
                                                                                                                      SHA-512:20A371E4550E402AFEB83EF19EFFF6B3C0D7A68DCAA06AD894D04DB63B7096560E701C45B455B23A98BB20FE3B590F920219152415CA506AEDA427BB1381B826
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Argentina/Cordoba)]} {.. LoadTimeZoneFile America/Argentina/Cordoba..}..set TZData(:America/Rosario) $TZData(:America/Argentina/Cordoba)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Santa_Isabel

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):194
                                                                                                                      Entropy (8bit):4.869058214823402
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7ekHAIgpeON/290tX2U490eBn:MByMYMpJt290c90m
                                                                                                                      MD5:F4E62378AA05771D348AA6DA516CD386
                                                                                                                      SHA1:07FCA813693F7944CBCBB128F2F2FE32929D37A2
                                                                                                                      SHA-256:3B4C2F3A5B9CD22A73F05187C032723D07BB53C9946D04D35E1BA1CB90CA0A62
                                                                                                                      SHA-512:E9F6CEB824D656CA25A72BF8EB4347A22E1A8E40410F01E0C2EDE19ACAF32D76540399796B3EBC7781C8B5D48C1A6B2C856CA06158AE37D95C95CF0567DFA2E5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Tijuana)]} {.. LoadTimeZoneFile America/Tijuana..}..set TZData(:America/Santa_Isabel) $TZData(:America/Tijuana)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Santarem

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1079
                                                                                                                      Entropy (8bit):3.8200568741699223
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5zeUdunSRs//SFs/pS9/MHSW/WOSr/nSso/TSL/SSU/iS5X/LcSi/xScd/ZlSQ/h:52SeSFESoSQSrSsCSeSPS1cSQSQlSsSU
                                                                                                                      MD5:7F2658032008F2C1308F121C2EBF2479
                                                                                                                      SHA1:B6F24E818B4424C0DEF818C103D1DA5359958932
                                                                                                                      SHA-256:4A397BD937DE1D7E6A941D18001B34D4CD195AEFD08951C30C7EE8E48656AA0E
                                                                                                                      SHA-512:F78853AA75F58A85555DD79E08A7487E5161854650DBF480189790D855738FEDCBDA936870067DE40FE000861008A9E9AAF61DF02B6B30B96038C61B5E1F1C1D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Santarem) {.. {-9223372036854775808 -13128 0 LMT}.. {-1767212472 -14400 0 -04}.. {-1206954000 -10800 1 -04}.. {-1191358800 -14400 0 -04}.. {-1175371200 -10800 1 -04}.. {-1159822800 -14400 0 -04}.. {-633816000 -10800 1 -04}.. {-622065600 -14400 0 -04}.. {-602280000 -10800 1 -04}.. {-591829200 -14400 0 -04}.. {-570744000 -10800 1 -04}.. {-560206800 -14400 0 -04}.. {-539121600 -10800 1 -04}.. {-531349200 -14400 0 -04}.. {-191361600 -10800 1 -04}.. {-184194000 -14400 0 -04}.. {-155160000 -10800 1 -04}.. {-150066000 -14400 0 -04}.. {-128894400 -10800 1 -04}.. {-121122000 -14400 0 -04}.. {-99950400 -10800 1 -04}.. {-89586000 -14400 0 -04}.. {-68414400 -10800 1 -04}.. {-57963600 -14400 0 -04}.. {499752000 -10800 1 -04}.. {511239600 -14400 0 -04}.. {530596800 -10800 1 -04}.. {540270000 -14400 0 -04}.. {562132800 -10800 1 -04}.. {571201200

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Santiago

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8871
                                                                                                                      Entropy (8bit):3.5351636359890537
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:2Xv/lxUQjzoMUBI0nuUoDK6lPlgiot7JC/k8NWse4r4g5xCEmMQUs8nCxvisEbzu:2fD9TzDC9g32+E
                                                                                                                      MD5:81FC6AFF68B1CF2EA57ED13A42B35BE1
                                                                                                                      SHA1:5889E502FBDCBCDFE9E7053625FFFBAD61FFE256
                                                                                                                      SHA-256:77CED11337F43241D57C10BA752C7104A7AF8727992E7B90A3C5D62AA15E81C7
                                                                                                                      SHA-512:7756CBAF76966F3D45883B725B791A8DD60E8329F6FE19C12029C6FEBC90D7322765A0A8BA26FC586443A902B372D0C0189426A8F99B2B535BB8F1EE74796B44
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Santiago) {.. {-9223372036854775808 -16965 0 LMT}.. {-2524504635 -16965 0 SMT}.. {-1892661435 -18000 0 -05}.. {-1688410800 -16965 0 SMT}.. {-1619205435 -14400 0 -04}.. {-1593806400 -16965 0 SMT}.. {-1335986235 -18000 0 -05}.. {-1335985200 -14400 1 -05}.. {-1317585600 -18000 0 -05}.. {-1304362800 -14400 1 -05}.. {-1286049600 -18000 0 -05}.. {-1272826800 -14400 1 -05}.. {-1254513600 -18000 0 -05}.. {-1241290800 -14400 1 -05}.. {-1222977600 -18000 0 -05}.. {-1209754800 -14400 1 -05}.. {-1191355200 -18000 0 -05}.. {-1178132400 -14400 0 -04}.. {-870552000 -18000 0 -05}.. {-865278000 -14400 0 -04}.. {-740520000 -10800 1 -03}.. {-736635600 -14400 1 -04}.. {-718056000 -18000 0 -05}.. {-713649600 -14400 0 -04}.. {-36619200 -10800 1 -04}.. {-23922000 -14400 0 -04}.. {-3355200 -10800 1 -04}.. {7527600 -14400 0 -04}.. {24465600 -10800 1 -04}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Santo_Domingo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):616
                                                                                                                      Entropy (8bit):4.330655351784895
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86290/StmdHhvCvuCY/h/uFkS/5MVvMrW//MVvMrpx/m0XVvMr4UB/47VvMr/d:5+seQvuCY5/u/REfk+xxdbUBQpu652GO
                                                                                                                      MD5:FAD0621010889164ADC4472003C9391F
                                                                                                                      SHA1:C4EE0B8D6925338D17D5745DE9D45FA3C628DFC5
                                                                                                                      SHA-256:2217E72B11A90F2D679C175DE3CC0F2FED4C280C9FF9707CFFAF118BF9A06A4B
                                                                                                                      SHA-512:90E8E5A109CD72458C7796CF0324F63E543CCD63D13A09A3DD28EDC8B2793C964C18E79FDF0C5067C5A481B7FB03E8413139C32F59DA07E9D7893378ABBBD2B3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Santo_Domingo) {.. {-9223372036854775808 -16776 0 LMT}.. {-2524504824 -16800 0 SDMT}.. {-1159773600 -18000 0 EST}.. {-100119600 -14400 1 EDT}.. {-89668800 -18000 0 EST}.. {-5770800 -16200 1 -0430}.. {4422600 -18000 0 EST}.. {25678800 -16200 1 -0430}.. {33193800 -18000 0 EST}.. {57733200 -16200 1 -0430}.. {64816200 -18000 0 EST}.. {89182800 -16200 1 -0430}.. {96438600 -18000 0 EST}.. {120632400 -16200 1 -0430}.. {127974600 -18000 0 EST}.. {152082000 -14400 0 AST}.. {975823200 -14400 0 AST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Sao_Paulo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2900
                                                                                                                      Entropy (8bit):3.6548008349990755
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5uFChlvEwR9xSSx5H4a8tf3fku+da2XUd23t8VZDG8+w/ghBPWTRz908a9zRgwun:cFIlvEwZSSxdF8tfMu+da2kdCt8VZy8n
                                                                                                                      MD5:F6B732A862659EB131C2E6FEC00E9734
                                                                                                                      SHA1:49517DF63BC5B6FEC875CE9477BBF84F4072FA31
                                                                                                                      SHA-256:0E7BA1C5A3FA3DABDAA226BFE1E8D797A3835EA554828881AB5E365EDA09B92E
                                                                                                                      SHA-512:670A5B604B5EA0F5FA15083BC1EA115B7EFD449F9EAC4518E109493591893DD3627AFC6628E0EDD1953E932E2A7AD9B5A379526548677158EC445366E4ED7166
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Sao_Paulo) {.. {-9223372036854775808 -11188 0 LMT}.. {-1767214412 -10800 0 -03}.. {-1206957600 -7200 1 -03}.. {-1191362400 -10800 0 -03}.. {-1175374800 -7200 1 -03}.. {-1159826400 -10800 0 -03}.. {-633819600 -7200 1 -03}.. {-622069200 -10800 0 -03}.. {-602283600 -7200 1 -03}.. {-591832800 -10800 0 -03}.. {-570747600 -7200 1 -03}.. {-560210400 -10800 0 -03}.. {-539125200 -7200 1 -03}.. {-531352800 -10800 0 -03}.. {-195429600 -7200 1 -02}.. {-189381600 -7200 0 -03}.. {-184197600 -10800 0 -03}.. {-155163600 -7200 1 -03}.. {-150069600 -10800 0 -03}.. {-128898000 -7200 1 -03}.. {-121125600 -10800 0 -03}.. {-99954000 -7200 1 -03}.. {-89589600 -10800 0 -03}.. {-68418000 -7200 1 -03}.. {-57967200 -10800 0 -03}.. {499748400 -7200 1 -03}.. {511236000 -10800 0 -03}.. {530593200 -7200 1 -03}.. {540266400 -10800 0 -03}.. {562129200 -7200 1 -03}

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Scoresbysund

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6839
                                                                                                                      Entropy (8bit):3.565857684485945
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:9OgtbdF7TI7nYUYXg9W/OAcv7vuShytWi0PnvLrqPoKR2XszXckXtogYN4Ezlk0X:PJr9Q7TMq+ML
                                                                                                                      MD5:D1BF579FE8123E8EE9248A51E794CC78
                                                                                                                      SHA1:BF9CB9BED143C7529719E0C1E2F88BE1AC9F8DD4
                                                                                                                      SHA-256:158BD9E4EB0B9DFF3F2D3E2DBA72F217B73423012DD33A688FD57852124E884A
                                                                                                                      SHA-512:78192AC38912021F848592D0B208CB122EFFC6DDB326540FFAADA4FD3322B7A442FD1116F408D64B8788520B46545DFAE571EA42046D62A282A97ECCD5663655
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Scoresbysund) {.. {-9223372036854775808 -5272 0 LMT}.. {-1686090728 -7200 0 -02}.. {323841600 -3600 0 -01}.. {338961600 -7200 0 -02}.. {354679200 0 0 +00}.. {370400400 -3600 0 -01}.. {386125200 0 1 +00}.. {401850000 -3600 0 -01}.. {417574800 0 1 +00}.. {433299600 -3600 0 -01}.. {449024400 0 1 +00}.. {465354000 -3600 0 -01}.. {481078800 0 1 +00}.. {496803600 -3600 0 -01}.. {512528400 0 1 +00}.. {528253200 -3600 0 -01}.. {543978000 0 1 +00}.. {559702800 -3600 0 -01}.. {575427600 0 1 +00}.. {591152400 -3600 0 -01}.. {606877200 0 1 +00}.. {622602000 -3600 0 -01}.. {638326800 0 1 +00}.. {654656400 -3600 0 -01}.. {670381200 0 1 +00}.. {686106000 -3600 0 -01}.. {701830800 0 1 +00}.. {717555600 -3600 0 -01}.. {733280400 0 1 +00}.. {749005200 -3600 0 -01}.. {764730000 0 1 +00}.. {780454800 -3600 0 -01}.. {796179600 0 1 +00}.. {8

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Shiprock

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):187
                                                                                                                      Entropy (8bit):4.888573146674231
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx06RGFfXHAIg206RORL/2IAcGEtOFBx+IAcGE6RB:SlSWB9vsM3y7+SPHAIgp+ON/290tO09Z
                                                                                                                      MD5:2FF74846ADF32AA3A9418376775B7F25
                                                                                                                      SHA1:130D7548DFFEBCE74969962E335B40299D7C5C54
                                                                                                                      SHA-256:BF4FAB3AE72CC7FA4F9E34CF0551A85C54A084CD826DF5D9CC684DE6188E84DB
                                                                                                                      SHA-512:9E52C017E595EEF1C68C8A1943416A9109D7DB4C32D25F83D05213C4200869A50E2E726894E39ECA364C558BB7F5566F6150CEA5D3CB14D1DEAE28C3D8C810E0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Denver)]} {.. LoadTimeZoneFile America/Denver..}..set TZData(:America/Shiprock) $TZData(:America/Denver)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Sitka

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8651
                                                                                                                      Entropy (8bit):3.959337076866423
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:IGCG0hPC9+j1giaJCUbtp0nFI+g/iexpCVaBnNnt61nctE1:I5G0A9DiaJCUbPI+D/iMpCIBSuk
                                                                                                                      MD5:7CCB6902749079A0496F1E2E2137448E
                                                                                                                      SHA1:3D0ED7BF1C26659F6794E26AE3869F8AB925B6DF
                                                                                                                      SHA-256:ABB08435CAE80119068A85984BFFE9C1596F4FB90F07CC01124C907E5162C189
                                                                                                                      SHA-512:0B5B2DCECC70F357DB6D590AB63E600C572EA6B3F430565EFEB29777B1901AAC55CACC7495C668F739201076B180402141BC1B2ED2357E9B4DFBABF3B122AB44
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Sitka) {.. {-9223372036854775808 53927 0 LMT}.. {-3225223727 -32473 0 LMT}.. {-2188954727 -28800 0 PST}.. {-883584000 -28800 0 PST}.. {-880207200 -25200 1 PWT}.. {-769395600 -25200 1 PPT}.. {-765385200 -28800 0 PST}.. {-757353600 -28800 0 PST}.. {-31507200 -28800 0 PST}.. {-21477600 -25200 1 PDT}.. {-5756400 -28800 0 PST}.. {9972000 -25200 1 PDT}.. {25693200 -28800 0 PST}.. {41421600 -25200 1 PDT}.. {57747600 -28800 0 PST}.. {73476000 -25200 1 PDT}.. {89197200 -28800 0 PST}.. {104925600 -25200 1 PDT}.. {120646800 -28800 0 PST}.. {126698400 -25200 1 PDT}.. {152096400 -28800 0 PST}.. {162381600 -25200 1 PDT}.. {183546000 -28800 0 PST}.. {199274400 -25200 1 PDT}.. {215600400 -28800 0 PST}.. {230724000 -25200 1 PDT}.. {247050000 -28800 0 PST}.. {262778400 -25200 1 PDT}.. {278499600 -28800 0 PST}.. {294228000 -25200 1 PDT}.. {3099492

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\St_Barthelemy

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):207
                                                                                                                      Entropy (8bit):4.932842207797733
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290txP90ppv:MByMYbpwt2907P90b
                                                                                                                      MD5:CBFA61DBF6F7459CF8D517402B29998E
                                                                                                                      SHA1:A562B29C9470DBD25480966B0462433124BA4164
                                                                                                                      SHA-256:353CDBD46BA8C7472A93E9E800A69105801F6784B22EC50A59294CDC3BE40E18
                                                                                                                      SHA-512:00B333EAA2C32EDDA8F06457AD0E10013A0147B20F504F4F1096656F731A7C1896D5ABD83E7EDBD5D4E7DA587EE9BFA796539EB1E9F4056D75D1FDF203251150
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/St_Barthelemy) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\St_Johns

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):11289
                                                                                                                      Entropy (8bit):3.8713946894934614
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:PmxVjd1cO8f7/EjUhSicN6zvfwb+8YbTE0M0J:PmrcOI7/EjiskY01J
                                                                                                                      MD5:8F068899DA75663128320633E1881333
                                                                                                                      SHA1:E9161B45D7B11A2DD6E9679AC080E84EC51561E3
                                                                                                                      SHA-256:E2917204B0C843C32051BB371CF6D0AD272C02720B9C0D913AC072C8ABE1EC64
                                                                                                                      SHA-512:2200E9B9D816157330ADAEA7383635876E5A37329B1AF9613D38BCFBE8143835837A25132A94E44A61DB8058ED98B1A33F295EA64BC1F4CE30966D52BB0B673D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/St_Johns) {.. {-9223372036854775808 -12652 0 LMT}.. {-2713897748 -12652 0 NST}.. {-1664130548 -9052 1 NDT}.. {-1650137348 -12652 0 NST}.. {-1640982548 -12652 0 NST}.. {-1632076148 -9052 1 NDT}.. {-1615145348 -12652 0 NST}.. {-1609446548 -12652 0 NST}.. {-1598650148 -9052 1 NDT}.. {-1590100148 -12652 0 NST}.. {-1567286948 -9052 1 NDT}.. {-1551565748 -12652 0 NST}.. {-1535837348 -9052 1 NDT}.. {-1520116148 -12652 0 NST}.. {-1503782948 -9052 1 NDT}.. {-1488666548 -12652 0 NST}.. {-1472333348 -9052 1 NDT}.. {-1457216948 -12652 0 NST}.. {-1440883748 -9052 1 NDT}.. {-1425767348 -12652 0 NST}.. {-1409434148 -9052 1 NDT}.. {-1394317748 -12652 0 NST}.. {-1377984548 -9052 1 NDT}.. {-1362263348 -12652 0 NST}.. {-1346534948 -9052 1 NDT}.. {-1330813748 -12652 0 NST}.. {-1314480548 -9052 1 NDT}.. {-1299364148 -12652 0 NST}.. {-1283030948 -9052 1 ND

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\St_Kitts

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):202
                                                                                                                      Entropy (8bit):4.907031043022691
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290tMp490ppv:MByMYbpwt290g490b
                                                                                                                      MD5:D521F2D9B28C5374FC3BD540C6B6F40D
                                                                                                                      SHA1:39A3D86CB71F742F33B02F50B316638815B3CD4E
                                                                                                                      SHA-256:EDB9457A7C64E47062BDC6458FD3BCFCD6C37820F1A2BC89DFE99ED77355011F
                                                                                                                      SHA-512:05C1BE92550A962904ED3BB7DECCAC16FCB54D258F24F2AEDF755FCC44E4FEF5F86AB663945809F5D7AFA64178E807BBDAE77048270ED516DFF2C7720A746D52
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/St_Kitts) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\St_Lucia

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):202
                                                                                                                      Entropy (8bit):4.9037013606484905
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290tY90ppv:MByMYbpwt290a90b
                                                                                                                      MD5:9392E5A7BD198B0308F9271E4C7E59B2
                                                                                                                      SHA1:A902440920A0318BC930957C74804A9A51EF7818
                                                                                                                      SHA-256:6727A509BB937CB3446D41B57826DE70C7028E96F088AB5B7F803BEAA18279E8
                                                                                                                      SHA-512:6DA1EAC390E72905DF1A14D82362B499D20FAD6D85F3DF116AE01E566D5D19C6D16E56DA72C458BB6143345EF45F35A53B245488C641D80BFBA200B16A59719E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/St_Lucia) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\St_Thomas

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):203
                                                                                                                      Entropy (8bit):4.919272465019375
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290tXIMFJ490ppv:MByMYbpwt290tJ490b
                                                                                                                      MD5:49D0C8DAFCA053C9967EDCC4C0A484B1
                                                                                                                      SHA1:7B4999D4B9AD93306BD411DF2946D741EC597770
                                                                                                                      SHA-256:974AEED3D79124B50265C83D84F23CBE4F0328D00C75F42DD3ABC5D4C0A78DE1
                                                                                                                      SHA-512:378E3657B26C5A039FF82ECCAC7797FF45CBC6479596629B3048164EE4E035F4ECFC557AA9EAF6848E78999B4FF8C63E53C7163BDF6F626ED6111004490D6F80
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/St_Thomas) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\St_Vincent

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):204
                                                                                                                      Entropy (8bit):4.909053768717241
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290tzb+Q90ppv:MByMYbpwt290xyQ90b
                                                                                                                      MD5:6CFB23E7164605CDE380FB7C4D88DF11
                                                                                                                      SHA1:CC513B29AD7B59E600DBCBC97927EB632558F657
                                                                                                                      SHA-256:6B19404D295964EF66F47802836BB728FCE8E6481115797C0B5F200C354D7C8A
                                                                                                                      SHA-512:728987D0925B6E12E8A220920BEDF94180880E78F3F08F6AC740E6304B22D446846068CEA499F61E7032ADB2E700CE31954921D478C9A8B6CB599E05A6292EA3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/St_Vincent) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Swift_Current

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):874
                                                                                                                      Entropy (8bit):4.253846650171654
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86290hEbmdHLCvYX4Q19xRv0+RmwPj+uLkQOzL3+ORL4FXgenM7RSslKA1PyKp:5zeOvT4xuyqoYaAxt7l
                                                                                                                      MD5:C91F801CC5E9F78B966D1DF2259C38A8
                                                                                                                      SHA1:D29C970CBFC74684D46AAAD543B73B520775632C
                                                                                                                      SHA-256:939B25C9412B9E25D73F552E87826999FC8C929770E66491D1E4530046D3E758
                                                                                                                      SHA-512:093378E61DE9310F9C48170CBB0FDBD3C79E184DA1489F759B20BCE410006A9D5A793C82E79A46E0AFF0DAA47D9DBAFD605959E491BA9ED4E55D26F293642D32
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Swift_Current) {.. {-9223372036854775808 -25880 0 LMT}.. {-2030201320 -25200 0 MST}.. {-1632063600 -21600 1 MDT}.. {-1615132800 -25200 0 MST}.. {-880210800 -21600 1 MWT}.. {-769395600 -21600 1 MPT}.. {-765388800 -25200 0 MST}.. {-747241200 -21600 0 MDT}.. {-732729600 -25200 0 MST}.. {-715791600 -21600 1 MDT}.. {-702489600 -25200 0 MST}.. {-684342000 -21600 1 MDT}.. {-671040000 -25200 0 MST}.. {-652892400 -21600 1 MDT}.. {-639590400 -25200 0 MST}.. {-631126800 -25200 0 MST}.. {-400086000 -21600 1 MDT}.. {-384364800 -25200 0 MST}.. {-337186800 -21600 1 MDT}.. {-321465600 -25200 0 MST}.. {-305737200 -21600 1 MDT}.. {-292435200 -25200 0 MST}.. {-273682800 -21600 1 MDT}.. {-260985600 -25200 0 MST}.. {73472400 -21600 0 CST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Tegucigalpa

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):341
                                                                                                                      Entropy (8bit):4.638828647226646
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2903fDm2OHskeoHxbV1ULhgdrV/uF+IcmJ3/uF+ivi9/uF+SNv:MB862903LmdHsVCn1ULSB/uF+QV/uF+q
                                                                                                                      MD5:4C4034ABAB9E4804CCB23E51694044C9
                                                                                                                      SHA1:7DB24CE83AB2C07E6F6784D27C4E3AC0F149D080
                                                                                                                      SHA-256:1F0503579B0DDDBAF88814A278127D9CD7019EDD3C35F4CBFC0EF11C0EDAFE5B
                                                                                                                      SHA-512:0BC366CD3AB2E1388D11770DC8DEC1FC94C48FDC846ABB6C487828BF9FF15CD9A1C15B33E08F6E48B7F4A6F2AD1617FF12B359784CA4C32256D72422E6825105
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Tegucigalpa) {.. {-9223372036854775808 -20932 0 LMT}.. {-1538503868 -21600 0 CST}.. {547020000 -18000 1 CDT}.. {559717200 -21600 0 CST}.. {578469600 -18000 1 CDT}.. {591166800 -21600 0 CST}.. {1146981600 -18000 1 CDT}.. {1154926800 -21600 0 CST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Thule

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6890
                                                                                                                      Entropy (8bit):3.8331465442823704
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:mJInJuFW4ng2CEBJuQaeEy9P19OBYEi/B51B7/Bm6BTd69xK7KjhVbHyR3h1gOZM:miFCC
                                                                                                                      MD5:D93B62D5F7EEBC28AC047BED2307CAE8
                                                                                                                      SHA1:8B3E02240A01B5AA42D30E86005E880916432227
                                                                                                                      SHA-256:7FB0CBB101D3B6FBB6B9DAD5446BBF9E6AEC65EC38472739E604F68F6AA9AB7B
                                                                                                                      SHA-512:3648106F4DF84CFD94AAD4E9430F8D3BBCB38A9196DE9A59246DFBBC170FADBF106DD1FD08FE2E4F7319BFFB1C2607E4F5D563C222CED8267483D1A0C388CCE5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Thule) {.. {-9223372036854775808 -16508 0 LMT}.. {-1686079492 -14400 0 AST}.. {670399200 -10800 1 ADT}.. {686120400 -14400 0 AST}.. {701848800 -10800 1 ADT}.. {717570000 -14400 0 AST}.. {733903200 -10800 1 ADT}.. {752043600 -14400 0 AST}.. {765352800 -10800 1 ADT}.. {783493200 -14400 0 AST}.. {796802400 -10800 1 ADT}.. {814942800 -14400 0 AST}.. {828856800 -10800 1 ADT}.. {846392400 -14400 0 AST}.. {860306400 -10800 1 ADT}.. {877842000 -14400 0 AST}.. {891756000 -10800 1 ADT}.. {909291600 -14400 0 AST}.. {923205600 -10800 1 ADT}.. {941346000 -14400 0 AST}.. {954655200 -10800 1 ADT}.. {972795600 -14400 0 AST}.. {986104800 -10800 1 ADT}.. {1004245200 -14400 0 AST}.. {1018159200 -10800 1 ADT}.. {1035694800 -14400 0 AST}.. {1049608800 -10800 1 ADT}.. {1067144400 -14400 0 AST}.. {1081058400 -10800 1 ADT}.. {1099198800 -14400 0 AST}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Thunder_Bay

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):193
                                                                                                                      Entropy (8bit):4.838326820531248
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7RQtHAIgpRQPN/2903MA90RQk:MByMYzp4t2903MA90D
                                                                                                                      MD5:D68B69B05D8743977BA4815B8AFE8E92
                                                                                                                      SHA1:364796989B6DD0110F1D85A8844419EB49772EC0
                                                                                                                      SHA-256:845101F85A6DAF9DEB58A075473F9E541A0B68461677779B1461DE59E3FA3D18
                                                                                                                      SHA-512:DEAA60DDF1521C269D7D386A7FCC40C8FAFB00EEA6764E6B23F4C65B8F6F596B3D5D2D3F6F7B1C22016C530B8789839F8052FDE1C2794C9F9C700C46DC8A3AEE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Toronto)]} {.. LoadTimeZoneFile America/Toronto..}..set TZData(:America/Thunder_Bay) $TZData(:America/Toronto)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Tijuana

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8755
                                                                                                                      Entropy (8bit):3.8521303835918115
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:CuS6mjvZk53mtw+N6IkWq/WHQlb/RYRWVIKr7cRRL:26jFOzN6IkWq/WHQt/RY4yP
                                                                                                                      MD5:2F9983FE6248F3BF18ADE00192F4B458
                                                                                                                      SHA1:73F7302C914E442FC50DD4BFF3C57FD310E6455C
                                                                                                                      SHA-256:D7C5CB477A591931FF03C794C84EDB2319760C0B70047B325382F211E28648E3
                                                                                                                      SHA-512:B1F66008F2B62D4E1B59ED1A78A9E4F5D06BE074EB3B2466BDE3C9ED98DE96AD03FACDB8EDA6EE8F8EE890860DE6011F2BB364DE8C1276B31F37C9C525F4EC3F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Tijuana) {.. {-9223372036854775808 -28084 0 LMT}.. {-1514739600 -25200 0 MST}.. {-1451667600 -28800 0 PST}.. {-1343062800 -25200 0 MST}.. {-1234803600 -28800 0 PST}.. {-1222963200 -25200 1 PDT}.. {-1207242000 -28800 0 PST}.. {-873820800 -25200 1 PWT}.. {-769395600 -25200 1 PPT}.. {-761677200 -28800 0 PST}.. {-686073600 -25200 1 PDT}.. {-661539600 -28800 0 PST}.. {-504892800 -28800 0 PST}.. {-495039600 -25200 1 PDT}.. {-481734000 -28800 0 PST}.. {-463590000 -25200 1 PDT}.. {-450284400 -28800 0 PST}.. {-431535600 -25200 1 PDT}.. {-418230000 -28800 0 PST}.. {-400086000 -25200 1 PDT}.. {-386780400 -28800 0 PST}.. {-368636400 -25200 1 PDT}.. {-355330800 -28800 0 PST}.. {-337186800 -25200 1 PDT}.. {-323881200 -28800 0 PST}.. {-305737200 -25200 1 PDT}.. {-292431600 -28800 0 PST}.. {-283968000 -28800 0 PST}.. {189331200 -28800 0 PST}.. {19

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Toronto

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):11248
                                                                                                                      Entropy (8bit):3.8061065077303926
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:lBew85RnK1a8phYBNXEtCt/cL1BRP0HY2iU7KKdFL6Aa2K4gSLf8e:lBq5RnK1a8phYTXEItON0HY2iUmUFLqU
                                                                                                                      MD5:0D906EC3F658730131A65C5A770D885F
                                                                                                                      SHA1:BFA72C43BCE0F37F795E974457FBE4A664687B38
                                                                                                                      SHA-256:5A98C6BEDDA4DF608051D702A8E037093A8068E1B85F8F55D42B4468F45662A5
                                                                                                                      SHA-512:CC634DAF4EEC7F57E3AB0C20D891380A7F96DE79602A7B57C6C2BF229DD76A69B399A689FA6D0675380B1432C2115B0C8577DC49C3C9E567A08CAD6FCC3599BC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Toronto) {.. {-9223372036854775808 -19052 0 LMT}.. {-2366736148 -18000 0 EST}.. {-1632070800 -14400 1 EDT}.. {-1615140000 -18000 0 EST}.. {-1609441200 -18000 0 EST}.. {-1601753400 -14400 1 EDT}.. {-1583697600 -18000 0 EST}.. {-1567357200 -14400 1 EDT}.. {-1554667200 -18000 0 EST}.. {-1534698000 -14400 1 EDT}.. {-1524074400 -18000 0 EST}.. {-1503248400 -14400 1 EDT}.. {-1492365600 -18000 0 EST}.. {-1471798800 -14400 1 EDT}.. {-1460916000 -18000 0 EST}.. {-1440954000 -14400 1 EDT}.. {-1428861600 -18000 0 EST}.. {-1409504400 -14400 1 EDT}.. {-1397412000 -18000 0 EST}.. {-1378054800 -14400 1 EDT}.. {-1365962400 -18000 0 EST}.. {-1346605200 -14400 1 EDT}.. {-1333908000 -18000 0 EST}.. {-1315155600 -14400 1 EDT}.. {-1301853600 -18000 0 EST}.. {-1283706000 -14400 1 EDT}.. {-1270404000 -18000 0 EST}.. {-1252256400 -14400 1 EDT}.. {-1238954400

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Tortola

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):201
                                                                                                                      Entropy (8bit):4.864308662322047
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290RRKl290ppv:MByMYbpwt290V90b
                                                                                                                      MD5:21D152A2359A4EFDE6DCC304F16096F3
                                                                                                                      SHA1:961B3CFB351615604981114A115D396D1F2006A2
                                                                                                                      SHA-256:46A236EC38F3A122D414208328A462B2A937392ECC6C55F673FB7A402F118D96
                                                                                                                      SHA-512:04A2AD6DDC2E7B0D3F95DA1C731FF553F8CBC0DD6BDFC36FB2EDCE755612103E3B4EA6F3AB7FE63CA60976538EFABF40827539DFC35B7E83129BD48471FE514B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Tortola) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Vancouver

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9815
                                                                                                                      Entropy (8bit):3.8481935495337356
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:sOR864CjSAG5a9bFzN6IkWq/WHQt/RY4yP:sO664CjSAGYbGBt/M
                                                                                                                      MD5:9423BC81647BC4C37888860CE0518BBB
                                                                                                                      SHA1:37E6E6554576D1DD36C3494EAF0BD169003D870D
                                                                                                                      SHA-256:00B5FB8F37DFF43925C501AEAB039F39F058E002572C4203286317046CC1D700
                                                                                                                      SHA-512:1830CA2B62B7CA6EEB5A924D2148925DF7DD87A7B93B21F4F023E4678EF42DC20BFF57F702923E10F4382FE6757323D21414D094E99FEEB43316DE4A7E5A909E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Vancouver) {.. {-9223372036854775808 -29548 0 LMT}.. {-2713880852 -28800 0 PST}.. {-1632060000 -25200 1 PDT}.. {-1615129200 -28800 0 PST}.. {-880207200 -25200 1 PWT}.. {-769395600 -25200 1 PPT}.. {-765385200 -28800 0 PST}.. {-747237600 -25200 1 PDT}.. {-733935600 -28800 0 PST}.. {-715788000 -25200 1 PDT}.. {-702486000 -28800 0 PST}.. {-684338400 -25200 1 PDT}.. {-671036400 -28800 0 PST}.. {-652888800 -25200 1 PDT}.. {-639586800 -28800 0 PST}.. {-620834400 -25200 1 PDT}.. {-608137200 -28800 0 PST}.. {-589384800 -25200 1 PDT}.. {-576082800 -28800 0 PST}.. {-557935200 -25200 1 PDT}.. {-544633200 -28800 0 PST}.. {-526485600 -25200 1 PDT}.. {-513183600 -28800 0 PST}.. {-495036000 -25200 1 PDT}.. {-481734000 -28800 0 PST}.. {-463586400 -25200 1 PDT}.. {-450284400 -28800 0 PST}.. {-431532000 -25200 1 PDT}.. {-418230000 -28800 0 PST}.. {-4

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Virgin

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):200
                                                                                                                      Entropy (8bit):4.914983069791254
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7p5oeSHAIgppON/290RXgr490ppv:MByMYbpwt290xg090b
                                                                                                                      MD5:9F7DA15BE387B8F7DEC5DFFE069F3505
                                                                                                                      SHA1:D298B963B0048E9ECA3BC7B85248506AB1388479
                                                                                                                      SHA-256:561D9D04B0CE0F96A9C351C7D5C30AA1D5A42A3D70066CD9AF0DA6CBC5388DBE
                                                                                                                      SHA-512:606C2A918633C74BD2954D39B00EFA2CD9DA852BC7034F129A04258A65DC74942FA0826E9BC6E4433926E7F1375612554B04845077E434D0CD3BD15832DC6B95
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:America/Virgin) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Whitehorse

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2971
                                                                                                                      Entropy (8bit):3.9652694533791917
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5CeFvmpn4nRfngnSSXRwEg7MkwY7Twbg7Uwr70vwHg7b6wa7gAHwc7/wzZg7ywJP:5BmCKpj/AOZFCARCeQbvb5wxMN6Ix
                                                                                                                      MD5:2F2D39B5FB844E170FA7B6AF11B948CA
                                                                                                                      SHA1:3D89672134D979FCF65225A58249380D9C8A4A65
                                                                                                                      SHA-256:8E0BC71BD7146145DDE3C064AE205DF08124FE2402853A9655B0EB799E90F31F
                                                                                                                      SHA-512:6C046D1133C8CCF697C8FB553A1F539948F71FA80BA447B87AA8D1D1D7113B32A6B764C5C1734C615319A27961B6116FCA087EB571869119BE87656FCA351498
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Whitehorse) {.. {-9223372036854775808 -32412 0 LMT}.. {-2188997988 -32400 0 YST}.. {-1632056400 -28800 1 YDT}.. {-1615125600 -32400 0 YST}.. {-1596978000 -28800 1 YDT}.. {-1583164800 -32400 0 YST}.. {-880203600 -28800 1 YWT}.. {-769395600 -28800 1 YPT}.. {-765381600 -32400 0 YST}.. {-147884400 -25200 1 YDDT}.. {-131554800 -32400 0 YST}.. {315561600 -28800 0 PST}.. {325677600 -25200 1 PDT}.. {341398800 -28800 0 PST}.. {357127200 -25200 1 PDT}.. {372848400 -28800 0 PST}.. {388576800 -25200 1 PDT}.. {404902800 -28800 0 PST}.. {420026400 -25200 1 PDT}.. {436352400 -28800 0 PST}.. {452080800 -25200 1 PDT}.. {467802000 -28800 0 PST}.. {483530400 -25200 1 PDT}.. {499251600 -28800 0 PST}.. {514980000 -25200 1 PDT}.. {530701200 -28800 0 PST}.. {544615200 -25200 1 PDT}.. {562150800 -28800 0 PST}.. {576064800 -25200 1 PDT}.. {594205200 -28800

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Winnipeg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9695
                                                                                                                      Entropy (8bit):3.8209220355628766
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:pOEhc8/rvNZONqXXyIjNA604qSScBgN+4ctDzIVQ/c/3hNxTh:pY8DvbO+A604qSBgI7DBch
                                                                                                                      MD5:E8DB00D2B99B308018F4F5E48AC47C3A
                                                                                                                      SHA1:8841467CB264DC9F87FABAADBE90EE2C8DACC80F
                                                                                                                      SHA-256:F3FC5F6D93D1D9EB0F3DED33873F33C47F841797D96439966F8E0A5A189941FA
                                                                                                                      SHA-512:5D684B07332ED53F9F8CB71FFF3B6D0F848426A5E4D9E7DA84E49E358C666F1C3BB9CF21352D939B35B558FC691839E24BC84656317F73C768B474AF5AC480EB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Winnipeg) {.. {-9223372036854775808 -23316 0 LMT}.. {-2602258284 -21600 0 CST}.. {-1694368800 -18000 1 CDT}.. {-1681671600 -21600 0 CST}.. {-1632067200 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1029686400 -18000 1 CDT}.. {-1018198800 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-746035200 -18000 1 CDT}.. {-732733200 -21600 0 CST}.. {-715795200 -18000 1 CDT}.. {-702493200 -21600 0 CST}.. {-684345600 -18000 1 CDT}.. {-671043600 -21600 0 CST}.. {-652896000 -18000 1 CDT}.. {-639594000 -21600 0 CST}.. {-620755200 -18000 1 CDT}.. {-607626000 -21600 0 CST}.. {-589392000 -18000 1 CDT}.. {-576090000 -21600 0 CST}.. {-557942400 -18000 1 CDT}.. {-544640400 -21600 0 CST}.. {-526492800 -18000 1 CDT}.. {-513190800 -21600 0 CST}.. {-495043200 -18000 1 CDT}.. {-481741200 -21600 0 CST}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Yakutat

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8683
                                                                                                                      Entropy (8bit):3.957710943557426
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:po1acs6yyyxC9+j1giaJCUbtp0nFI+g/iexpCVaBnNnt61nctE1:p4acsW9DiaJCUbPI+D/iMpCIBSuk
                                                                                                                      MD5:18EC35FCEC15CE9304818E22222411EF
                                                                                                                      SHA1:F4A04B3E2B5F55C9582F578C3142E706C4EB6BD6
                                                                                                                      SHA-256:79B44F245D86A4EC299D1A9A2EDB2AB92D50AB5A7C1C03759D283AC4070F9005
                                                                                                                      SHA-512:40AC47AC278DF22C7ECFF568456E7C3767B38701B9A2E2639C2201DC53CDD794CF7521BCB773A8AF2A8D4A034D3BBD35BF9788FB5B4E4D51A7A139B3B3353479
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Yakutat) {.. {-9223372036854775808 52865 0 LMT}.. {-3225223727 -33535 0 LMT}.. {-2188953665 -32400 0 YST}.. {-883580400 -32400 0 YST}.. {-880203600 -28800 1 YWT}.. {-769395600 -28800 1 YPT}.. {-765381600 -32400 0 YST}.. {-757350000 -32400 0 YST}.. {-31503600 -32400 0 YST}.. {-21474000 -28800 1 YDT}.. {-5752800 -32400 0 YST}.. {9975600 -28800 1 YDT}.. {25696800 -32400 0 YST}.. {41425200 -28800 1 YDT}.. {57751200 -32400 0 YST}.. {73479600 -28800 1 YDT}.. {89200800 -32400 0 YST}.. {104929200 -28800 1 YDT}.. {120650400 -32400 0 YST}.. {126702000 -28800 1 YDT}.. {152100000 -32400 0 YST}.. {162385200 -28800 1 YDT}.. {183549600 -32400 0 YST}.. {199278000 -28800 1 YDT}.. {215604000 -32400 0 YST}.. {230727600 -28800 1 YDT}.. {247053600 -32400 0 YST}.. {262782000 -28800 1 YDT}.. {278503200 -32400 0 YST}.. {294231600 -28800 1 YDT}.. {30995

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\America\Yellowknife

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7737
                                                                                                                      Entropy (8bit):3.8656193813344064
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:42GaLV911sF7Lv/PCewtA8CzSPyDLbrcUia:uPlLv/PCenJzS6cy
                                                                                                                      MD5:A7606AE597027C26BC90702B2BCC80E9
                                                                                                                      SHA1:7B2AB2E0A23B8D770D1305A171DBCCE2D471EF2F
                                                                                                                      SHA-256:B33838F12640C64BA4F10F50657EC4D8D5B30FD226DA4ACA21B169B53AD30576
                                                                                                                      SHA-512:B18711B4110D6DB0CC7A6EF66639E1B38323F0B61DA4F5287A51BC9EC8534133568C6D3E4F18F6328564DAD291E0CA707768DE4478DD502A40FFD189C08114A1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:America/Yellowknife) {.. {-9223372036854775808 0 0 -00}.. {-1104537600 -25200 0 MST}.. {-880210800 -21600 1 MWT}.. {-769395600 -21600 1 MPT}.. {-765388800 -25200 0 MST}.. {-147891600 -18000 1 MDDT}.. {-131562000 -25200 0 MST}.. {315558000 -25200 0 MST}.. {325674000 -21600 1 MDT}.. {341395200 -25200 0 MST}.. {357123600 -21600 1 MDT}.. {372844800 -25200 0 MST}.. {388573200 -21600 1 MDT}.. {404899200 -25200 0 MST}.. {420022800 -21600 1 MDT}.. {436348800 -25200 0 MST}.. {452077200 -21600 1 MDT}.. {467798400 -25200 0 MST}.. {483526800 -21600 1 MDT}.. {499248000 -25200 0 MST}.. {514976400 -21600 1 MDT}.. {530697600 -25200 0 MST}.. {544611600 -21600 1 MDT}.. {562147200 -25200 0 MST}.. {576061200 -21600 1 MDT}.. {594201600 -25200 0 MST}.. {607510800 -21600 1 MDT}.. {625651200 -25200 0 MST}.. {638960400 -21600 1 MDT}.. {657100800 -25200 0 MST}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Antarctica\Casey

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):478
                                                                                                                      Entropy (8bit):4.205595904143294
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2L09xSDm2OHE5QMFUH+KNUoTVsBEE0ZZICxZbDtVby:MB862LcUmdHE5QMFi+KdTVPZIwXDy
                                                                                                                      MD5:7D8132A23238C14CCEDD520BBEB49F77
                                                                                                                      SHA1:A8BAE9269DAA2AC535B292E1AE8632B451A0BBA5
                                                                                                                      SHA-256:04247ACB2B4FA126D13F4573FF74D15A89CF42B2C5CD7E688D5BB1C1FD3972BF
                                                                                                                      SHA-512:74FCB14037B0AE11A95B036791D69037590F8EC7F09D90A866E6A6CAAD6D58E4EC3723A3BB356FBF0E25ED1239A5820A8513EBF6653578E4BFB8988D6D20EF13
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Antarctica/Casey) {.. {-9223372036854775808 0 0 -00}.. {-31536000 28800 0 +08}.. {1255802400 39600 0 +11}.. {1267714800 28800 0 +08}.. {1319738400 39600 0 +11}.. {1329843600 28800 0 +08}.. {1477065600 39600 0 +11}.. {1520701200 28800 0 +08}.. {1538856000 39600 0 +11}.. {1552752000 28800 0 +08}.. {1570129200 39600 0 +11}.. {1583596800 28800 0 +08}.. {1601740860 39600 0 +11}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Antarctica\Davis

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):324
                                                                                                                      Entropy (8bit):4.360007144607037
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2L0mDm2OHEfwz0/MVSYyF/KZ7VoX/MVSYyF/VpVQVF9RXhNXSMVSYy6:MB862LVmdHEIjsF/KZOksF/Vp6v9RRFl
                                                                                                                      MD5:97AA556F7EF06786B76316133794F4E9
                                                                                                                      SHA1:B3CDA284DE80987B954E2CC9BFA3ED33462CDD4F
                                                                                                                      SHA-256:2F36D2E13D7E251322B7A7B30F39645393525CEB49A2B5C26F27797F2AAF4D7F
                                                                                                                      SHA-512:14C6F17252C2AC89D86FE00BD8A8934D627C85478B0AB08AB6237988922D18616B00878498FFFC0E1978308BC6D775E2DC3ADCEF827AB0A06B214BE4DDABAB52
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Antarctica/Davis) {.. {-9223372036854775808 0 0 -00}.. {-409190400 25200 0 +07}.. {-163062000 0 0 -00}.. {-28857600 25200 0 +07}.. {1255806000 18000 0 +05}.. {1268251200 25200 0 +07}.. {1319742000 18000 0 +05}.. {1329854400 25200 0 +07}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Antarctica\DumontDUrville

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):214
                                                                                                                      Entropy (8bit):4.938579775653117
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3yci/452HAIgObi/4oA6N/2L0/3Zp5/4pv:MByMdNXiU5t2Lkwv
                                                                                                                      MD5:CC22302B9FAE52E36A2A35C0361E774B
                                                                                                                      SHA1:45CFD95A5821C4C4FDF2E1519F08029FF0BE664B
                                                                                                                      SHA-256:96F2AB9A9FFCD10598FDF105F68460CC4B4EBC1F18054D1BC8E39DF6AD24D1AC
                                                                                                                      SHA-512:FC9084D7B16EAA985681762F2658D32C77EE186D8D3C7225093CC5CB4A6AEB74A3D0A41A904EB6C8AEF7DB110A89497BAFAF811BBC26103F96E5E1D4D4E1002A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Port_Moresby)]} {.. LoadTimeZoneFile Pacific/Port_Moresby..}..set TZData(:Antarctica/DumontDUrville) $TZData(:Pacific/Port_Moresby)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Antarctica\Macquarie

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8447
                                                                                                                      Entropy (8bit):3.850137279218428
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:s1qigkx6WsYyS391QiAmcO38EJ8i/V9cYgCqMEjKeIZ3wQb25Ly04:s1q05h1QiAmcOM6e0pj
                                                                                                                      MD5:81C612A1544910544173687C416841C6
                                                                                                                      SHA1:4A707B403F0B9556A3D3D50B08BE0F56660F3F0B
                                                                                                                      SHA-256:C4EA7F1C0B5A0FAE653419F1C6D058BDDD745A3CDBA11900005C157DF23DDC01
                                                                                                                      SHA-512:122E2DC3D8D61CCDB83E03C9487DD29AABE7AB3F71FE4F6315209AF0BBCFD01FBDC3A1E3F6D910FB0D690378DF852170A9819D8C1EF96BE6BC8C0811BFB453A9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Antarctica/Macquarie) {.. {-9223372036854775808 0 0 -00}.. {-2214259200 36000 0 AEST}.. {-1680508800 39600 1 AEDT}.. {-1669892400 39600 0 AEDT}.. {-1665388800 36000 0 AEST}.. {-1601719200 0 0 -00}.. {-94730400 36000 0 AEST}.. {-71136000 39600 1 AEDT}.. {-55411200 36000 0 AEST}.. {-37267200 39600 1 AEDT}.. {-25776000 36000 0 AEST}.. {-5817600 39600 1 AEDT}.. {5673600 36000 0 AEST}.. {25632000 39600 1 AEDT}.. {37728000 36000 0 AEST}.. {57686400 39600 1 AEDT}.. {67968000 36000 0 AEST}.. {89136000 39600 1 AEDT}.. {100022400 36000 0 AEST}.. {120585600 39600 1 AEDT}.. {131472000 36000 0 AEST}.. {152035200 39600 1 AEDT}.. {162921600 36000 0 AEST}.. {183484800 39600 1 AEDT}.. {194976000 36000 0 AEST}.. {215539200 39600 1 AEDT}.. {226425600 36000 0 AEST}.. {246988800 39600 1 AEDT}.. {257875200 36000 0 AEST}.. {278438400 39600 1 AEDT}.. {28932480

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Antarctica\Mawson

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):180
                                                                                                                      Entropy (8bit):4.7511104559982
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2L0GRHEzyeyFNMXGm2OHvavFeVU/VPKVVFSTVF9svUX0VQr:SlSWB9eg/2L0zyfXDm2OHEVy/Ur9s/Vg
                                                                                                                      MD5:7A2AD9BD8F8DEE5C600CABF2D5E9D07B
                                                                                                                      SHA1:CF5D230A29946B7FA3ECD8EB99F1EF1BF0FA5B50
                                                                                                                      SHA-256:ACA533B8BC82296373EDEC82F6E0AA45A34D817C7C18FF5E8E94B81C0BD30259
                                                                                                                      SHA-512:95F8FA68735E88AB15C403191928FA4AA5D1628453BE64B87EE7E8DF9F35FB5DA74A3CED5F5289A13D84A8A12BBB86734E578059CA8B6405399CFF5E33C9384C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Antarctica/Mawson) {.. {-9223372036854775808 0 0 -00}.. {-501206400 21600 0 +06}.. {1255809600 18000 0 +05}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Antarctica\McMurdo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):195
                                                                                                                      Entropy (8bit):4.880387042335617
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3ycqXHAIgObOvRN/2L0z6/fy:MByMdTiYt2LrK
                                                                                                                      MD5:88EE32AE5C538AEBFDE2D1D944ED5B2B
                                                                                                                      SHA1:55E7234E6FFF298182A6C8889A9F506CDCE7C959
                                                                                                                      SHA-256:E9D99293C5B275D8E0D7B066084177EDF670D5B52B81E87608BAB02025F33155
                                                                                                                      SHA-512:45A3EA146CA719BA6F22E99EAA57AC1DED1C762E19BDFBA176E5FEAC36EC58586F771572DD16ACE09E660F97DEB91A701BA1B1F1AEF3BD8688F3451C0772420A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Auckland)]} {.. LoadTimeZoneFile Pacific/Auckland..}..set TZData(:Antarctica/McMurdo) $TZData(:Pacific/Auckland)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Antarctica\Palmer

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2613
                                                                                                                      Entropy (8bit):3.6082359166067905
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5fzJS6S4wRSenSOaf7HSKSkSqS7STslSmSMSCSxygSiXS/SrS+S9SfShS7SoSlSL:jdeRtnxaf7HlPlgiot7JC/Xk8NWse4rf
                                                                                                                      MD5:BDFA5908E735F866FEC16F6B481AD385
                                                                                                                      SHA1:524AEE21BB97D923A8812A5722AF2FEA43B4D971
                                                                                                                      SHA-256:1637381A20E9D5C6A530F110BDB08D9515E675C9206F000407D8511074948E61
                                                                                                                      SHA-512:3D65C7941BA15A698264848F9B6F43ED5B63D4CF86D495334E8E1DC381D63435E9424BBBC389229693D20044FDB8425A7CC805AB5EA055F59D3E0DD4C7AC2A28
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Antarctica/Palmer) {.. {-9223372036854775808 0 0 -00}.. {-157766400 -14400 0 -04}.. {-152654400 -14400 0 -04}.. {-132955200 -10800 1 -04}.. {-121122000 -14400 0 -04}.. {-101419200 -10800 1 -04}.. {-86821200 -14400 0 -04}.. {-71092800 -10800 1 -04}.. {-54766800 -14400 0 -04}.. {-39038400 -10800 1 -04}.. {-23317200 -14400 0 -04}.. {-7588800 -10800 0 -03}.. {128142000 -7200 1 -03}.. {136605600 -10800 0 -03}.. {389070000 -14400 0 -04}.. {403070400 -10800 1 -04}.. {416372400 -14400 0 -04}.. {434520000 -10800 1 -04}.. {447822000 -14400 0 -04}.. {466574400 -10800 1 -04}.. {479271600 -14400 0 -04}.. {498024000 -10800 1 -04}.. {510721200 -14400 0 -04}.. {529473600 -10800 1 -04}.. {545194800 -14400 0 -04}.. {560923200 -10800 1 -04}.. {574225200 -14400 0 -04}.. {592372800 -10800 1 -04}.. {605674800 -14400 0 -04}.. {624427200 -10800 1 -04}.. {63712

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Antarctica\Rothera

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):151
                                                                                                                      Entropy (8bit):4.829975802206526
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2L0GRHEsKRsMXGm2OHvavFN/H3VVFVGAvFv:SlSWB9eg/2L0rRsDm2OHEN/VVFAKV
                                                                                                                      MD5:C330982049AA053DA62B926627D2F2FA
                                                                                                                      SHA1:050CE68265F1A183F0173C825AC59EAE8B6AB9EB
                                                                                                                      SHA-256:943F10D8E836773F0B7ACD13ED8422C0B27813C7BBE0B09B57697D1D70D21ECE
                                                                                                                      SHA-512:DE9953D0E505D6B110C0CC4E756B5B0311646C9CA4703A33B92147D36CFB4C288D73851E6766CE1432F41AB51B5D0A1D58680BDB4E28F067E1D36F670B4A192E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Antarctica/Rothera) {.. {-9223372036854775808 0 0 -00}.. {218246400 -10800 0 -03}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Antarctica\South_Pole

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):198
                                                                                                                      Entropy (8bit):4.906125935761354
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3ycqXHAIgObOvRN/2L0tlo+ply:MByMdTiYt2LMq+p8
                                                                                                                      MD5:8095A3749DBDE05377836D74A4EEFE33
                                                                                                                      SHA1:6987CA972B63AE26A65654961588D51D3EF2166C
                                                                                                                      SHA-256:88057832175BB642B23FC99F788A2F78A24005CF1F84A7B1B5E8C84FB8F4D4C1
                                                                                                                      SHA-512:9066104C9C16D2AB88523D651C74CE268468E093A497D128D0D12A986BD62DBC1388A56ED1737C2AFACF04185CF06FD0EE66797A3390B2F0E1EB08A4D92AAFAD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Auckland)]} {.. LoadTimeZoneFile Pacific/Auckland..}..set TZData(:Antarctica/South_Pole) $TZData(:Pacific/Auckland)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Antarctica\Syowa

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):178
                                                                                                                      Entropy (8bit):4.871844665431957
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8t14XHAIgNsM13oOARL/2L0GRHEtWlFBQWFK81Fn:SlSWB9vsM3yN14HAIgaM1YOAN/2L0tQB
                                                                                                                      MD5:CA52057130DCF506D11A7CC069F4FBA3
                                                                                                                      SHA1:2C38B7E7872BB41C3569DFCB539C3EC3AAE24FDD
                                                                                                                      SHA-256:2488805DE4FEA42305689F679F1AE2D80B1E934E657FEA329AD39A82DAC63022
                                                                                                                      SHA-512:B19D409870939C8F0834C6C028239E010EE5128DFA6E97D4903BECA229B04FE530EA376B936767D9BFE21709720C1791289D8E3622B17C18F2680B0670794A02
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Riyadh)]} {.. LoadTimeZoneFile Asia/Riyadh..}..set TZData(:Antarctica/Syowa) $TZData(:Asia/Riyadh)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Antarctica\Troll

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5370
                                                                                                                      Entropy (8bit):3.5134546899897146
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:YveRdmbxnKIJqU9XThVIsopb8BcrFgoZVlzeEG+PtJ:UeRdmNnKIIajfopb3FVVJ
                                                                                                                      MD5:442F495C36B31CA5D7A9BEFF12105AEF
                                                                                                                      SHA1:B3F6CA5B4A5756F9B2C09A27198F7A651CC6032D
                                                                                                                      SHA-256:6FD5AB8B7B308CDCEA4B747A81D8675988AE218813C91714FC4CA97919CEBEA5
                                                                                                                      SHA-512:C6EAECC26D67D218615EBB5602639DAB62A2578BD9683553D765DC1AC5580627D29B6F911388F5F1BFC284278EA4EBECE94630D3C6B95FF9EF93D3D61A3C2028
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Antarctica/Troll) {.. {-9223372036854775808 0 0 -00}.. {1108166400 0 0 +00}.. {1111885200 7200 1 +02}.. {1130634000 0 0 +00}.. {1143334800 7200 1 +02}.. {1162083600 0 0 +00}.. {1174784400 7200 1 +02}.. {1193533200 0 0 +00}.. {1206838800 7200 1 +02}.. {1224982800 0 0 +00}.. {1238288400 7200 1 +02}.. {1256432400 0 0 +00}.. {1269738000 7200 1 +02}.. {1288486800 0 0 +00}.. {1301187600 7200 1 +02}.. {1319936400 0 0 +00}.. {1332637200 7200 1 +02}.. {1351386000 0 0 +00}.. {1364691600 7200 1 +02}.. {1382835600 0 0 +00}.. {1396141200 7200 1 +02}.. {1414285200 0 0 +00}.. {1427590800 7200 1 +02}.. {1445734800 0 0 +00}.. {1459040400 7200 1 +02}.. {1477789200 0 0 +00}.. {1490490000 7200 1 +02}.. {1509238800 0 0 +00}.. {1521939600 7200 1 +02}.. {1540688400 0 0 +00}.. {1553994000 7200 1 +02}.. {1572138000 0 0 +00}.. {1585443600 7200 1 +02}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Antarctica\Vostok

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):179
                                                                                                                      Entropy (8bit):4.940298769001579
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8s4YkyXHAIgNrYOARL/2L0GRHEoKcMFeWFKjov:SlSWB9vsM3yMGSHAIgvAN/2L0XcMFewh
                                                                                                                      MD5:F61B4D02530B54A8EB1CA7B34BF6D553
                                                                                                                      SHA1:EB85E044EF9F7D11310C5EBB8D1D0C49A1E3067F
                                                                                                                      SHA-256:1892E98C13AC141C8C92EAB942B073A464BA5E2C000C250F97F860BE6B108127
                                                                                                                      SHA-512:E725E909A4056B7E4FADBE66B69E6C4752595F3357E670A7D740A2DA957F2C9502ECA57B9BA874045ED032B8F65A10D11AFAF69EA9673187FD4AE08793492470
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Urumqi)]} {.. LoadTimeZoneFile Asia/Urumqi..}..set TZData(:Antarctica/Vostok) $TZData(:Asia/Urumqi)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Arctic\Longyearbyen

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):187
                                                                                                                      Entropy (8bit):4.947168975083595
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV/y+YF3vXHAIgoq8yFRRL/2XbeLo4cA4FH/h8QahV:SlSWB9vsM3ymhVoPHAIgoh6N/2XbUyAH
                                                                                                                      MD5:A4F076D7D716467B78EA382FA222CB38
                                                                                                                      SHA1:21D7FBA308ADC652F541A0336929B862F7B1BD0B
                                                                                                                      SHA-256:25462B656D240DA6B01C1A630FAC04B25DD65C799B659BE1C8BD3AB62610966F
                                                                                                                      SHA-512:1B6BD455E533D5BDC7F3506561A9CA804B1F9CA5CC0665AAB0FC083106AB32FF149DD5FFF62EF7BABAD87E3274F264446D492FB8BE160C9C7F281C7060BF1F61
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Berlin)]} {.. LoadTimeZoneFile Europe/Berlin..}..set TZData(:Arctic/Longyearbyen) $TZData(:Europe/Berlin)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Aden

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):171
                                                                                                                      Entropy (8bit):4.829666491766117
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8t14XHAIgNsM13oOARL/2WFK4h4WFK81Fn:SlSWB9vsM3yN14HAIgaM1YOAN/2wKs46
                                                                                                                      MD5:60D7F3194F19179E0CF0F561F9C40EE6
                                                                                                                      SHA1:B079EC49485CFBFFB7A5BE6149319B75684258E9
                                                                                                                      SHA-256:8FCDDB246932BAED880B70C0CA867057E7989AEA55EDDC174430E1055CD1058D
                                                                                                                      SHA-512:0BDC86B1D473D4875C6F7C092F955D0999E6C1F2EF83CFC7726A3C5BFEB0F5CB8E00B1F0CBC1F91F806EC635C472927504DF681A32DAC55EF372DA16FEA9EF40
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Riyadh)]} {.. LoadTimeZoneFile Asia/Riyadh..}..set TZData(:Asia/Aden) $TZData(:Asia/Riyadh)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Almaty

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1637
                                                                                                                      Entropy (8bit):3.732051305399264
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5qehddmvOt81FCuLqecDngO6jPvTpYy5T4TXvKT10SvPFu+a+CK/Eu3CWuD0Vob1:5YvdJqxiF0rvK50Sv9fGSM
                                                                                                                      MD5:D6BCB21F65642F36A159AFD72EC93953
                                                                                                                      SHA1:D3E670E579924E6E4F04AB574D48334FF521D8B2
                                                                                                                      SHA-256:06DC608C0B8CDD69CCE66A6BF86F141C46DF39CB45312E684E46F19ED8CAFF15
                                                                                                                      SHA-512:9A633B629873E5EE5AF923A94865EBE5FD9ECA181B2C47B7368A0828468715E07AD3FD825D5E2312D2D0BA1FA5490E3817C36B6339824C8012A0B75538C4A0DC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Almaty) {.. {-9223372036854775808 18468 0 LMT}.. {-1441170468 18000 0 +05}.. {-1247547600 21600 0 +06}.. {354909600 25200 1 +06}.. {370717200 21600 0 +06}.. {386445600 25200 1 +06}.. {402253200 21600 0 +06}.. {417981600 25200 1 +06}.. {433789200 21600 0 +06}.. {449604000 25200 1 +06}.. {465336000 21600 0 +06}.. {481060800 25200 1 +06}.. {496785600 21600 0 +06}.. {512510400 25200 1 +06}.. {528235200 21600 0 +06}.. {543960000 25200 1 +06}.. {559684800 21600 0 +06}.. {575409600 25200 1 +06}.. {591134400 21600 0 +06}.. {606859200 25200 1 +06}.. {622584000 21600 0 +06}.. {638308800 25200 1 +06}.. {654638400 21600 0 +06}.. {670363200 18000 0 +05}.. {670366800 21600 1 +05}.. {686091600 18000 0 +05}.. {695768400 21600 0 +06}.. {701812800 25200 1 +06}.. {717537600 21600 0 +06}.. {733262400 25200 1 +06}.. {748987200 21600 0 +06}.. {764712

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Amman

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2682
                                                                                                                      Entropy (8bit):3.7873260611521915
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5MUNHl0Nhb9bGA9jSb0PWtsjOuH7Ay2n3yy7QYoTZg703q4oPuJ9/YXjpdaOP9kA:Fz0T52akyId7+xOXdkwqeIFcR
                                                                                                                      MD5:7E70BD44FBF5BF70E3C5246D3A83A49B
                                                                                                                      SHA1:10A28B0A3189DF347CF9853C024E9467CAC56DBA
                                                                                                                      SHA-256:B70AABECACD3F62AF506DF395AB44F47F2CA091522B04EC87AC1407172DD1BFA
                                                                                                                      SHA-512:766565F837EB777749B2C8AAE6C73A2274A772CEF12E7C2E30A89809FEF1E9ED6B067DF044A4676AA4BE76A64A904692C3887336BF01BA4D5D9A5020FB792938
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Amman) {.. {-9223372036854775808 8624 0 LMT}.. {-1230776624 7200 0 EET}.. {108165600 10800 1 EEST}.. {118270800 7200 0 EET}.. {136591200 10800 1 EEST}.. {149806800 7200 0 EET}.. {168127200 10800 1 EEST}.. {181342800 7200 0 EET}.. {199749600 10800 1 EEST}.. {215643600 7200 0 EET}.. {231285600 10800 1 EEST}.. {244501200 7200 0 EET}.. {262735200 10800 1 EEST}.. {275950800 7200 0 EET}.. {481154400 10800 1 EEST}.. {496962000 7200 0 EET}.. {512949600 10800 1 EEST}.. {528670800 7200 0 EET}.. {544399200 10800 1 EEST}.. {560120400 7200 0 EET}.. {575848800 10800 1 EEST}.. {592174800 7200 0 EET}.. {610581600 10800 1 EEST}.. {623624400 7200 0 EET}.. {641167200 10800 1 EEST}.. {655074000 7200 0 EET}.. {671839200 10800 1 EEST}.. {685918800 7200 0 EET}.. {702856800 10800 1 EEST}.. {717973200 7200 0 EET}.. {733701600 10800 1 EEST}.. {749422800

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Anadyr

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2086
                                                                                                                      Entropy (8bit):3.7698340044911616
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5DeEdVrEOeFt7YFpR2kHmxCcUdBbcHDLV2vpXt25A0UeRr9ydzkMfF6USRWk9UuV:5ZejsFLrcZwvJt2F+doTr9Q3G80
                                                                                                                      MD5:6EFC35043BDCA4AB61D72E931DB954E6
                                                                                                                      SHA1:F0B4E76C154DC773073E41AA8E94030E972A986A
                                                                                                                      SHA-256:D9DF64FDA4638F7604624B0F68A885D5ABADB1DE12AF1AF5581C2AF7DD971562
                                                                                                                      SHA-512:16AE582B113D6960C73B64620A8AF20F9D436AA4B3EC8E881617AED3389EB4357931882103F162F19EE8202953A7E6FB4FDD6D7760FB7621F4DB9D229AD13F17
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Anadyr) {.. {-9223372036854775808 42596 0 LMT}.. {-1441194596 43200 0 +12}.. {-1247572800 46800 0 +14}.. {354884400 50400 1 +14}.. {370692000 46800 0 +13}.. {386420400 43200 0 +13}.. {386424000 46800 1 +13}.. {402231600 43200 0 +12}.. {417960000 46800 1 +13}.. {433767600 43200 0 +12}.. {449582400 46800 1 +13}.. {465314400 43200 0 +12}.. {481039200 46800 1 +13}.. {496764000 43200 0 +12}.. {512488800 46800 1 +13}.. {528213600 43200 0 +12}.. {543938400 46800 1 +13}.. {559663200 43200 0 +12}.. {575388000 46800 1 +13}.. {591112800 43200 0 +12}.. {606837600 46800 1 +13}.. {622562400 43200 0 +12}.. {638287200 46800 1 +13}.. {654616800 43200 0 +12}.. {670341600 39600 0 +12}.. {670345200 43200 1 +12}.. {686070000 39600 0 +11}.. {695746800 43200 0 +13}.. {701791200 46800 1 +13}.. {717516000 43200 0 +12}.. {733240800 46800 1 +13}.. {748965

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Aqtau

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1665
                                                                                                                      Entropy (8bit):3.7149890651919644
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5uvFlvNhQQvmRKqv0fvzQIovWdvEGvDaDvs5vZlovKWyvNSvTqvIkhYwr:sFBNKs6b03zB0WJEuDa7sFZiKWaN6TiF
                                                                                                                      MD5:A72FB1FE01C93BD7E0A8136635C72639
                                                                                                                      SHA1:2383CF839F50784D4BF8B7EDDB324C80E2DDD0DC
                                                                                                                      SHA-256:96B510AF9B8C6BC1DFA84E9ED5E072F3FD484EEB66BBEBC7B6826ED859ED9027
                                                                                                                      SHA-512:061FECE3C750C0229638DD8AF38FB3E8E48E59E0DE1B13BCFE46483A7A170B71B9BCB0D6F110B6B2EF68510FA940F9066F14CBD59829E222D6644D3657CE1893
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Aqtau) {.. {-9223372036854775808 12064 0 LMT}.. {-1441164064 14400 0 +04}.. {-1247544000 18000 0 +05}.. {370724400 21600 0 +06}.. {386445600 18000 0 +05}.. {386449200 21600 1 +05}.. {402256800 18000 0 +05}.. {417985200 21600 1 +05}.. {433792800 18000 0 +05}.. {449607600 21600 1 +05}.. {465339600 18000 0 +05}.. {481064400 21600 1 +05}.. {496789200 18000 0 +05}.. {512514000 21600 1 +05}.. {528238800 18000 0 +05}.. {543963600 21600 1 +05}.. {559688400 18000 0 +05}.. {575413200 21600 1 +05}.. {591138000 18000 0 +05}.. {606862800 21600 1 +05}.. {622587600 18000 0 +05}.. {638312400 21600 1 +05}.. {654642000 18000 0 +05}.. {670366800 14400 0 +04}.. {670370400 18000 1 +04}.. {686095200 14400 0 +04}.. {695772000 18000 0 +05}.. {701816400 21600 1 +05}.. {717541200 18000 0 +05}.. {733266000 21600 1 +05}.. {748990800 18000 0 +05}.. {7647156

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Aqtobe

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1666
                                                                                                                      Entropy (8bit):3.721746335201775
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5FUvalvNhQQvmRKqv0fvzQIovWdvEGvDaDvs5vZlovKWyvNSvTqvIQvyovklvqQR:PwaBNKs6b03zB0WJEuDa7sFZiKWaN6Tt
                                                                                                                      MD5:E278B985BD2515DBCAED8CB741BE9208
                                                                                                                      SHA1:BC9F5E72C430661D7ED1AF04571CE5D0F73DD18D
                                                                                                                      SHA-256:991638FA2AB2A2F7A091A23D78D99306EE73A740F1A03FBAC448EDCAB55A0E38
                                                                                                                      SHA-512:9951DB729B837647CC4B3D2E605525DCCBAFFD39D76460331BF62235DCAE5E4470CDA578F940B1739AABFEC55D293FF60D79AE0EFDFE1EB64E84571881FDEA6A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Aqtobe) {.. {-9223372036854775808 13720 0 LMT}.. {-1441165720 14400 0 +04}.. {-1247544000 18000 0 +05}.. {354913200 21600 1 +06}.. {370720800 21600 0 +06}.. {386445600 18000 0 +05}.. {386449200 21600 1 +05}.. {402256800 18000 0 +05}.. {417985200 21600 1 +05}.. {433792800 18000 0 +05}.. {449607600 21600 1 +05}.. {465339600 18000 0 +05}.. {481064400 21600 1 +05}.. {496789200 18000 0 +05}.. {512514000 21600 1 +05}.. {528238800 18000 0 +05}.. {543963600 21600 1 +05}.. {559688400 18000 0 +05}.. {575413200 21600 1 +05}.. {591138000 18000 0 +05}.. {606862800 21600 1 +05}.. {622587600 18000 0 +05}.. {638312400 21600 1 +05}.. {654642000 18000 0 +05}.. {670366800 14400 0 +04}.. {670370400 18000 1 +04}.. {686095200 14400 0 +04}.. {695772000 18000 0 +05}.. {701816400 21600 1 +05}.. {717541200 18000 0 +05}.. {733266000 21600 1 +05}.. {748990

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Ashgabat

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):878
                                                                                                                      Entropy (8bit):3.937249024843323
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5ggeRMdIQvNcDvNhQQvmRKqvzQfv7PQIovWxrvEGvDWdDvs5v/RlovKTob3CGcr:5gbkvNSvNhQQvmRKqv0fvzQIovWdvEGD
                                                                                                                      MD5:259179C7A1CA04F9F3A373B6C8FCB8C5
                                                                                                                      SHA1:D042DF8EFD8EC1473B45B1131BD5EB714F1B2C17
                                                                                                                      SHA-256:13745BFA25E6E2D8D0FABAE42CB7C37CF9F974CFB343D4FE84E4E2D64A25926B
                                                                                                                      SHA-512:703BEAD5A1E5B3816D98057A08A87C2139F418787F38561FE35175B84E2005365727F85D1B949CC5DF464B207A7D01BB65FB1A632E73DDA523E843B82D76FBBD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Ashgabat) {.. {-9223372036854775808 14012 0 LMT}.. {-1441166012 14400 0 +04}.. {-1247544000 18000 0 +05}.. {354913200 21600 1 +05}.. {370720800 18000 0 +05}.. {386449200 21600 1 +05}.. {402256800 18000 0 +05}.. {417985200 21600 1 +05}.. {433792800 18000 0 +05}.. {449607600 21600 1 +05}.. {465339600 18000 0 +05}.. {481064400 21600 1 +05}.. {496789200 18000 0 +05}.. {512514000 21600 1 +05}.. {528238800 18000 0 +05}.. {543963600 21600 1 +05}.. {559688400 18000 0 +05}.. {575413200 21600 1 +05}.. {591138000 18000 0 +05}.. {606862800 21600 1 +05}.. {622587600 18000 0 +05}.. {638312400 21600 1 +05}.. {654642000 18000 0 +05}.. {670366800 14400 0 +04}.. {670370400 18000 1 +04}.. {686095200 14400 0 +04}.. {695772000 18000 0 +05}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Ashkhabad

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):182
                                                                                                                      Entropy (8bit):4.801820439218014
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8xEYM4DyXHAIgN/ZEYovFvWARL/2WFKUNSH+WFKYEQ:SlSWB9vsM3yR+HAIgH8VWAN/2wKUNSeq
                                                                                                                      MD5:5193EF7ADB646798801245BC50C8DDA6
                                                                                                                      SHA1:83ED851CBC60EFB330A8FC119E1BED5B4C0BA630
                                                                                                                      SHA-256:2C752F641B98E3C05B14AE31330D1F198DAA4A7E354BA9670C7754926BFB891A
                                                                                                                      SHA-512:E940E1BE67A9AC895F3D060B1CB34797A429147A9DC2AC0F1162D37D86661EF217EDABA720F0AE3796186FE801229210AC785BB4511CBBE5A41791D236101D8C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Ashgabat)]} {.. LoadTimeZoneFile Asia/Ashgabat..}..set TZData(:Asia/Ashkhabad) $TZData(:Asia/Ashgabat)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Atyrau

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1666
                                                                                                                      Entropy (8bit):3.7265766742957402
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:55TvFlvNhQQvmRKqv0fvzQIovWdvEGvDaDvs5vZlovKWyvNSvTqvIQvyovklvqQJ:XrFBNKs6b03zB0WJEuDa7sFZiKWaN6Tl
                                                                                                                      MD5:0236793F90ABC6F68718DDBB44AF5E2F
                                                                                                                      SHA1:A5EFAEEF9B9159E748A3FED231F8A978E400482E
                                                                                                                      SHA-256:4B7B118E6AE72D41740CF0CB2BD8E970700758DCBC0DD6F298199D841DF8408E
                                                                                                                      SHA-512:851C7A9C110790454312BB9C5B5D3C426365EEF4673191B9ABB2E4A32301894C5FB1ADCBE2A4C67BEE416AD63FB8BED85F94EF9BF42473DA4BFFA7824935A1D5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Atyrau) {.. {-9223372036854775808 12464 0 LMT}.. {-1441164464 10800 0 +03}.. {-1247540400 18000 0 +05}.. {370724400 21600 0 +06}.. {386445600 18000 0 +05}.. {386449200 21600 1 +05}.. {402256800 18000 0 +05}.. {417985200 21600 1 +05}.. {433792800 18000 0 +05}.. {449607600 21600 1 +05}.. {465339600 18000 0 +05}.. {481064400 21600 1 +05}.. {496789200 18000 0 +05}.. {512514000 21600 1 +05}.. {528238800 18000 0 +05}.. {543963600 21600 1 +05}.. {559688400 18000 0 +05}.. {575413200 21600 1 +05}.. {591138000 18000 0 +05}.. {606862800 21600 1 +05}.. {622587600 18000 0 +05}.. {638312400 21600 1 +05}.. {654642000 18000 0 +05}.. {670366800 14400 0 +04}.. {670370400 18000 1 +04}.. {686095200 14400 0 +04}.. {695772000 18000 0 +05}.. {701816400 21600 1 +05}.. {717541200 18000 0 +05}.. {733266000 21600 1 +05}.. {748990800 18000 0 +05}.. {764715

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Baghdad

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1702
                                                                                                                      Entropy (8bit):3.7261419515679393
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5/eVvyGiHD6UC4UrUomFMmUZcjbUKNFcUEUvUOpU8MYUWCUlbf/U9bUiUUybUQUF:5m8G9mFdnNF1FfsTuvQXHCe
                                                                                                                      MD5:690013310A46BD1AE250A5E019353809
                                                                                                                      SHA1:0DF434C7EEB707DC071007FAB112F4DEB37E936F
                                                                                                                      SHA-256:D20B75D2604C3B742C1629C5EE02CFF6783E472249982B272B68F2A6DE9BDC38
                                                                                                                      SHA-512:FF8C33E55E4F006C38D3FD37A1AD3E1200718CA374ECBEAE8255C7635912F0BB23A59A600BF7130D5660A24C515F726E8440D0D908E560CB59F74059638E6AA2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Baghdad) {.. {-9223372036854775808 10660 0 LMT}.. {-2524532260 10656 0 BMT}.. {-1641005856 10800 0 +03}.. {389048400 14400 0 +03}.. {402264000 10800 0 +03}.. {417906000 14400 1 +03}.. {433800000 10800 0 +03}.. {449614800 14400 1 +03}.. {465422400 10800 0 +03}.. {481150800 14400 1 +03}.. {496792800 10800 0 +03}.. {512517600 14400 1 +03}.. {528242400 10800 0 +03}.. {543967200 14400 1 +03}.. {559692000 10800 0 +03}.. {575416800 14400 1 +03}.. {591141600 10800 0 +03}.. {606866400 14400 1 +03}.. {622591200 10800 0 +03}.. {638316000 14400 1 +03}.. {654645600 10800 0 +03}.. {670464000 14400 1 +03}.. {686275200 10800 0 +03}.. {702086400 14400 1 +03}.. {717897600 10800 0 +03}.. {733622400 14400 1 +03}.. {749433600 10800 0 +03}.. {765158400 14400 1 +03}.. {780969600 10800 0 +03}.. {796694400 14400 1 +03}.. {812505600 10800 0 +03}.. {82831

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Bahrain

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):171
                                                                                                                      Entropy (8bit):4.784355129067593
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8hkXHAIgNvZORL/2WFKENUKMFB/4WFKKB:SlSWB9vsM3yBkHAIgPON/2wKENUr/4wT
                                                                                                                      MD5:1B5E0D449DAEF469D586A853CB3073AD
                                                                                                                      SHA1:FD735B0472B31644E787767B82B737CC39EC4175
                                                                                                                      SHA-256:3D437037FBF2BBDF969C8E71967080947F24860D431B39F5D8F23151316ABCD5
                                                                                                                      SHA-512:2A2DC33D4258A5E1AE59172883F3B11723798ED35CF5AF1B8BA81A8807DC6F8222C8044D82B152EF6AF43E7350FEB2625D4406C6C7DD309CE65810EA3D3286B6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Qatar)]} {.. LoadTimeZoneFile Asia/Qatar..}..set TZData(:Asia/Bahrain) $TZData(:Asia/Qatar)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Baku

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2149
                                                                                                                      Entropy (8bit):3.6155622322573713
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5/eFdqlykbocXcwJUE5iu8JmFebARoc9lVNk7/9bq8dq16b3C9UPBUTIEjvZJ+76:5RsUf8mFpNWFny1ZGMte3aivUKo
                                                                                                                      MD5:294DFC98F67AC00A188EC3D3B87C501C
                                                                                                                      SHA1:93C434CD9AA170E35AD676C88EE09986A94EC02A
                                                                                                                      SHA-256:873E8F08B87610D0DAFE239D32345248A4595C6B13D1DA83EC214D78E88FA12C
                                                                                                                      SHA-512:5346082CCA733724C0D2C36B768467E59BA9ED6452B6CF1BA923AF4F0D2BC05C67DB49E804CA81DAD449D30D0835026D708D9AB632D02FDA1EA1A0BF717111DE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Baku) {.. {-9223372036854775808 11964 0 LMT}.. {-1441163964 10800 0 +03}.. {-405140400 14400 0 +04}.. {354916800 18000 1 +04}.. {370724400 14400 0 +04}.. {386452800 18000 1 +04}.. {402260400 14400 0 +04}.. {417988800 18000 1 +04}.. {433796400 14400 0 +04}.. {449611200 18000 1 +04}.. {465343200 14400 0 +04}.. {481068000 18000 1 +04}.. {496792800 14400 0 +04}.. {512517600 18000 1 +04}.. {528242400 14400 0 +04}.. {543967200 18000 1 +04}.. {559692000 14400 0 +04}.. {575416800 18000 1 +04}.. {591141600 14400 0 +04}.. {606866400 18000 1 +04}.. {622591200 14400 0 +04}.. {638316000 18000 1 +04}.. {654645600 14400 0 +04}.. {670370400 10800 0 +03}.. {670374000 14400 1 +03}.. {686098800 10800 0 +03}.. {701823600 14400 1 +03}.. {717548400 14400 0 +04}.. {820440000 14400 0 +04}.. {828234000 18000 1 +05}.. {846378000 14400 0 +04}.. {852062400

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Bangkok

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):181
                                                                                                                      Entropy (8bit):4.911309754748998
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2WFKELYOiMXGm2OHB+keoHvZKmrROpDovFFsQ+8EXVeVSYe:SlSWB9eg/2wKELeDm2OHxeoHvZ3FO1og
                                                                                                                      MD5:9AC4947AC29C797055B7EBFA4F6AC710
                                                                                                                      SHA1:E7758A9A8BFA255F6B2D27F5366D9FE2A26DDF6C
                                                                                                                      SHA-256:6E72BA908F250FD45D554A12E3E7B3BD2F1C02A6C2431F806FD2A054F843AA90
                                                                                                                      SHA-512:F9D0F0CB7D3726C2AB3B5049429172D9DD4BA21353F6F98570CBA4EE969F7D97BD973CB165AECFF930AFFA8633E8052624D44EE7FB91763681ED3F78A61F4F98
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Bangkok) {.. {-9223372036854775808 24124 0 LMT}.. {-2840164924 24124 0 BMT}.. {-1570084924 25200 0 +07}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Barnaul

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2117
                                                                                                                      Entropy (8bit):3.7025684250364725
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5VeTtXJfsFN/3sFrOksF/sF7IyksF7FRZsFLsFTsFcsFk73sFK/XCFKTipnFEnsr:5n40yVRB7VfXucdKmtTTDOV
                                                                                                                      MD5:6CC13B6910412A3A3D16CA36ADF00352
                                                                                                                      SHA1:061CF4A8FEA8C139F50F96E6B6506B50ED3DD792
                                                                                                                      SHA-256:992F93A7975F8CD4E94D96B3BA1ECFB3585E52A53F4442A15993402D3F955F66
                                                                                                                      SHA-512:4E9750B1C3C0BA4F7922BCBC76276A3E74031D78A98E21DC59F66D6EA8E1B70865BBEB50A6B77EB0423421A18428B97B47412053CE15213128CEED669F4DD6E8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Barnaul) {.. {-9223372036854775808 20100 0 LMT}.. {-1579844100 21600 0 +06}.. {-1247551200 25200 0 +08}.. {354906000 28800 1 +08}.. {370713600 25200 0 +07}.. {386442000 28800 1 +08}.. {402249600 25200 0 +07}.. {417978000 28800 1 +08}.. {433785600 25200 0 +07}.. {449600400 28800 1 +08}.. {465332400 25200 0 +07}.. {481057200 28800 1 +08}.. {496782000 25200 0 +07}.. {512506800 28800 1 +08}.. {528231600 25200 0 +07}.. {543956400 28800 1 +08}.. {559681200 25200 0 +07}.. {575406000 28800 1 +08}.. {591130800 25200 0 +07}.. {606855600 28800 1 +08}.. {622580400 25200 0 +07}.. {638305200 28800 1 +08}.. {654634800 25200 0 +07}.. {670359600 21600 0 +07}.. {670363200 25200 1 +07}.. {686088000 21600 0 +06}.. {695764800 25200 0 +08}.. {701809200 28800 1 +08}.. {717534000 25200 0 +07}.. {733258800 28800 1 +08}.. {748983600 25200 0 +07}.. {76470

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Beirut

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8024
                                                                                                                      Entropy (8bit):3.7230911686481774
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:4nBKPP8LFH0TDkywaZb1QSCK5VUjiO1PoBQpo7778CZicJZS80EGcLt4Mok1MgJl:4M38LCRZb+sAiO1PoBQpo1ikjD
                                                                                                                      MD5:1D99E2BBB01B1669403CFBAF7E03F733
                                                                                                                      SHA1:DBDD58C7FD195FC602C4541D6F416CC96094C121
                                                                                                                      SHA-256:17AF14646D562AFE17DCCFD1D2FBA95C122F3E0263906A36EB48BFF04ACF233E
                                                                                                                      SHA-512:98524E8DCD17C090058F17BDA1200D9801EB1B14EB5CEB8C31149A4A402A53BA4923A2AFF457E0A72DAA601D88095247806F945F704000F874FCBF73631DD135
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Beirut) {.. {-9223372036854775808 8520 0 LMT}.. {-2840149320 7200 0 EET}.. {-1570413600 10800 1 EEST}.. {-1552186800 7200 0 EET}.. {-1538359200 10800 1 EEST}.. {-1522551600 7200 0 EET}.. {-1507514400 10800 1 EEST}.. {-1490583600 7200 0 EET}.. {-1473645600 10800 1 EEST}.. {-1460948400 7200 0 EET}.. {-399866400 10800 1 EEST}.. {-386650800 7200 0 EET}.. {-368330400 10800 1 EEST}.. {-355114800 7200 0 EET}.. {-336794400 10800 1 EEST}.. {-323578800 7200 0 EET}.. {-305172000 10800 1 EEST}.. {-291956400 7200 0 EET}.. {-273636000 10800 1 EEST}.. {-260420400 7200 0 EET}.. {78012000 10800 1 EEST}.. {86734800 7200 0 EET}.. {105055200 10800 1 EEST}.. {118270800 7200 0 EET}.. {136591200 10800 1 EEST}.. {149806800 7200 0 EET}.. {168127200 10800 1 EEST}.. {181342800 7200 0 EET}.. {199749600 10800 1 EEST}.. {212965200 7200 0 EET}.. {231285600 10800

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Bishkek

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1669
                                                                                                                      Entropy (8bit):3.7443715330695735
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5qvdJqxiF0rvK5XvV4vUzvCjvT7voPvkPvJUbvn0vYpv99v3uvuWvKJhv3T:Ad1mzK5/VkULCbTjoHkHJUDnQYV9p3mO
                                                                                                                      MD5:1EE8FF3DF0D931A140ADBB021EB3BFEB
                                                                                                                      SHA1:F1F15EF70C4E9F456849AF89CAC97AD747D9E192
                                                                                                                      SHA-256:1D5E9A8F6A04273AF741F648EF10718B004A60D7884FE432DDF85A8F558BEA98
                                                                                                                      SHA-512:155539A5CF21A34FBFACBF1652D934BF32255F4E505E60B3B4D8B5F2F7FAE552E6CB4824D8608A9C56370F58E48702335995BBD16B7A296A86A72A615FBC8ABC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Bishkek) {.. {-9223372036854775808 17904 0 LMT}.. {-1441169904 18000 0 +05}.. {-1247547600 21600 0 +06}.. {354909600 25200 1 +06}.. {370717200 21600 0 +06}.. {386445600 25200 1 +06}.. {402253200 21600 0 +06}.. {417981600 25200 1 +06}.. {433789200 21600 0 +06}.. {449604000 25200 1 +06}.. {465336000 21600 0 +06}.. {481060800 25200 1 +06}.. {496785600 21600 0 +06}.. {512510400 25200 1 +06}.. {528235200 21600 0 +06}.. {543960000 25200 1 +06}.. {559684800 21600 0 +06}.. {575409600 25200 1 +06}.. {591134400 21600 0 +06}.. {606859200 25200 1 +06}.. {622584000 21600 0 +06}.. {638308800 25200 1 +06}.. {654638400 21600 0 +06}.. {670363200 18000 0 +05}.. {670366800 21600 1 +05}.. {683586000 18000 0 +05}.. {703018800 21600 1 +05}.. {717530400 18000 0 +05}.. {734468400 21600 1 +05}.. {748980000 18000 0 +05}.. {765918000 21600 1 +05}.. {78042

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Brunei

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):176
                                                                                                                      Entropy (8bit):4.949517569857329
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8kLP/vXHAIgN16L1RL/2WFKXeAMM7QWFKPLPyn:SlSWB9vsM3yELPHAIg+L1N/2wK0oQwKW
                                                                                                                      MD5:716D842F23974137C5E07A1A65CEFC5D
                                                                                                                      SHA1:C7248C9DBD6AE5AF33BD4B3602D17737EBE023A0
                                                                                                                      SHA-256:F3110E9DD514E3654A9DE777E22B2D2391692927954B4B7E42ED54AB665C3CF5
                                                                                                                      SHA-512:4EC012EAABE60728D9447EEDF4BA7B16CA82786AA39EE79B2F9B32F227F9816FCE42F173153261F9AF88A12209752E84EBD7170C54D126C2DBB1ED3A8D069668
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Kuching)]} {.. LoadTimeZoneFile Asia/Kuching..}..set TZData(:Asia/Brunei) $TZData(:Asia/Kuching)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Calcutta

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):178
                                                                                                                      Entropy (8bit):4.774027471796823
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq864DyXHAIgN1QvRL/2WFKh0s+WFKvovn:SlSWB9vsM3ya4DSHAIgcvN/2wKN+wKvy
                                                                                                                      MD5:8BB098AB77CB0469B1FA0E0B64C4A9E7
                                                                                                                      SHA1:88C73626985071DD0923E1CAB343ACCD854A7297
                                                                                                                      SHA-256:1BAEF7850111D2C33B2A766A8AE804534ABA1711BF80A4087A89656DDD8469D5
                                                                                                                      SHA-512:82216A7F787AF20A4C97C7AA754CD6BE979FEF24137CF9A8B18EECA5E8FBCF12834DD8A6FC9CD2357D807F1629806745B46B11DC0472E0284E18DCCC983897DE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Kolkata)]} {.. LoadTimeZoneFile Asia/Kolkata..}..set TZData(:Asia/Calcutta) $TZData(:Asia/Kolkata)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Chita

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2086
                                                                                                                      Entropy (8bit):3.6981807774781017
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5Bpr1gIgWH/lt0irzEzCSCItWiIrW+rDQk9CVhyFY7rRWjYuhUmgr2M:95PhtjLiII2ZFlgd
                                                                                                                      MD5:69E03A5CEB689E19B60168C0F7EBAE8E
                                                                                                                      SHA1:95C6396EB753753B4FE4AE1B98D76332523E72A4
                                                                                                                      SHA-256:10B6F435B05D887176A4D90CA5AC957F327F62F36F15D6F6E4F81844662429B9
                                                                                                                      SHA-512:DFA72EDC54A11F0840ADBEE7F5AD8EA472AA52A1F196292F1341CD92A68FB2EC0A5BC7DE6C8E83C975420DB4B76CECD4393370FDB2C09F86EC11A50E540F6F02
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Chita) {.. {-9223372036854775808 27232 0 LMT}.. {-1579419232 28800 0 +08}.. {-1247558400 32400 0 +10}.. {354898800 36000 1 +10}.. {370706400 32400 0 +09}.. {386434800 36000 1 +10}.. {402242400 32400 0 +09}.. {417970800 36000 1 +10}.. {433778400 32400 0 +09}.. {449593200 36000 1 +10}.. {465325200 32400 0 +09}.. {481050000 36000 1 +10}.. {496774800 32400 0 +09}.. {512499600 36000 1 +10}.. {528224400 32400 0 +09}.. {543949200 36000 1 +10}.. {559674000 32400 0 +09}.. {575398800 36000 1 +10}.. {591123600 32400 0 +09}.. {606848400 36000 1 +10}.. {622573200 32400 0 +09}.. {638298000 36000 1 +10}.. {654627600 32400 0 +09}.. {670352400 28800 0 +09}.. {670356000 32400 1 +09}.. {686080800 28800 0 +08}.. {695757600 32400 0 +10}.. {701802000 36000 1 +10}.. {717526800 32400 0 +09}.. {733251600 36000 1 +10}.. {748976400 32400 0 +09}.. {7647012

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Choibalsan

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1619
                                                                                                                      Entropy (8bit):3.775783980828041
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5th5fSW2sp4Qh2rRSQnGw7GywvWbC25XrMYWG4AIQTUhp9pkTGdXguHaena44XY5:rh5kpmWG29QFUmD
                                                                                                                      MD5:540A7304A62ABB8D7F84454ABD6E2556
                                                                                                                      SHA1:52C37529929218A668D7A4AD6FD1B5FE0A727E16
                                                                                                                      SHA-256:94B2C14EF45C695EF6B19D94722E1BCBB629A595F2866DBA80F00A66721040B5
                                                                                                                      SHA-512:3B535D109DB369E301D6B412F21EC990976B997826F22B2E16ECEEEB048D60F064C7CA1A616393DC2F1B491BAC0548DC0965B9EA149A95280FFDBCAD6726EF0F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Choibalsan) {.. {-9223372036854775808 27480 0 LMT}.. {-2032933080 25200 0 +07}.. {252435600 28800 0 +08}.. {417974400 36000 0 +09}.. {433778400 32400 0 +09}.. {449593200 36000 1 +09}.. {465314400 32400 0 +09}.. {481042800 36000 1 +09}.. {496764000 32400 0 +09}.. {512492400 36000 1 +09}.. {528213600 32400 0 +09}.. {543942000 36000 1 +09}.. {559663200 32400 0 +09}.. {575391600 36000 1 +09}.. {591112800 32400 0 +09}.. {606841200 36000 1 +09}.. {622562400 32400 0 +09}.. {638290800 36000 1 +09}.. {654616800 32400 0 +09}.. {670345200 36000 1 +09}.. {686066400 32400 0 +09}.. {701794800 36000 1 +09}.. {717516000 32400 0 +09}.. {733244400 36000 1 +09}.. {748965600 32400 0 +09}.. {764694000 36000 1 +09}.. {780415200 32400 0 +09}.. {796143600 36000 1 +09}.. {811864800 32400 0 +09}.. {828198000 36000 1 +09}.. {843919200 32400 0 +09}.. {8596

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Chongqing

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):182
                                                                                                                      Entropy (8bit):4.865222436335267
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8qvfXHAIgNtaYFARL/2WFKh2V7/4WFKdy:SlSWB9vsM3yMPHAIgO8AN/2wKho4wKU
                                                                                                                      MD5:C5DC40C6325391F7247251ADB2C07F78
                                                                                                                      SHA1:3DDB1BF94532FB1F1271095B9C8CAA779BC545EF
                                                                                                                      SHA-256:A87382DC5F3C3141547A65E3746AF1DAF94B51468B96DA6CEF30E95754C97D37
                                                                                                                      SHA-512:062FF8D5E5392E5372B0405EDF3C7CF997AC33F95EBFFAA9CC9AB82BBE27B60C80255FCCEE9E6F5E02CBFCB163F99984BB2103217FFD1F80BDEC5C684BF2F61A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Shanghai)]} {.. LoadTimeZoneFile Asia/Shanghai..}..set TZData(:Asia/Chongqing) $TZData(:Asia/Shanghai)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Chungking

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):182
                                                                                                                      Entropy (8bit):4.889115378893491
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8qvfXHAIgNtaYFARL/2WFK7LeL9J4WFKdy:SlSWB9vsM3yMPHAIgO8AN/2wK7LUT4wj
                                                                                                                      MD5:C3676771EB813B346F58A7B574D0D7B5
                                                                                                                      SHA1:A473EF621309E019F29F3DEF95C38593775B8404
                                                                                                                      SHA-256:D6D2B4A761C547F1F853AE901AC71AB49FBE825037079C4E0C89DC940AE4A822
                                                                                                                      SHA-512:21C3A5D499E6E0427FBF585CA8CC5D99D193C586483AB107C4D8E9F9DC8412021E8E019A314757DAFE1225D2635F6D48E9C54A511709863F22A02449FA201E02
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Shanghai)]} {.. LoadTimeZoneFile Asia/Shanghai..}..set TZData(:Asia/Chungking) $TZData(:Asia/Shanghai)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Colombo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):369
                                                                                                                      Entropy (8bit):4.465596050904646
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2wKr+iDm2OHgoHvZv9tdvjSWV/FSQipPUrKkTD/k5QqRVVFSQOR/UIp:MB862zZmdHgCvZvJvj1Nj+Phkv/YtvjA
                                                                                                                      MD5:9541BB43E79AB0C6E8163945B5BFB1BF
                                                                                                                      SHA1:C4994420DB8313DECDE19B4B9F6C5DB0126A95A7
                                                                                                                      SHA-256:E5B5E6D607A15DA65CB00C92C35A63EAF25F547E64CB34BB419CB8CFC2714B1B
                                                                                                                      SHA-512:46F623B3F7CF8A50F97DD812521398EB9100C9CDFB967C18EF1BD112306AAEB3C9CB224424E48611CB8CC21D1DC3D820DD83032D12BC9DF19301CF07786FA664
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Colombo) {.. {-9223372036854775808 19164 0 LMT}.. {-2840159964 19172 0 MMT}.. {-2019705572 19800 0 +0530}.. {-883287000 21600 1 +06}.. {-862639200 23400 1 +0630}.. {-764051400 19800 0 +0530}.. {832962600 23400 0 +0630}.. {846266400 21600 0 +06}.. {1145039400 19800 0 +0530}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Dacca

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):169
                                                                                                                      Entropy (8bit):4.786111096226559
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8ntyXHAIgN6KyFvRL/2WFK1S2WFKwBn:SlSWB9vsM3yHtSHAIgMKON/2wKM2wKwB
                                                                                                                      MD5:BA575D37459540907A644438071277F8
                                                                                                                      SHA1:14CF10D6AABBAF7BAE42B3B9641D8469C206567F
                                                                                                                      SHA-256:B3AD560F66EA330E54A147017E6E6AB64452A5255D097B962D540836D7B19EE7
                                                                                                                      SHA-512:9CA386EF4D812B00C2E63558B81B273F92BBCA98AF304C9FD6FC166210FC4E2F92B769E1D6FB96B670650DC76EFFAD2FC6E39AE12C24B47EAED4E50A2AFAC2D7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Dhaka)]} {.. LoadTimeZoneFile Asia/Dhaka..}..set TZData(:Asia/Dacca) $TZData(:Asia/Dhaka)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Damascus

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3692
                                                                                                                      Entropy (8bit):3.7832279883701254
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:59xu6+RYla5W87rtYV08a7bd+dYV004X7JkX3Q0dzPeP2ua/XAog7jP/xZsNaTvT:8YI5WpVAdVGlkBOLh8X0CkBheIFlR
                                                                                                                      MD5:1D6B2CC38669C0F7378D9A576F10C477
                                                                                                                      SHA1:09A31E6295D9FC39219DFA4FC598B46F55C41180
                                                                                                                      SHA-256:7E577F0F9DA459BA1A325BE95C1FA0DB2C6ECFC1D64CDB73F3ADB09588293BA7
                                                                                                                      SHA-512:A0BBD5CE7883C275BF9752C75BA0C9AF0181046D94D27EFC96EC8823C374BADCB69B2B11D2C4497295E5BC25D5790634C69C6E7185F406F2107A8E16044E670F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Damascus) {.. {-9223372036854775808 8712 0 LMT}.. {-1577931912 7200 0 EET}.. {-1568592000 10800 1 EEST}.. {-1554080400 7200 0 EET}.. {-1537142400 10800 1 EEST}.. {-1522630800 7200 0 EET}.. {-1505692800 10800 1 EEST}.. {-1491181200 7200 0 EET}.. {-1474243200 10800 1 EEST}.. {-1459126800 7200 0 EET}.. {-242265600 10800 1 EEST}.. {-228877200 7200 0 EET}.. {-210556800 10800 1 EEST}.. {-197427600 7200 0 EET}.. {-178934400 10800 1 EEST}.. {-165718800 7200 0 EET}.. {-147398400 10800 1 EEST}.. {-134269200 7200 0 EET}.. {-116467200 10800 1 EEST}.. {-102646800 7200 0 EET}.. {-84326400 10800 1 EEST}.. {-71110800 7200 0 EET}.. {-52704000 10800 1 EEST}.. {-39488400 7200 0 EET}.. {-21168000 10800 1 EEST}.. {-7952400 7200 0 EET}.. {10368000 10800 1 EEST}.. {23583600 7200 0 EET}.. {41904000 10800 1 EEST}.. {55119600 7200 0 EET}.. {73526400 10800 1

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Dhaka

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):364
                                                                                                                      Entropy (8bit):4.412125512631861
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2wKwiDm2OHEmVFnoHv9vX+Yl7UIFckVVFSQiL/FG/UIvy/Ur9i/Ur97:MB862Y2mdHzdCv9P+Y9vvjeQlP9/9VkK
                                                                                                                      MD5:B5496A038AC230B9D75AA22BB2BE6BDD
                                                                                                                      SHA1:ACFD9C78F803F344272E8E188C41ED969EBADA16
                                                                                                                      SHA-256:BFC4562055CC4355E79F9EFAA580A4C6A658285916159A5D390A0CDA96A97E98
                                                                                                                      SHA-512:AB05D0176DADC1ED03CC526C372B9827A5FA03459E4F4B4365C6CE4B6FBDA043514A9D3FE2DA747159C5A1BC0E07727E6578A101E42B4DB120AF9624368C5FEA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Dhaka) {.. {-9223372036854775808 21700 0 LMT}.. {-2524543300 21200 0 HMT}.. {-891582800 23400 0 +0630}.. {-872058600 19800 0 +0530}.. {-862637400 23400 0 +0630}.. {-576138600 21600 0 +06}.. {1230746400 21600 0 +06}.. {1245430800 25200 1 +06}.. {1262278800 21600 0 +06}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Dili

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):235
                                                                                                                      Entropy (8bit):4.597480383845617
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2wKCXeSDm2OHnBGeoH1mpvyvScHTU71avScr:MB862qXbmdHnBvC1SyHHq8Hr
                                                                                                                      MD5:316DDF860FA234621698EB473E558DB7
                                                                                                                      SHA1:35BF955F764555945CF8B314B8E881DAD6CF557B
                                                                                                                      SHA-256:8BC2E0D77AC35B6D63E11B820AC45EC23A4195ED773680C600C772FDF4B953F8
                                                                                                                      SHA-512:D1A8D5F1DAAB7827BDCBC14506AF8681FD1ED94C6101CC4A3C8CC2A76EA7D3649038069158C539A2007A1B0734FBD87DE120415E07A3F08F44417100C95459F5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Dili) {.. {-9223372036854775808 30140 0 LMT}.. {-1830414140 28800 0 +08}.. {-879152400 32400 0 +09}.. {199897200 28800 0 +08}.. {969120000 32400 0 +09}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Dubai

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):148
                                                                                                                      Entropy (8bit):4.97292023820863
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2WFKQUMXGm2OHvkdoHsQK23NVsRYovV:SlSWB9eg/2wKQUDm2OHvsoHxVNSN
                                                                                                                      MD5:861BA4A0A71E6C3F71B90074275FD57C
                                                                                                                      SHA1:BC6FC5233340BB19AE4BD0BA563875479AC0A2B9
                                                                                                                      SHA-256:3DB174F1568BC23BF467A3DC7BAF8A2A2952B70653D4DE54F4DB391EC50B6925
                                                                                                                      SHA-512:B187735E0783F299253D9F93E002AEFF131FCCA50FB3E04CF0545B334B051D5ED978108A47C6957B608F5F93ED4CC3D69751FE0F40413719EE1C0440CD49AC76
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Dubai) {.. {-9223372036854775808 13272 0 LMT}.. {-1577936472 14400 0 +04}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Dushanbe

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):820
                                                                                                                      Entropy (8bit):3.969189280047274
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5we3dJvOt81FCuLqecDngO6jPvTpYy5T4TiFGDr:5BvdJqxiF0uGr
                                                                                                                      MD5:9ABD0ECB5F3E738F49CDD1F81C9FF1A4
                                                                                                                      SHA1:46B68C7BBD1BE9791B00128A5129AA3668435C93
                                                                                                                      SHA-256:550DB44595F59D0F151BE4AF70D6FECE20580AB687EF45DE2A0A75FB2515AC80
                                                                                                                      SHA-512:67E2B0EF216D509C4B6DD367519E0A733E54A7CA767D5F7960715E8056E61B7B633C7516D568544F55C9277E90412C1443B822C6EED3341C01F1BD9AA9476FA1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Dushanbe) {.. {-9223372036854775808 16512 0 LMT}.. {-1441168512 18000 0 +05}.. {-1247547600 21600 0 +06}.. {354909600 25200 1 +06}.. {370717200 21600 0 +06}.. {386445600 25200 1 +06}.. {402253200 21600 0 +06}.. {417981600 25200 1 +06}.. {433789200 21600 0 +06}.. {449604000 25200 1 +06}.. {465336000 21600 0 +06}.. {481060800 25200 1 +06}.. {496785600 21600 0 +06}.. {512510400 25200 1 +06}.. {528235200 21600 0 +06}.. {543960000 25200 1 +06}.. {559684800 21600 0 +06}.. {575409600 25200 1 +06}.. {591134400 21600 0 +06}.. {606859200 25200 1 +06}.. {622584000 21600 0 +06}.. {638308800 25200 1 +06}.. {654638400 21600 0 +06}.. {670363200 21600 1 +06}.. {684363600 18000 0 +05}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Famagusta

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7597
                                                                                                                      Entropy (8bit):3.7170041442081203
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:G3pv/7V6Aj8aZaNlK0UpvBeRF+iDlKSdkwSMTHkB2vwz59F06Kgr/y/rYjlBKb0l:G3v/AaaivBeRF+W35Syrwl9h5j
                                                                                                                      MD5:F8E4BA3E260452AE13CF234E60149A62
                                                                                                                      SHA1:8DDB08E2FDEEF6539EE0C0038B166908BFED16CD
                                                                                                                      SHA-256:8CFE85C48FC22033411432F8B75EE4C097A5D84897698CB1AFD5AB51C47FF5A3
                                                                                                                      SHA-512:487177411FB7E9F83AB9AAD84B685322B13A85784D4F90BB9C30F57BFAA6A9298E5C4F36C97444DE1117E51F85A62DC639D08B405460D071C2B29C898553E9A3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Famagusta) {.. {-9223372036854775808 8148 0 LMT}.. {-1518920148 7200 0 EET}.. {166572000 10800 1 EEST}.. {182293200 7200 0 EET}.. {200959200 10800 1 EEST}.. {213829200 7200 0 EET}.. {228866400 10800 1 EEST}.. {243982800 7200 0 EET}.. {260316000 10800 1 EEST}.. {276123600 7200 0 EET}.. {291765600 10800 1 EEST}.. {307486800 7200 0 EET}.. {323820000 10800 1 EEST}.. {338936400 7200 0 EET}.. {354664800 10800 1 EEST}.. {370386000 7200 0 EET}.. {386114400 10800 1 EEST}.. {401835600 7200 0 EET}.. {417564000 10800 1 EEST}.. {433285200 7200 0 EET}.. {449013600 10800 1 EEST}.. {465339600 7200 0 EET}.. {481068000 10800 1 EEST}.. {496789200 7200 0 EET}.. {512517600 10800 1 EEST}.. {528238800 7200 0 EET}.. {543967200 10800 1 EEST}.. {559688400 7200 0 EET}.. {575416800 10800 1 EEST}.. {591138000 7200 0 EET}.. {606866400 10800 1 EEST}.. {622587

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Gaza

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8427
                                                                                                                      Entropy (8bit):3.7494839792487094
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:NyHSd2XK1GbJFp3gP0nPVl8dcqU/8O8pc1FoMpQ2NpPfM2g1siiVVfIsuDzhsXaP:NyyIgGbJv3dPAD7c1FoMpHu3Ky3p
                                                                                                                      MD5:DEB2D261D6885CD83054391D010DE6AD
                                                                                                                      SHA1:5779B343F4EB2BC75613C593E2FA3A026857F940
                                                                                                                      SHA-256:A1823EDA63434ACF1A37B3A781A783CFEB6BB4CC53ED0469BB685834837F2289
                                                                                                                      SHA-512:D024B2D324D981A6792127551B0D466EAFFC5294C84CB5752A71E5267FB2E9162E7EFAED5A5CA3B06BBAD285F62BF955B0EF86DD39307EE5F935FC601F4EEEFA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Gaza) {.. {-9223372036854775808 8272 0 LMT}.. {-2185409872 7200 0 EEST}.. {-933638400 10800 1 EEST}.. {-923097600 7200 0 EEST}.. {-919036800 10800 1 EEST}.. {-857347200 7200 0 EEST}.. {-844300800 10800 1 EEST}.. {-825811200 7200 0 EEST}.. {-812678400 10800 1 EEST}.. {-794188800 7200 0 EEST}.. {-779846400 10800 1 EEST}.. {-762652800 7200 0 EEST}.. {-748310400 10800 1 EEST}.. {-731116800 7200 0 EEST}.. {-682653600 7200 0 EET}.. {-399088800 10800 1 EEST}.. {-386650800 7200 0 EET}.. {-368330400 10800 1 EEST}.. {-355114800 7200 0 EET}.. {-336790800 10800 1 EEST}.. {-323654400 7200 0 EET}.. {-305168400 10800 1 EEST}.. {-292032000 7200 0 EET}.. {-273632400 10800 1 EEST}.. {-260496000 7200 0 EET}.. {-242096400 10800 1 EEST}.. {-228960000 7200 0 EET}.. {-210560400 10800 1 EEST}.. {-197424000 7200 0 EET}.. {-178938000 10800 1 EEST}.. {-16580

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Harbin

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):179
                                                                                                                      Entropy (8bit):4.86422571961583
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8qvfXHAIgNtaYFARL/2WFKwHp4WFKdy:SlSWB9vsM3yMPHAIgO8AN/2wKi4wKU
                                                                                                                      MD5:1BCCB3578FADE993EE8B2C11EAC06CD8
                                                                                                                      SHA1:CAEAB714E014CD5040C44E4603708B97BC0B03D4
                                                                                                                      SHA-256:12811A7944B892E3D1C0B4B09057CC1899F28081B3CD47FFD248BA49BA308AF0
                                                                                                                      SHA-512:1D791DC0E8F45359366DF33C2C337688D2E0E972A90F038733B840D28585505AEF542DDBAD014C9EA8C252048A588CD017DD67A84545A81EDB7C17E3B2E65092
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Shanghai)]} {.. LoadTimeZoneFile Asia/Shanghai..}..set TZData(:Asia/Harbin) $TZData(:Asia/Shanghai)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Hebron

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8402
                                                                                                                      Entropy (8bit):3.7520828858184325
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:fXSd2XK1GbJFp3gP0nPVl8dcqUZ8O8pc1FoMpQ2NpPfM2g1siiVVfIsuDzhsXa4a:fiIgGbJv3dPADPc1FoMpHu3Ky3p
                                                                                                                      MD5:6F176787C7FC5764A63719F0041690BA
                                                                                                                      SHA1:C292A8CEA597D7FD9E2D071AB7AE93E7ABCA21A5
                                                                                                                      SHA-256:732CAA355542C8781C61FC8F5265EBFC59C8CC24E78D01011E1E3256E6B34DC7
                                                                                                                      SHA-512:EE8F39A3D65D75E14B59B4D9CCB27894210CA269E82A7AC7F98BE67764688A8895EBB9C1ACEAB4C1B368B4F1BC5AFCB34E8866CEDFD91232926DF47517096513
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Hebron) {.. {-9223372036854775808 8423 0 LMT}.. {-2185410023 7200 0 EEST}.. {-933638400 10800 1 EEST}.. {-923097600 7200 0 EEST}.. {-919036800 10800 1 EEST}.. {-857347200 7200 0 EEST}.. {-844300800 10800 1 EEST}.. {-825811200 7200 0 EEST}.. {-812678400 10800 1 EEST}.. {-794188800 7200 0 EEST}.. {-779846400 10800 1 EEST}.. {-762652800 7200 0 EEST}.. {-748310400 10800 1 EEST}.. {-731116800 7200 0 EEST}.. {-682653600 7200 0 EET}.. {-399088800 10800 1 EEST}.. {-386650800 7200 0 EET}.. {-368330400 10800 1 EEST}.. {-355114800 7200 0 EET}.. {-336790800 10800 1 EEST}.. {-323654400 7200 0 EET}.. {-305168400 10800 1 EEST}.. {-292032000 7200 0 EET}.. {-273632400 10800 1 EEST}.. {-260496000 7200 0 EET}.. {-242096400 10800 1 EEST}.. {-228960000 7200 0 EET}.. {-210560400 10800 1 EEST}.. {-197424000 7200 0 EET}.. {-178938000 10800 1 EEST}.. {-165

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Ho_Chi_Minh

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):395
                                                                                                                      Entropy (8bit):4.431055857167822
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862RLmdHneCvhYC5sF/p+zHHviViksF/dMUYPsF/RQ9EsV:5de3vhd5sFR+znv2vsFlM/PsFVsV
                                                                                                                      MD5:A49A3D55C1E10A37125C51F9C6363868
                                                                                                                      SHA1:7C1B5D44643ADC3F02681F6379E82C3F4512F0C1
                                                                                                                      SHA-256:D8A19C70BE5A9AE1E6091DC8FD03D7719110D1F3D78786C91D5BD0949FB5A428
                                                                                                                      SHA-512:804C44E51BB9E93B156B0CB4CB125651003B3C42D65334A052BE149734221315CC75D4FBDE34F62DFC102F1A9C968D1C9B573839C7ECBF7397B61BD90E530B20
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Ho_Chi_Minh) {.. {-9223372036854775808 25590 0 LMT}.. {-2004073590 25590 0 PLMT}.. {-1851577590 25200 0 +07}.. {-852105600 28800 0 +08}.. {-782643600 32400 0 +09}.. {-767869200 25200 0 +07}.. {-718095600 28800 0 +08}.. {-457776000 25200 0 +07}.. {-315648000 28800 0 +08}.. {171820800 25200 0 +07}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Hong_Kong

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2226
                                                                                                                      Entropy (8bit):4.0055033036300145
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5Ze9l9Pm4yoHtTYJJIX1Zcp6GS0j1SPQpP6gPE8fTZIPNYQGm75st/nQdwi9:DyaoTcwQt6EsQTng
                                                                                                                      MD5:26BCBBA28AE34FE3CF7D17EF4C6B69C8
                                                                                                                      SHA1:5324DEA8E7965C66650E7B4769EFA1297B508486
                                                                                                                      SHA-256:EE9A6997BC1AAD4A8FA95DB312774C3F37FBB895549230C30FC66C02CC170EB6
                                                                                                                      SHA-512:54594CD18838B4A8947EBB5BDE2415727CC127CF79AEC98FC0F5D5A32F68EEAF4E079853239DE9F753CE90F18EFD55AE51FC43D64E313666CEA0EF8AC93BF065
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Hong_Kong) {.. {-9223372036854775808 27402 0 LMT}.. {-2056690800 28800 0 HKT}.. {-900910800 32400 1 HKST}.. {-891579600 30600 1 HKWT}.. {-884248200 32400 0 JST}.. {-761209200 28800 0 HKT}.. {-747907200 32400 1 HKST}.. {-728541000 28800 0 HKT}.. {-717049800 32400 1 HKST}.. {-697091400 28800 0 HKT}.. {-683785800 32400 1 HKST}.. {-668061000 28800 0 HKT}.. {-654755400 32400 1 HKST}.. {-636611400 28800 0 HKT}.. {-623305800 32400 1 HKST}.. {-605161800 28800 0 HKT}.. {-591856200 32400 1 HKST}.. {-573712200 28800 0 HKT}.. {-559801800 32400 1 HKST}.. {-541657800 28800 0 HKT}.. {-528352200 32400 1 HKST}.. {-510211800 28800 0 HKT}.. {-498112200 32400 1 HKST}.. {-478762200 28800 0 HKT}.. {-466662600 32400 1 HKST}.. {-446707800 28800 0 HKT}.. {-435213000 32400 1 HKST}.. {-415258200 28800 0 HKT}.. {-403158600 32400 1 HKST}.. {-383808600 28800 0 HKT

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Hovd

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1583
                                                                                                                      Entropy (8bit):3.7521760184466206
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5x3LecCvgsFFFKOksF8FpsF71FQnsFNFxhsFlF6sFaFasFZFisF8GF5sFKLFAZsZ:5FqKVx8Cq9f/y2L
                                                                                                                      MD5:A77140A0D8C2D3E2993E4BA7CADFB4C6
                                                                                                                      SHA1:AE3586264A86D42F578D4B0F7A30C9BE6047EAB1
                                                                                                                      SHA-256:CA88A45E954A9854C680B399E69E4858BF5E861FABFADC19D62D97B734B25415
                                                                                                                      SHA-512:05EA9D903EEC755F799B7C2399ED933245A5AE3A594648FE37AF1CE7699AE499B4ED159F428D91259D80BC9AF5117F2DA055A506AED94E5281C38B7AFF69C6FE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Hovd) {.. {-9223372036854775808 21996 0 LMT}.. {-2032927596 21600 0 +06}.. {252439200 25200 0 +07}.. {417978000 28800 1 +07}.. {433785600 25200 0 +07}.. {449600400 28800 1 +07}.. {465321600 25200 0 +07}.. {481050000 28800 1 +07}.. {496771200 25200 0 +07}.. {512499600 28800 1 +07}.. {528220800 25200 0 +07}.. {543949200 28800 1 +07}.. {559670400 25200 0 +07}.. {575398800 28800 1 +07}.. {591120000 25200 0 +07}.. {606848400 28800 1 +07}.. {622569600 25200 0 +07}.. {638298000 28800 1 +07}.. {654624000 25200 0 +07}.. {670352400 28800 1 +07}.. {686073600 25200 0 +07}.. {701802000 28800 1 +07}.. {717523200 25200 0 +07}.. {733251600 28800 1 +07}.. {748972800 25200 0 +07}.. {764701200 28800 1 +07}.. {780422400 25200 0 +07}.. {796150800 28800 1 +07}.. {811872000 25200 0 +07}.. {828205200 28800 1 +07}.. {843926400 25200 0 +07}.. {859654800

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Irkutsk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2089
                                                                                                                      Entropy (8bit):3.7296034934492694
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5PZy4DdOKStci4KjXoYjoSvfQJWE00dtT43kgiTskNrrBizhzRBqY3M:Py2/svfraBGfgP
                                                                                                                      MD5:C9F7AC464970567E5C38CB01ED2297AE
                                                                                                                      SHA1:453718BACCAE3FACD761AF22CA5875185478ADDD
                                                                                                                      SHA-256:61BAAAD6315FFBDAED6F266880165B06ECCAF72F660B7FB01C8B654F3952D68E
                                                                                                                      SHA-512:72044EFAE262CC12974F2DE2AAF06AC4C31BE73071ACD53DDC6B8D8BFC6FBDF937EC03DC881901F730659BDE662FBCFC76C57B2C086DAA97F160530464FBA7C6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Irkutsk) {.. {-9223372036854775808 25025 0 LMT}.. {-2840165825 25025 0 IMT}.. {-1575874625 25200 0 +07}.. {-1247554800 28800 0 +09}.. {354902400 32400 1 +09}.. {370710000 28800 0 +08}.. {386438400 32400 1 +09}.. {402246000 28800 0 +08}.. {417974400 32400 1 +09}.. {433782000 28800 0 +08}.. {449596800 32400 1 +09}.. {465328800 28800 0 +08}.. {481053600 32400 1 +09}.. {496778400 28800 0 +08}.. {512503200 32400 1 +09}.. {528228000 28800 0 +08}.. {543952800 32400 1 +09}.. {559677600 28800 0 +08}.. {575402400 32400 1 +09}.. {591127200 28800 0 +08}.. {606852000 32400 1 +09}.. {622576800 28800 0 +08}.. {638301600 32400 1 +09}.. {654631200 28800 0 +08}.. {670356000 25200 0 +08}.. {670359600 28800 1 +08}.. {686084400 25200 0 +07}.. {695761200 28800 0 +09}.. {701805600 32400 1 +09}.. {717530400 28800 0 +08}.. {733255200 32400 1 +09}.. {748

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Istanbul

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):187
                                                                                                                      Entropy (8bit):4.9013773460609
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV0XaDovXHAIgoq3XRFvHRL/2WFK4HB/8QaqXKv:SlSWB9vsM3ymQa2HAIgoQ/HN/2wK4HJa
                                                                                                                      MD5:8A92C690BE27A69D122BFF51479B7B56
                                                                                                                      SHA1:52DB64587A347F34153A51788BDE8C349D966575
                                                                                                                      SHA-256:1F77C4BD27574E1D2066885DEF01806A02D3E444424A219A8EC5C114F89665E5
                                                                                                                      SHA-512:FEDF57C4862B6792A789F339EB1027EC8A8472B01B7D1D0814C419850B9AC03A7B454FDB04D8BECE166E9A8BCAA58B0B461007A6C824B30B1080991A1DB49CCA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Istanbul)]} {.. LoadTimeZoneFile Europe/Istanbul..}..set TZData(:Asia/Istanbul) $TZData(:Europe/Istanbul)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Jakarta

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):370
                                                                                                                      Entropy (8bit):4.4733192761103515
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2wKcrJfDm2OHATJeoHMaSYov/YSZkc5q/MVSSFFWSyvScH+dMVSSFL+:MB862EJLmdHjCEdOc5aMxaSyHHaMxF6P
                                                                                                                      MD5:C689A1AA9FFE535AEB3AD3D7EDE55172
                                                                                                                      SHA1:0520FC9A4619FB555A79C5DF2AE82422BF2C5EDA
                                                                                                                      SHA-256:2F39D9F93761B85C254F458317A7DE2B4184BE9459F2193A85C08662E801269A
                                                                                                                      SHA-512:C1034FB2FCFEF201C5362AF21B048B6637A824C5C93D75854CF3807892C772CD4376533E58BFF8D8726F531F43CB231365B8012EBD3C1BECED865D3CD2D6673D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Jakarta) {.. {-9223372036854775808 25632 0 LMT}.. {-3231299232 25632 0 BMT}.. {-1451719200 26400 0 +0720}.. {-1172906400 27000 0 +0730}.. {-876641400 32400 0 +09}.. {-766054800 27000 0 +0730}.. {-683883000 28800 0 +08}.. {-620812800 27000 0 +0730}.. {-189415800 25200 0 WIB}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Jayapura

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):213
                                                                                                                      Entropy (8bit):4.834345288972067
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2wKcaDm2OHG4YoH1kcfvScHVowkVcr2CV4zvhyov:MB862PmdHNYC6cfHHVop2NVkoov
                                                                                                                      MD5:2CB3A13FCC48F8C4457E001FC309918B
                                                                                                                      SHA1:83174176815CB93D216B5BC532C120EC8AC433CF
                                                                                                                      SHA-256:761C1E80FEBF46D6D6215CEBF211F121974156D9BCE2FB4258C1074C6ED2CE22
                                                                                                                      SHA-512:65009020AB9FEC2F8158A4851A78B71127F9B262DDD1472583942E19B7C086304F54BC8DAE5A40BD1448BCAEDA0FDBACCD19400E10FFA0357E324535F9036EF0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Jayapura) {.. {-9223372036854775808 33768 0 LMT}.. {-1172913768 32400 0 +09}.. {-799491600 34200 0 +0930}.. {-189423000 32400 0 WIT}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Jerusalem

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8135
                                                                                                                      Entropy (8bit):3.770028446231146
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:GKfnxFAEX/nPVl8diAg9oEhH20AHz7LzdWhYbBJPXuVhKaM76Rmg4DLeEcNptv5C:7ffBvPAzF0AHzPzdD1+XBRF0
                                                                                                                      MD5:884227D48C92BA6C519BFE571D4F1037
                                                                                                                      SHA1:21F8977816C2B439686A50D353B836A6D132A946
                                                                                                                      SHA-256:0BDC2C693134199C2ECD374CC01468813DB29DF47422C706A3EA2BE5ECCA177A
                                                                                                                      SHA-512:8A09F1FE11DAD203501A16FE6A2CAEC969FE3553B456B8BD1997E55B3EE430B2BB4B54F7D87C5E99931FD96E7C769CAA618C777EBD23FBD1E1A0F57409422914
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Jerusalem) {.. {-9223372036854775808 8454 0 LMT}.. {-2840149254 8440 0 JMT}.. {-1641003640 7200 0 IST}.. {-933638400 10800 1 IDT}.. {-923097600 7200 0 IST}.. {-919036800 10800 1 IDT}.. {-857347200 7200 0 IST}.. {-844300800 10800 1 IDT}.. {-825811200 7200 0 IST}.. {-812678400 10800 1 IDT}.. {-794188800 7200 0 IST}.. {-779846400 10800 1 IDT}.. {-762652800 7200 0 IST}.. {-748310400 10800 1 IDT}.. {-731116800 7200 0 IST}.. {-681955200 14400 1 IDDT}.. {-673228800 10800 1 IDT}.. {-667958400 7200 0 IST}.. {-652320000 10800 1 IDT}.. {-636422400 7200 0 IST}.. {-622080000 10800 1 IDT}.. {-608947200 7200 0 IST}.. {-591840000 10800 1 IDT}.. {-572486400 7200 0 IST}.. {-558576000 10800 1 IDT}.. {-542851200 7200 0 IST}.. {-527731200 10800 1 IDT}.. {-514425600 7200 0 IST}.. {-490838400 10800 1 IDT}.. {-482976000 7200 0 IST}.. {-459388800 10800 1 I

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Kabul

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):180
                                                                                                                      Entropy (8bit):4.8546989169864085
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2WFKTtNMXGm2OHodFxsYoHvgVHURRNVsRYovFFFkdj/cXHF:SlSWB9eg/2wKTPDm2OHoH+YoHvgVHURA
                                                                                                                      MD5:9BD9B21661C235C0794078EC98978D3B
                                                                                                                      SHA1:3D854780F49D0E5F5A190DC9367C7406127C5E4D
                                                                                                                      SHA-256:A59C95C038F2E945D685D96FA9B859CE82A643A1B7F56EB36B2C809DE91CD4BA
                                                                                                                      SHA-512:A76E99CF03DA8897F0A210A98DB79E4CD60070F2BE363D0D0960D9882919F9B49978FA55BB2500F1648ADD4080730CAD85BAFF61D885A9EAD394AC04C850F6BA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Kabul) {.. {-9223372036854775808 16608 0 LMT}.. {-2524538208 14400 0 +04}.. {-788932800 16200 0 +0430}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Kamchatka

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2060
                                                                                                                      Entropy (8bit):3.788131608921229
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5+SeWI/2kkWk7YFpR2kHmxCcUdBbcHDLV2vpXt25A0UeRr9ydzkMfF6USRWk9UuV:5i/2ZsFLrcZwvJt2F+doTr9Q3G80
                                                                                                                      MD5:390F39934F095F89358B73D056D90264
                                                                                                                      SHA1:6B57CE5346B50ED88BFBB6BC57F834FB3F564905
                                                                                                                      SHA-256:6E0278E389072437BC07A5032CD58E9E5B1B2BDB20918632C422EFA97BC43ABF
                                                                                                                      SHA-512:6C54D94E95D73030F2FFCF8D130494CBD79FB1CEB9B59ADE0743C10F02557C3DD59CC6274B262A7E29C2D4C35DDA4B6A9A0398C661F5BD40F3B92181192B9577
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Kamchatka) {.. {-9223372036854775808 38076 0 LMT}.. {-1487759676 39600 0 +11}.. {-1247569200 43200 0 +13}.. {354888000 46800 1 +13}.. {370695600 43200 0 +12}.. {386424000 46800 1 +13}.. {402231600 43200 0 +12}.. {417960000 46800 1 +13}.. {433767600 43200 0 +12}.. {449582400 46800 1 +13}.. {465314400 43200 0 +12}.. {481039200 46800 1 +13}.. {496764000 43200 0 +12}.. {512488800 46800 1 +13}.. {528213600 43200 0 +12}.. {543938400 46800 1 +13}.. {559663200 43200 0 +12}.. {575388000 46800 1 +13}.. {591112800 43200 0 +12}.. {606837600 46800 1 +13}.. {622562400 43200 0 +12}.. {638287200 46800 1 +13}.. {654616800 43200 0 +12}.. {670341600 39600 0 +12}.. {670345200 43200 1 +12}.. {686070000 39600 0 +11}.. {695746800 43200 0 +13}.. {701791200 46800 1 +13}.. {717516000 43200 0 +12}.. {733240800 46800 1 +13}.. {748965600 43200 0 +12}.. {764

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Karachi

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):457
                                                                                                                      Entropy (8bit):4.396286144160272
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862dmdH35Cy6DvjeQXvjKEn6vNEhFc0bkTfb2iWToN1:5de3IjjeQ/jKE6vNNa8
                                                                                                                      MD5:DF604BCD42A3C1E6BABD0E4FF5764CA3
                                                                                                                      SHA1:984111F3A75EE7D8760AA2B839010545AF8EE359
                                                                                                                      SHA-256:4E7F7ACAE8B4018A835328744F680C8054771805BB0BB07678A09737963C090D
                                                                                                                      SHA-512:690AC3FC7CA3C66AA70F17E38C6B43FFACAB3F86040C3BA94FBFF80AC8C1AECF8192E503282109DABF3228F8DC73C732F1041C80455B8B26BDB25C4C32FA286A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Karachi) {.. {-9223372036854775808 16092 0 LMT}.. {-1988166492 19800 0 +0530}.. {-862637400 23400 1 +0630}.. {-764145000 19800 0 +0530}.. {-576135000 18000 0 +05}.. {38775600 18000 0 PKT}.. {1018119600 21600 1 PKST}.. {1033840800 18000 0 PKT}.. {1212260400 21600 1 PKST}.. {1225476000 18000 0 PKT}.. {1239735600 21600 1 PKST}.. {1257012000 18000 0 PKT}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Kashgar

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):174
                                                                                                                      Entropy (8bit):4.967143524972358
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8s4YkyXHAIgNrYOARL/2WFKu3e2WFKjov:SlSWB9vsM3yMGSHAIgvAN/2wKulwKjy
                                                                                                                      MD5:259662F35AA09A891C2DDF8FCFECD6F0
                                                                                                                      SHA1:DBB3A363A34C33F0B6B0D677E43C2985E2BAF976
                                                                                                                      SHA-256:7B2251F0A41CBADF45D69F24604834167B14D8D33B510E635719AB404CABBCE2
                                                                                                                      SHA-512:CD7E514555D58985C774535556B66542EFC5FB7CD5891F42FE21B591612CB7EBD4B41E96593E26E9283BA1B01EF3BE0FDFAE871F5EF6ADF2286AF1E479DCB44B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Urumqi)]} {.. LoadTimeZoneFile Asia/Urumqi..}..set TZData(:Asia/Kashgar) $TZData(:Asia/Urumqi)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Kathmandu

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.896398105471451
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2WFKXIi7hvXMXGm2OHF+VT5oHsQKwMTXvv6Q6zRk8P4VvW/:SlSWB9eg/2wKYghfDm2OH0T5oHxNMzv8
                                                                                                                      MD5:7AC6429D2A08372C71C61B4521246FEC
                                                                                                                      SHA1:6E50F5AD1018398491453D751F8B717B618EF46E
                                                                                                                      SHA-256:F0A0816E62036637F75081CBF17A1E6B8FBC2D86AEC3CD2E234BBBDD6EC9F109
                                                                                                                      SHA-512:A5389A318896ABCAFE419262F6B8CA86C917788F1E2AFBC8CB1C074A52870E7A92C9F6F7D79DDE4AB0D267D870D3CCD69B3FC5FD57520352EFE36C583B493FB9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Kathmandu) {.. {-9223372036854775808 20476 0 LMT}.. {-1577943676 19800 0 +0530}.. {504901800 20700 0 +0545}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Katmandu

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):184
                                                                                                                      Entropy (8bit):4.8363583658476745
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8yIi7V5XHAIgN1AIilvWARL/2WFKSiZ1/2WFKXIi7y:SlSWB9vsM3y7gVJHAIg5QOAN/2wKSg15
                                                                                                                      MD5:4CCC96293A33113D9ADC4130DCD19CBA
                                                                                                                      SHA1:7BAB4B8DD6BB415A2FC86D9AB36BE2A893C03153
                                                                                                                      SHA-256:9ACC9586B6F8B53BFE8B242283A434A9A9633D60559EBFDEE263B4C8915D50CA
                                                                                                                      SHA-512:644E1777E01C15A728E30526F131462FCE50476A8FEDA9B99F41D95013BB8833A79437E75AA2025E2FD2E253B9AD40709DEF77E1F0C73DAAE7A9CF886A175A03
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Kathmandu)]} {.. LoadTimeZoneFile Asia/Kathmandu..}..set TZData(:Asia/Katmandu) $TZData(:Asia/Kathmandu)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Khandyga

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2119
                                                                                                                      Entropy (8bit):3.707911838150672
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5No6r1gIgWH/lt0irzEzCSCItWiIrW+rDQk9CVhyFYkRDhUBAc6l:r5PhtjLiII2JBC6c6l
                                                                                                                      MD5:D7B394A9662D60D01781005FE73CC9E8
                                                                                                                      SHA1:50B5EBD02596DC45D1F69358C5B69DD3058905FC
                                                                                                                      SHA-256:33203D7FB7F3D1F848640ECE0642A2305E1863B4D47413075E2E7E40BD7418E7
                                                                                                                      SHA-512:055EBA420F2F6049E803796ACCA263264B9E585E5312A86B8DF7B409C5F1CB1810F3AEDACD66CCF4605E55198947D263C240486C2A4D453D23C89802F0C66BBA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Khandyga) {.. {-9223372036854775808 32533 0 LMT}.. {-1579424533 28800 0 +08}.. {-1247558400 32400 0 +10}.. {354898800 36000 1 +10}.. {370706400 32400 0 +09}.. {386434800 36000 1 +10}.. {402242400 32400 0 +09}.. {417970800 36000 1 +10}.. {433778400 32400 0 +09}.. {449593200 36000 1 +10}.. {465325200 32400 0 +09}.. {481050000 36000 1 +10}.. {496774800 32400 0 +09}.. {512499600 36000 1 +10}.. {528224400 32400 0 +09}.. {543949200 36000 1 +10}.. {559674000 32400 0 +09}.. {575398800 36000 1 +10}.. {591123600 32400 0 +09}.. {606848400 36000 1 +10}.. {622573200 32400 0 +09}.. {638298000 36000 1 +10}.. {654627600 32400 0 +09}.. {670352400 28800 0 +09}.. {670356000 32400 1 +09}.. {686080800 28800 0 +08}.. {695757600 32400 0 +10}.. {701802000 36000 1 +10}.. {717526800 32400 0 +09}.. {733251600 36000 1 +10}.. {748976400 32400 0 +09}.. {7647

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Kolkata

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):336
                                                                                                                      Entropy (8bit):4.614218930153471
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2wKvhfDm2OHEX3gYoHrXdUvvYbQLpUFdvjSVVFJLNsR/QFckVVFJLLW:MB8623tmdHNYCDWXYbQtUTvjAJBs50vs
                                                                                                                      MD5:248F1B5A26455000C936CE8BC02C1A0B
                                                                                                                      SHA1:0C3F8CD4E038B113E5238AC52652809B6CA27999
                                                                                                                      SHA-256:6D464564ED2EFC9DADA1586D4FC99FE333726D2BE15A00E30C2391F588896463
                                                                                                                      SHA-512:AF36B0B3D410305ED504726C87265ACCAF5577A9B5DD7E7DAF135420E356C651287873197431B65B5317B4BA2009274288E4F101AC1274045A8D99E2414AB132
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Kolkata) {.. {-9223372036854775808 21208 0 LMT}.. {-3645237208 21200 0 HMT}.. {-3155694800 19270 0 MMT}.. {-2019705670 19800 0 IST}.. {-891581400 23400 1 +0630}.. {-872058600 19800 0 IST}.. {-862637400 23400 1 +0630}.. {-764145000 19800 0 IST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Krasnoyarsk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2062
                                                                                                                      Entropy (8bit):3.7086418466382605
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5Ote2CoXJfsFN/3sFrOksF/sF7IyksF7FRZsFLsFTsFcsFk73sFK/XCFKTipnFEw:5B40yVRB7VfXucydm46I/CTxwh
                                                                                                                      MD5:A59F7FFD0C3EBAD47EC5F2B89EBBD9FA
                                                                                                                      SHA1:ACB94E28E0CF7C6606086267CEA1F63A3E755F56
                                                                                                                      SHA-256:53B8D5E7FB1BD67FECE66A933D9BDBB773F14A8C04D316A2A1B00EC6DBC151DD
                                                                                                                      SHA-512:7B3886B9D0A793CCEEDB2B190523922CFEBE5C82A5201C9EFA30CA4C7F63FB75C998CC7E1BD48D5D489F16E36FC0C22BD954CB7D321B3C09B36B60629C4C9F7E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Krasnoyarsk) {.. {-9223372036854775808 22286 0 LMT}.. {-1577513486 21600 0 +06}.. {-1247551200 25200 0 +08}.. {354906000 28800 1 +08}.. {370713600 25200 0 +07}.. {386442000 28800 1 +08}.. {402249600 25200 0 +07}.. {417978000 28800 1 +08}.. {433785600 25200 0 +07}.. {449600400 28800 1 +08}.. {465332400 25200 0 +07}.. {481057200 28800 1 +08}.. {496782000 25200 0 +07}.. {512506800 28800 1 +08}.. {528231600 25200 0 +07}.. {543956400 28800 1 +08}.. {559681200 25200 0 +07}.. {575406000 28800 1 +08}.. {591130800 25200 0 +07}.. {606855600 28800 1 +08}.. {622580400 25200 0 +07}.. {638305200 28800 1 +08}.. {654634800 25200 0 +07}.. {670359600 21600 0 +07}.. {670363200 25200 1 +07}.. {686088000 21600 0 +06}.. {695764800 25200 0 +08}.. {701809200 28800 1 +08}.. {717534000 25200 0 +07}.. {733258800 28800 1 +08}.. {748983600 25200 0 +07}.. {7

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Kuala_Lumpur

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):188
                                                                                                                      Entropy (8bit):4.956557779400841
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq801c3vXHAIgNtK1tyHRL/2WFK1NFWFKf1z:SlSWB9vsM3yUgHAIgWv6N/2wK1NFwKf9
                                                                                                                      MD5:E70767DA85A7E1FA9395FF0B16CFE5CE
                                                                                                                      SHA1:3F78034F166CFC80B54E56AF289C7700A7E4AA5C
                                                                                                                      SHA-256:056D352DDCFEC155375430FFF3C8743ED5C9B51B866A099E97E12CC381071F50
                                                                                                                      SHA-512:FEDC854FB043AA79F132827F98F8983E480727FAA039CF2FB5B82611E724312A4F3F006EE58707F12B0AA90F5872E17F76E2A040CFB3A90D017C5CF92E52DA0A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Singapore)]} {.. LoadTimeZoneFile Asia/Singapore..}..set TZData(:Asia/Kuala_Lumpur) $TZData(:Asia/Singapore)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Kuching

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):669
                                                                                                                      Entropy (8bit):4.074079100812583
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2wKPLBDm2OHXoH3UTdMVSSFVM5qGeCiKaFzsBRcerUNwGvULhMXeiCs:MB862HL1mdHXC3UBMxJJo9rphTXUzHHF
                                                                                                                      MD5:489E706324960E86B6E174D913C72E02
                                                                                                                      SHA1:C7D77482C0D41F3426FC269B3B6C0575EF0E8C7E
                                                                                                                      SHA-256:6E35E560675B0B5322474900D4EC8326C504788C1F82E533B09785DEEFF092DF
                                                                                                                      SHA-512:5CEFD44656C041E59A16481E042EA914E7C003BDE6ADF5F49B57052E91F4F732A91A244BD8BC09EF5DC2640D3210DEE53882717C5C4CBD85CCE44A93B028E9C3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Kuching) {.. {-9223372036854775808 26480 0 LMT}.. {-1383463280 27000 0 +0730}.. {-1167636600 28800 0 +08}.. {-1082448000 30000 1 +08}.. {-1074586800 28800 0 +08}.. {-1050825600 30000 1 +08}.. {-1042964400 28800 0 +08}.. {-1019289600 30000 1 +08}.. {-1011428400 28800 0 +08}.. {-987753600 30000 1 +08}.. {-979892400 28800 0 +08}.. {-956217600 30000 1 +08}.. {-948356400 28800 0 +08}.. {-924595200 30000 1 +08}.. {-916734000 28800 0 +08}.. {-893059200 30000 1 +08}.. {-885198000 28800 0 +08}.. {-879667200 32400 0 +09}.. {-767005200 28800 0 +08}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Kuwait

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):173
                                                                                                                      Entropy (8bit):4.877362838821003
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8t14XHAIgNsM13oOARL/2WFKdQWFK81Fn:SlSWB9vsM3yN14HAIgaM1YOAN/2wKdQ6
                                                                                                                      MD5:EA1DB4B80CC74CBA024B9BF3734B31F2
                                                                                                                      SHA1:D8131C093BCA3B378BEC606CFEB56A40CB4E246F
                                                                                                                      SHA-256:8E0C60A9AA64FB8602EDC35311F7436B04853970A21C1F6C871494A09AAD5787
                                                                                                                      SHA-512:3B57C9CCC16AA4FE71D275D5EC6A7BC1838841023EE4408158362A7E13E7F1B345F7D95006BC8D2FC270158864E286A1A9364C792F679D5803BD82148399C199
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Riyadh)]} {.. LoadTimeZoneFile Asia/Riyadh..}..set TZData(:Asia/Kuwait) $TZData(:Asia/Riyadh)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Macao

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):169
                                                                                                                      Entropy (8bit):4.781739054385376
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8PWXHAIgNz+NOARL/2WFKf+WFKkvn:SlSWB9vsM3yOHAIg1AN/2wKGwKmn
                                                                                                                      MD5:55DAE27AEAA74FE822338C20B6CDFF68
                                                                                                                      SHA1:F00EB827DC29EB2063B3A0EDBC39856637C55F33
                                                                                                                      SHA-256:4308D741C83B263C7C9FB8EC692A7B7B502135E407B265B12EA7EF92523455C0
                                                                                                                      SHA-512:398EE6015C58BDBBEAB49B74833B938FD84DE1AC6D3B8D095CE772ECA980D9E93F4EBFFFFCEAE7F91E287C8CE4F94B1A078D8E1460C352B7C2018F99915838FF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Macau)]} {.. LoadTimeZoneFile Asia/Macau..}..set TZData(:Asia/Macao) $TZData(:Asia/Macau)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Macau

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2217
                                                                                                                      Entropy (8bit):3.9638741177777868
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5ReCX8Iv3nhPHCvzncCHg9PHjZzH+0HDHN1aHhHNaezHBjHeHsH65H18HDH983lY:5d8u3hfCTcaOrh6qn151Wf3Bogp+nlC
                                                                                                                      MD5:B184E7403CB7168607D2C9E158F86A3B
                                                                                                                      SHA1:48B003B8F822BE979FBCB08CBDBFFC617BCF99DB
                                                                                                                      SHA-256:FBCB92CECB1CB0BC284ADC30D70C5F57B3AFC992136A0D898ABC64490BB700FB
                                                                                                                      SHA-512:D8C5C67CAEB7C670B7BD1DACC1203C4DEE4DDB16A780F502C4440997CFCFF869E86842EF87C2CD0E0B942941C02A6BC3BDAB7CEAD78B026B68F4A031173400C8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Macau) {.. {-9223372036854775808 27250 0 LMT}.. {-2056692850 28800 0 CST}.. {-884509200 32400 0 +09}.. {-873280800 36000 1 +09}.. {-855918000 32400 0 +09}.. {-841744800 36000 1 +09}.. {-828529200 32400 0 +10}.. {-765363600 28800 0 CT}.. {-747046800 32400 1 CDT}.. {-733827600 28800 0 CST}.. {-716461200 32400 1 CDT}.. {-697021200 28800 0 CST}.. {-683715600 32400 1 CDT}.. {-667990800 28800 0 CST}.. {-654771600 32400 1 CDT}.. {-636627600 28800 0 CST}.. {-623322000 32400 1 CDT}.. {-605178000 28800 0 CST}.. {-591872400 32400 1 CDT}.. {-573642000 28800 0 CST}.. {-559818000 32400 1 CDT}.. {-541674000 28800 0 CST}.. {-528368400 32400 1 CDT}.. {-510224400 28800 0 CST}.. {-498128400 32400 1 CDT}.. {-478774800 28800 0 CST}.. {-466678800 32400 1 CDT}.. {-446720400 28800 0 CST}.. {-435229200 32400 1 CDT}.. {-415258200 28800 0 CST}.. {-403158600

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Magadan

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2088
                                                                                                                      Entropy (8bit):3.7643610103361134
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5he9dbbv+OC+jsuwltZQONEa2Ggf3augO8UoxLyHdX/CX6bW4Bv/7NKx/y:5wv+0j6lua2Gg/3gO8UoOZU2Wc/pKo
                                                                                                                      MD5:F62A89F441C9C17EB99F64223C815651
                                                                                                                      SHA1:408C38A79E056FF9B03D0DA85114DC015CB66938
                                                                                                                      SHA-256:0C6EEEB7975A95C2B0678D137E6A735238D244A37FA11078050051511DE499FE
                                                                                                                      SHA-512:55DC72546BDC26450D5318E9D2819E32A91C27D06A7AF5432BD50F8722C69984BBAA8599055A824D2935D919F0C0AA357687DD9B47F49F213EEE21AF7458FE17
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Magadan) {.. {-9223372036854775808 36192 0 LMT}.. {-1441188192 36000 0 +10}.. {-1247565600 39600 0 +12}.. {354891600 43200 1 +12}.. {370699200 39600 0 +11}.. {386427600 43200 1 +12}.. {402235200 39600 0 +11}.. {417963600 43200 1 +12}.. {433771200 39600 0 +11}.. {449586000 43200 1 +12}.. {465318000 39600 0 +11}.. {481042800 43200 1 +12}.. {496767600 39600 0 +11}.. {512492400 43200 1 +12}.. {528217200 39600 0 +11}.. {543942000 43200 1 +12}.. {559666800 39600 0 +11}.. {575391600 43200 1 +12}.. {591116400 39600 0 +11}.. {606841200 43200 1 +12}.. {622566000 39600 0 +11}.. {638290800 43200 1 +12}.. {654620400 39600 0 +11}.. {670345200 36000 0 +11}.. {670348800 39600 1 +11}.. {686073600 36000 0 +10}.. {695750400 39600 0 +12}.. {701794800 43200 1 +12}.. {717519600 39600 0 +11}.. {733244400 43200 1 +12}.. {748969200 39600 0 +11}.. {76469

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Makassar

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):243
                                                                                                                      Entropy (8bit):4.737440985553183
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2wK5XDm2OHUVoHxYQTLQTvj1kc3gEpHkH8vScHr0:MB862hTmdHsCLTI6cQe7HHA
                                                                                                                      MD5:9116C0B70AB33EC49F933EAE0238FD4B
                                                                                                                      SHA1:BA390E8FBEAF5EA6E861AFC5A51CD4DF0B422461
                                                                                                                      SHA-256:30D8AB00E32ECE51442C0310E650D89D6989E0809600EE334CB10C506D84BF9D
                                                                                                                      SHA-512:499E60E8CBDA72226BCB4E241020E62B6F88E7D3E4329D260A6536EF87C02D7D61FD1BECC47D4FF308B4EB5D3E7FFBE2EC1C96FE2DEDC09DD1D973421C5FFE1E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Makassar) {.. {-9223372036854775808 28656 0 LMT}.. {-1577951856 28656 0 MMT}.. {-1172908656 28800 0 +08}.. {-880272000 32400 0 +09}.. {-766054800 28800 0 WITA}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Manila

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):421
                                                                                                                      Entropy (8bit):4.48495488773916
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862GjmdHnCTZBCvEo6AwoucQzy4orjAbomAtoNv:5GjeCVwvB6AduXzylHAMmAa9
                                                                                                                      MD5:0FBF0ED252638DF31826C33EB3FFBFE2
                                                                                                                      SHA1:3496E4A5251A9BDF3AA4368297140780B6DBF66D
                                                                                                                      SHA-256:070D61A0E39643A700ABA89A8A4BE5733BA456958966098405E11ECDFA854D76
                                                                                                                      SHA-512:2A40E14964B357809E596DF88D8C4141ED78664BACA0A7724A7CA837EF427DC2B07C48D9DBE5787FAB0015673F5BDE002223D489334C5B91B74EEC5507A14B78
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Manila) {.. {-9223372036854775808 -57360 0 LMT}.. {-3944621040 29040 0 LMT}.. {-2229321840 28800 0 PST}.. {-1046678400 32400 1 PDT}.. {-1038733200 28800 0 PST}.. {-873273600 32400 0 JST}.. {-794221200 28800 0 PST}.. {-496224000 32400 1 PDT}.. {-489315600 28800 0 PST}.. {259344000 32400 1 PDT}.. {275151600 28800 0 PST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Muscat

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):170
                                                                                                                      Entropy (8bit):4.805992552335358
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8DeXHAIgN6S7ARL/2WFKvE+H+WFKQ3n:SlSWB9vsM3yj+HAIgMS7AN/2wKLewKQ3
                                                                                                                      MD5:8AEB5C3E81069F884A370714E8013F1F
                                                                                                                      SHA1:4E3DD4A84627E75E84726C0CBA72CA6801280C2B
                                                                                                                      SHA-256:011B7DE1C9F7EC241B224BC864D8AE66ACB433FBC8AD939E4DBEB12BE6390243
                                                                                                                      SHA-512:50B1DE2615AE9B4781505DC709F9D07F6221D4E6D7B61D7BDA682377EAD9807F47FF0E933B79823D0DFD9F3647A82CFC28FB41FBB2226ED1D08B76F86FEB45DC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Dubai)]} {.. LoadTimeZoneFile Asia/Dubai..}..set TZData(:Asia/Muscat) $TZData(:Asia/Dubai)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Nicosia

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7625
                                                                                                                      Entropy (8bit):3.7113086720696398
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:R3pv/7V6Aj8aZaNlKkUpvBeRF+iDlKSdkwSMTHkB2vwz59F06Kgr/y/rYjlBKb0l:R3v/AauivBeRF+W35Syrwl9h5j
                                                                                                                      MD5:2ADD0DFC1F133E4D044727234251A3DC
                                                                                                                      SHA1:0D1502986258349E384017BA6CB8FA0AC424638C
                                                                                                                      SHA-256:3C3E4844C70D361893EF022D6C3C8E38B243E91D40C5A726C924355476816F25
                                                                                                                      SHA-512:70CDD53E7E44EDABF653A4F92EECBF5BB20A31DA95D65209D1CADE7DD9FC68946B8EC8829C28AE00BE5F42AAB545B9282CBBCFC5834437D6A94A179BF4FE0141
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Nicosia) {.. {-9223372036854775808 8008 0 LMT}.. {-1518920008 7200 0 EET}.. {166572000 10800 1 EEST}.. {182293200 7200 0 EET}.. {200959200 10800 1 EEST}.. {213829200 7200 0 EET}.. {228866400 10800 1 EEST}.. {243982800 7200 0 EET}.. {260316000 10800 1 EEST}.. {276123600 7200 0 EET}.. {291765600 10800 1 EEST}.. {307486800 7200 0 EET}.. {323820000 10800 1 EEST}.. {338936400 7200 0 EET}.. {354664800 10800 1 EEST}.. {370386000 7200 0 EET}.. {386114400 10800 1 EEST}.. {401835600 7200 0 EET}.. {417564000 10800 1 EEST}.. {433285200 7200 0 EET}.. {449013600 10800 1 EEST}.. {465339600 7200 0 EET}.. {481068000 10800 1 EEST}.. {496789200 7200 0 EET}.. {512517600 10800 1 EEST}.. {528238800 7200 0 EET}.. {543967200 10800 1 EEST}.. {559688400 7200 0 EET}.. {575416800 10800 1 EEST}.. {591138000 7200 0 EET}.. {606866400 10800 1 EEST}.. {62258760

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Novokuznetsk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2063
                                                                                                                      Entropy (8bit):3.718004112421892
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:526enddzXJfsFN/3sFrOksF/sF7IyksF7FRZsFLsFTsFcsFk73sFK/XCFKTipnFf:5l40yVRB7VfXucydm46I/CTxwf
                                                                                                                      MD5:513B6A2AF76DAED9002C037BEC99862F
                                                                                                                      SHA1:82D1C47BDF46B8B901C35BACACE8595C093BF5F2
                                                                                                                      SHA-256:96A445D47D834C28480D1E2036ECA4962B35AFA494C219065D4879F71C1830DB
                                                                                                                      SHA-512:2FE5AF4FA9D6AAB4FBD8E354789B82D39FA1B52394D3A0ABFBC6A30A531E0B7429A3D9AC7835A2843A6E9859E0255565F151FDFC87004ACB4EBD1AAD40BDA8A4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Novokuznetsk) {.. {-9223372036854775808 20928 0 LMT}.. {-1441259328 21600 0 +06}.. {-1247551200 25200 0 +08}.. {354906000 28800 1 +08}.. {370713600 25200 0 +07}.. {386442000 28800 1 +08}.. {402249600 25200 0 +07}.. {417978000 28800 1 +08}.. {433785600 25200 0 +07}.. {449600400 28800 1 +08}.. {465332400 25200 0 +07}.. {481057200 28800 1 +08}.. {496782000 25200 0 +07}.. {512506800 28800 1 +08}.. {528231600 25200 0 +07}.. {543956400 28800 1 +08}.. {559681200 25200 0 +07}.. {575406000 28800 1 +08}.. {591130800 25200 0 +07}.. {606855600 28800 1 +08}.. {622580400 25200 0 +07}.. {638305200 28800 1 +08}.. {654634800 25200 0 +07}.. {670359600 21600 0 +07}.. {670363200 25200 1 +07}.. {686088000 21600 0 +06}.. {695764800 25200 0 +08}.. {701809200 28800 1 +08}.. {717534000 25200 0 +07}.. {733258800 28800 1 +08}.. {748983600 25200 0 +07}.. {

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Novosibirsk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2121
                                                                                                                      Entropy (8bit):3.714792994893581
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:52sve20ruXJfsFN/3sFrOksF/sF7IyksF7FRZsFLsFTsFcsFk73sFK/XCFKTipnF:5Hc40yVRB7VfXu0TKmtTTDOWQ
                                                                                                                      MD5:AC8C8D768503C8334A9FBAEF4C3A9CAB
                                                                                                                      SHA1:CA10BB99E2D7AB329229759BD4801068A3AEB6D5
                                                                                                                      SHA-256:EF799077291F6B3B19E0AEC88F224BB592FAAD09D30740F2376D3D20F2169639
                                                                                                                      SHA-512:34049B1AC4254F999C3E5AD8CB31ABF88AC2D972E20E19927F33CC59935354F92125A0342A413E64227E8AE29DDFC2FFE5F67AE538C89D8EBAD7FCA889321DFA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Novosibirsk) {.. {-9223372036854775808 19900 0 LMT}.. {-1579476700 21600 0 +06}.. {-1247551200 25200 0 +08}.. {354906000 28800 1 +08}.. {370713600 25200 0 +07}.. {386442000 28800 1 +08}.. {402249600 25200 0 +07}.. {417978000 28800 1 +08}.. {433785600 25200 0 +07}.. {449600400 28800 1 +08}.. {465332400 25200 0 +07}.. {481057200 28800 1 +08}.. {496782000 25200 0 +07}.. {512506800 28800 1 +08}.. {528231600 25200 0 +07}.. {543956400 28800 1 +08}.. {559681200 25200 0 +07}.. {575406000 28800 1 +08}.. {591130800 25200 0 +07}.. {606855600 28800 1 +08}.. {622580400 25200 0 +07}.. {638305200 28800 1 +08}.. {654634800 25200 0 +07}.. {670359600 21600 0 +07}.. {670363200 25200 1 +07}.. {686088000 21600 0 +06}.. {695764800 25200 0 +08}.. {701809200 28800 1 +08}.. {717534000 25200 0 +07}.. {733258800 28800 1 +08}.. {738090000 25200 0 +07}.. {7

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Omsk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2055
                                                                                                                      Entropy (8bit):3.6912374223526396
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5abexPvO1FMnFP1FCnFHnFKqenFdDnFQgOnFxjPnFITnFonFJynFAT4TBThSv0FP:5asvjdqxph01NSvPETKmtTTDO0
                                                                                                                      MD5:3E06B20B0B62AA09FA03082FAEE4FD62
                                                                                                                      SHA1:8886EC80528ECA13D3364138BFFE92F881768169
                                                                                                                      SHA-256:2605CD1E26E4AB48BCB4399BB5B17BAD115A47F87BA3DD54B55BB50C3FE82606
                                                                                                                      SHA-512:04C1B6A898D12C8EA1B0B2F6665C870434061C63CC8F7A067BFC708E9828BA2E60104B82E2025E42D51DA2F485890C4D34EC0341EF466A7942649BE64F5EEE17
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Omsk) {.. {-9223372036854775808 17610 0 LMT}.. {-1582088010 18000 0 +05}.. {-1247547600 21600 0 +07}.. {354909600 25200 1 +07}.. {370717200 21600 0 +06}.. {386445600 25200 1 +07}.. {402253200 21600 0 +06}.. {417981600 25200 1 +07}.. {433789200 21600 0 +06}.. {449604000 25200 1 +07}.. {465336000 21600 0 +06}.. {481060800 25200 1 +07}.. {496785600 21600 0 +06}.. {512510400 25200 1 +07}.. {528235200 21600 0 +06}.. {543960000 25200 1 +07}.. {559684800 21600 0 +06}.. {575409600 25200 1 +07}.. {591134400 21600 0 +06}.. {606859200 25200 1 +07}.. {622584000 21600 0 +06}.. {638308800 25200 1 +07}.. {654638400 21600 0 +06}.. {670363200 18000 0 +06}.. {670366800 21600 1 +06}.. {686091600 18000 0 +05}.. {695768400 21600 0 +07}.. {701812800 25200 1 +07}.. {717537600 21600 0 +06}.. {733262400 25200 1 +07}.. {748987200 21600 0 +06}.. {76471200

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Oral

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1664
                                                                                                                      Entropy (8bit):3.708603813141953
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:53PvalvNhQQvmRKqv0fvzQIovWdvEGvDaDv7w9hYwr:JHaBNKs6b03zB0WJEuDa77w9hYA
                                                                                                                      MD5:A3BD0C15642AE4F001F98F8E060E8374
                                                                                                                      SHA1:366F3C7FD4000AC23B79AB0FF4429371ED323B81
                                                                                                                      SHA-256:933BBCD7AE0BF59A5B4A6E0EF74C237FEEDC42E6A3AEB2158131AA70FBA6FE47
                                                                                                                      SHA-512:16D8692D3EA96D3594E6220A6989BBFBB926A66EEBEB240C4DC68BE75C69C5206659D9D341D92AE6128928FD38A5F45B445621CBBBA4E4BA8C34C3AC52BF3C08
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Oral) {.. {-9223372036854775808 12324 0 LMT}.. {-1441164324 10800 0 +03}.. {-1247540400 18000 0 +05}.. {354913200 21600 1 +06}.. {370720800 21600 0 +06}.. {386445600 18000 0 +05}.. {386449200 21600 1 +05}.. {402256800 18000 0 +05}.. {417985200 21600 1 +05}.. {433792800 18000 0 +05}.. {449607600 21600 1 +05}.. {465339600 18000 0 +05}.. {481064400 21600 1 +05}.. {496789200 18000 0 +05}.. {512514000 21600 1 +05}.. {528238800 18000 0 +05}.. {543963600 21600 1 +05}.. {559688400 18000 0 +05}.. {575413200 21600 1 +05}.. {591138000 18000 0 +05}.. {606862800 14400 0 +04}.. {606866400 18000 1 +04}.. {622591200 14400 0 +04}.. {638316000 18000 1 +04}.. {654645600 14400 0 +04}.. {670370400 18000 1 +04}.. {686095200 14400 0 +04}.. {701816400 14400 0 +04}.. {701820000 18000 1 +04}.. {717544800 14400 0 +04}.. {733269600 18000 1 +04}.. {74899440

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Phnom_Penh

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):180
                                                                                                                      Entropy (8bit):4.958543249401788
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8VLYO5YFfXHAIgN8ELYOJARL/2WFKeHKLNM0WFKELt:SlSWB9vsM3y1LePHAIgKELtAN/2wKTNg
                                                                                                                      MD5:EBF01E229CC41EB8B27650A3D668EDC1
                                                                                                                      SHA1:33E1B252C1B45EAE326FCF8CC7C80C78A46F7E8D
                                                                                                                      SHA-256:DCEE88876D00396918F43DECA421B6C9B02F84B5866A2CE16E641B814B390A9F
                                                                                                                      SHA-512:80840600F37A256B8FD9933760FBAE7C13DE1E24EFD970E47BE8DEC731DFABF6D6FB76999BEEC775FF8C8B8719E94788ED7EEB04376A34C827ACB443F720F7E3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Bangkok)]} {.. LoadTimeZoneFile Asia/Bangkok..}..set TZData(:Asia/Phnom_Penh) $TZData(:Asia/Bangkok)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Pontianak

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):369
                                                                                                                      Entropy (8bit):4.492596995768464
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2wKT5PDm2OHUeoH99xV/1kc5k/MVSSFFCLkvScH+dMVSSFL1CnF4mMz:MB862L5bmdHFCRV/6c5kMxGLkHHaMxFn
                                                                                                                      MD5:9ADB1A9E41A143A06116E24EA0A53D90
                                                                                                                      SHA1:6E50B549E1A705C0090BD5EDE26F7DED78CDF71A
                                                                                                                      SHA-256:AC8370AEDF5FE3FE1E80710CE117DEE23815BE377D418E4B4F3259A1930E8DBF
                                                                                                                      SHA-512:92790B20B960AC518AB2E18F902C6E0BA887F268909F5571CAC1068F5E719CCF6943AE6902DA1B683E170658B5E7BE06C6A187C1C0A652DD052D5BD0B2A7B84D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Pontianak) {.. {-9223372036854775808 26240 0 LMT}.. {-1946186240 26240 0 PMT}.. {-1172906240 27000 0 +0730}.. {-881220600 32400 0 +09}.. {-766054800 27000 0 +0730}.. {-683883000 28800 0 +08}.. {-620812800 27000 0 +0730}.. {-189415800 28800 0 WITA}.. {567964800 25200 0 WIB}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Pyongyang

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):273
                                                                                                                      Entropy (8bit):4.709411633376997
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2wK8cE4SDm2OHnNoH9Aw8vmVuT0vjLtcjviov:MB8620cExmdHnNCGv2Ezv
                                                                                                                      MD5:727BBC1A1662B500F616F544A484F213
                                                                                                                      SHA1:93C1D902D9D4AA4197C7D16C61FB784AC01D0DE5
                                                                                                                      SHA-256:29BA17F756F5C0BBA30FEBF44E620504D04921C832BD1CB56E1B60EF288B57DF
                                                                                                                      SHA-512:C3C91E2F180109FF33E6491722F679A1B8DCE8CD31DE006D7FF2CBE270C008E927507C953641D28EE77D139BBEA54DEA1B7DBD6C30B208DDAB1B58756C32AC02
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Pyongyang) {.. {-9223372036854775808 30180 0 LMT}.. {-1948782180 30600 0 KST}.. {-1830414600 32400 0 JST}.. {-768646800 32400 0 KST}.. {1439564400 30600 0 KST}.. {1525446000 32400 0 KST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Qatar

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):176
                                                                                                                      Entropy (8bit):4.851251407399968
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2WFKK3ovXMXGm2OHPFV4YoHsQKb3VvVsRYovFFF3FRVGsWr:SlSWB9eg/2wKK3yXDm2OHoYoHxcvSNFS
                                                                                                                      MD5:CBA9635133F88AD3B27E23B95430C27C
                                                                                                                      SHA1:5E41232EC03BBC71B522F58CB2D05E6BFFFF1A75
                                                                                                                      SHA-256:18CCA69F933795CE3F7DB31506EFC063E6CE1DFDCAB32AA387C398456D7F7E1F
                                                                                                                      SHA-512:D7C43F1F9ADA54C914ADB3CB2C9063EB7044089CFC7755ACFD08828CDEBA3C116AE2BE916ABE5D561E63699B921BC52636DD0BBC2C4304F813616D320D7DDAAF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Qatar) {.. {-9223372036854775808 12368 0 LMT}.. {-1577935568 14400 0 +04}.. {76190400 10800 0 +03}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Qostanay

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1668
                                                                                                                      Entropy (8bit):3.7299735983334195
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5DwvalvNhQQvmRKqv0fvzQIovWdvEGvDaDvs5vZlovKWyvNSvTqvIQvyovklvqQA:BMaBNKs6b03zB0WJEuDa7sFZiKWaN6TE
                                                                                                                      MD5:F5DBE4E72FA5AB0019CC98C8E21EC86E
                                                                                                                      SHA1:27ECB901AA07C18EA7F38235E8EFE0B1635FEFBC
                                                                                                                      SHA-256:4191629B874C988291E8FD13E675A3ED685D677F6541313975FC4610E47F1DCD
                                                                                                                      SHA-512:D5EFD4EFFFFE2E41909AEB7B67BD1FA6FAF4B8E9AC645518D5B33BD1B3C5084F59D47D4ED052E0D4B9F9989BDDBA3AECB3D1E67F5237914D24C01F9C95242396
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Qostanay) {.. {-9223372036854775808 15268 0 LMT}.. {-1441167268 14400 0 +04}.. {-1247544000 18000 0 +05}.. {354913200 21600 1 +06}.. {370720800 21600 0 +06}.. {386445600 18000 0 +05}.. {386449200 21600 1 +05}.. {402256800 18000 0 +05}.. {417985200 21600 1 +05}.. {433792800 18000 0 +05}.. {449607600 21600 1 +05}.. {465339600 18000 0 +05}.. {481064400 21600 1 +05}.. {496789200 18000 0 +05}.. {512514000 21600 1 +05}.. {528238800 18000 0 +05}.. {543963600 21600 1 +05}.. {559688400 18000 0 +05}.. {575413200 21600 1 +05}.. {591138000 18000 0 +05}.. {606862800 21600 1 +05}.. {622587600 18000 0 +05}.. {638312400 21600 1 +05}.. {654642000 18000 0 +05}.. {670366800 14400 0 +04}.. {670370400 18000 1 +04}.. {686095200 14400 0 +04}.. {695772000 18000 0 +05}.. {701816400 21600 1 +05}.. {717541200 18000 0 +05}.. {733266000 21600 1 +05}.. {7489

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Qyzylorda

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1670
                                                                                                                      Entropy (8bit):3.734572151642808
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5NvalvNhQQvmRKqv0fvzQIovWdvEGvDaDvs5vZlovKWgvNSvTqvIQvyovklvqQX0:TaBNKs6b03zB0WJEuDa7sFZiKWcN6Tir
                                                                                                                      MD5:026EC6E479EC006C4398288362254680
                                                                                                                      SHA1:24AD03DD21DA394B3423D27211955BFD694F8E73
                                                                                                                      SHA-256:CD6B067AA3EF6935B4E89CA36E6A03FCB97F1E0EE61A7B5D46C06BF4DE140774
                                                                                                                      SHA-512:023AC55E118F13A31CE996C7BA155C90D47DEB6C223EEB3C0EE7B702871FF0CCA13CDF61D65FDDABE41B888CD7A74274AA5730059CC5688F8ED4DDBF8FE4ECA4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Qyzylorda) {.. {-9223372036854775808 15712 0 LMT}.. {-1441167712 14400 0 +04}.. {-1247544000 18000 0 +05}.. {354913200 21600 1 +06}.. {370720800 21600 0 +06}.. {386445600 18000 0 +05}.. {386449200 21600 1 +05}.. {402256800 18000 0 +05}.. {417985200 21600 1 +05}.. {433792800 18000 0 +05}.. {449607600 21600 1 +05}.. {465339600 18000 0 +05}.. {481064400 21600 1 +05}.. {496789200 18000 0 +05}.. {512514000 21600 1 +05}.. {528238800 18000 0 +05}.. {543963600 21600 1 +05}.. {559688400 18000 0 +05}.. {575413200 21600 1 +05}.. {591138000 18000 0 +05}.. {606862800 21600 1 +05}.. {622587600 18000 0 +05}.. {638312400 21600 1 +05}.. {654642000 18000 0 +05}.. {670366800 14400 0 +04}.. {670370400 18000 1 +04}.. {701812800 18000 0 +05}.. {701816400 21600 1 +05}.. {717541200 18000 0 +05}.. {733266000 21600 1 +05}.. {748990800 18000 0 +05}.. {764

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Rangoon

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):174
                                                                                                                      Entropy (8bit):4.812955128020714
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8nv3vXHAIgNnDA6RL/2WFK02KQMFfh4WFKsyn:SlSWB9vsM3yHvPHAIg15N/2wK0GEJ4wy
                                                                                                                      MD5:BD3F294F1EDDD21467E980C9F5A0E7DE
                                                                                                                      SHA1:11A3FC3E4489C18BDF9BFFB4C44615559D9DD99D
                                                                                                                      SHA-256:E4D2C38D8E7377A528291A88129CDAC40CA4D40A5F1CD8ADB98228527556906E
                                                                                                                      SHA-512:FA5FD600627793EABB83C1066BE246A47BCCE1FC57830596B9C0CDE8901B949AF178ABDE876C3B73CC3751312E8A4C03C390888B0B5A9669F511344143F83073
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Yangon)]} {.. LoadTimeZoneFile Asia/Yangon..}..set TZData(:Asia/Rangoon) $TZData(:Asia/Yangon)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Riyadh

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):148
                                                                                                                      Entropy (8bit):4.973311159904374
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2WFK814PMXGm2OHFukeoHqUi9VssWYcv:SlSWB9eg/2wK81GDm2OHF7eoHvi9V1Wr
                                                                                                                      MD5:AD3236CFF141732831732357AB181EE3
                                                                                                                      SHA1:EAF51A63898A2048EA5FBE9BA4C001EEE37FFDB2
                                                                                                                      SHA-256:411E31D09FFA48E44169C42661AE2F7FC142460BCAA216837D8C4740983CA7BD
                                                                                                                      SHA-512:6CA2D89C02568580786BE98A863453ADCF4D21CAC52E5B44C4F7A05E76D29AEB3E28E353D6FB758BB553DBC8F35389462B388F61E94C68F5DB50A3E8C429336D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Riyadh) {.. {-9223372036854775808 11212 0 LMT}.. {-719636812 10800 0 +03}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Saigon

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):188
                                                                                                                      Entropy (8bit):4.946090704619887
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8I65eV5XHAIgN2h6560ARL/2WFKwJ6h4WFK365ey:SlSWB9vsM3yJAVJHAIgA4k0AN/2wKl4i
                                                                                                                      MD5:0766480A295525EE5D65F1ED32094858
                                                                                                                      SHA1:7A2D68E1009DDD809A4A700931456C617DCD343A
                                                                                                                      SHA-256:C695981A0DF691C3F4509999FBC52858ADC75024CCCBDEFBE1094FED17E809E4
                                                                                                                      SHA-512:A21536FB61A64E953E8D6414FF0AEF1BC7E68A33C5DCF7090517A91FC449B96A93A4FBDF2C00682540D1193FDB29603349F5BDB455FD90045FDBCA61247A9860
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Ho_Chi_Minh)]} {.. LoadTimeZoneFile Asia/Ho_Chi_Minh..}..set TZData(:Asia/Saigon) $TZData(:Asia/Ho_Chi_Minh)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Sakhalin

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2117
                                                                                                                      Entropy (8bit):3.7276904131666577
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5q+3Vv+0j6lua2Gg/3gO8UoflcXRDhUBAc+:YxIa2GOT8tiXBC6c+
                                                                                                                      MD5:295D51B8FBBE890C97637687B8F32322
                                                                                                                      SHA1:7BB72B0EC783898DDF625D275E3BBB964D1693FB
                                                                                                                      SHA-256:D7D0EA5CEF908442AB0D777A4B097BED18540CD5280FF63F33DD989E27E72908
                                                                                                                      SHA-512:9B3E3BA01EAE38A00B0EE8A8FB17191CB4ED2EE9E46AE06403BA8C1193804764C86599840DC03E0C6A631456E1BE2BC560BDF6CF0450068EF78A6E494041326C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Sakhalin) {.. {-9223372036854775808 34248 0 LMT}.. {-2031039048 32400 0 +09}.. {-768560400 39600 0 +12}.. {354891600 43200 1 +12}.. {370699200 39600 0 +11}.. {386427600 43200 1 +12}.. {402235200 39600 0 +11}.. {417963600 43200 1 +12}.. {433771200 39600 0 +11}.. {449586000 43200 1 +12}.. {465318000 39600 0 +11}.. {481042800 43200 1 +12}.. {496767600 39600 0 +11}.. {512492400 43200 1 +12}.. {528217200 39600 0 +11}.. {543942000 43200 1 +12}.. {559666800 39600 0 +11}.. {575391600 43200 1 +12}.. {591116400 39600 0 +11}.. {606841200 43200 1 +12}.. {622566000 39600 0 +11}.. {638290800 43200 1 +12}.. {654620400 39600 0 +11}.. {670345200 36000 0 +11}.. {670348800 39600 1 +11}.. {686073600 36000 0 +10}.. {695750400 39600 0 +12}.. {701794800 43200 1 +12}.. {717519600 39600 0 +11}.. {733244400 43200 1 +12}.. {748969200 39600 0 +11}.. {76469

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Samarkand

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):879
                                                                                                                      Entropy (8bit):3.9460497720710506
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5t8eZd7QvalvNhQQvmRKqvzQfv7PQIovWxrvEGvDWdDvs5v/RlovKT10Sv6r:5MvalvNhQQvmRKqv0fvzQIovWdvEGvDO
                                                                                                                      MD5:10A758996B0DF756E520541BEA9B7D75
                                                                                                                      SHA1:137E5FD4E00CFA4B3939EF11868862B7F93D87CD
                                                                                                                      SHA-256:35E4B905723891281D9A6A0A1FD3760A3A48136E1419C686BE31ACE83BF7AA9D
                                                                                                                      SHA-512:7E32661731EAB2ED8C387533ACCB4853F5B6225BAC11E93247E7B06D7AA856E6A665F63718BFE395CFD00F80A4C16789D7097FFA8DAD88B1D707BF9C155C1D4C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Samarkand) {.. {-9223372036854775808 16073 0 LMT}.. {-1441168073 14400 0 +04}.. {-1247544000 18000 0 +05}.. {354913200 21600 1 +06}.. {370720800 21600 0 +06}.. {386445600 18000 0 +05}.. {386449200 21600 1 +05}.. {402256800 18000 0 +05}.. {417985200 21600 1 +05}.. {433792800 18000 0 +05}.. {449607600 21600 1 +05}.. {465339600 18000 0 +05}.. {481064400 21600 1 +05}.. {496789200 18000 0 +05}.. {512514000 21600 1 +05}.. {528238800 18000 0 +05}.. {543963600 21600 1 +05}.. {559688400 18000 0 +05}.. {575413200 21600 1 +05}.. {591138000 18000 0 +05}.. {606862800 21600 1 +05}.. {622587600 18000 0 +05}.. {638312400 21600 1 +05}.. {654642000 18000 0 +05}.. {670366800 21600 1 +05}.. {686091600 18000 0 +05}.. {694206000 18000 0 +05}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Seoul

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):985
                                                                                                                      Entropy (8bit):4.121802167517286
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5AemgvHzF+zg2c+z3NGmJhIUfqII8yHg/zoD:5F/nfWUBISHg/G
                                                                                                                      MD5:A1DE6975DEA70D7241B5B3C43E1EA3AA
                                                                                                                      SHA1:35EE563A2BCA77C761F7E878997763EA8D258040
                                                                                                                      SHA-256:C4F82C94650572FE4D03BC1FE54CED8F4BF55DFBEE855D52DE3EA6378240AF93
                                                                                                                      SHA-512:1639B0609115DBEA6A381986A732A5CA1523952AEF84843B4D714D5B2FF40B16C4166D8D60D31D4FC2C2BA34DED1F6DB39474336195603562265BDBF71687696
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Seoul) {.. {-9223372036854775808 30472 0 LMT}.. {-1948782472 30600 0 KST}.. {-1830414600 32400 0 JST}.. {-767350800 32400 0 KST}.. {-681210000 36000 1 KDT}.. {-672228000 32400 0 KST}.. {-654771600 36000 1 KDT}.. {-640864800 32400 0 KST}.. {-623408400 36000 1 KDT}.. {-609415200 32400 0 KST}.. {-588848400 36000 1 KDT}.. {-577965600 32400 0 KST}.. {-498128400 30600 0 KST}.. {-462702600 34200 1 KDT}.. {-451733400 30600 0 KST}.. {-429784200 34200 1 KDT}.. {-418296600 30600 0 KST}.. {-399544200 34200 1 KDT}.. {-387451800 30600 0 KST}.. {-368094600 34200 1 KDT}.. {-356002200 30600 0 KST}.. {-336645000 34200 1 KDT}.. {-324552600 30600 0 KST}.. {-305195400 34200 1 KDT}.. {-293103000 30600 0 KST}.. {-264933000 32400 0 KST}.. {547578000 36000 1 KDT}.. {560883600 32400 0 KST}.. {579027600 36000 1 KDT}.. {592333200 32400 0 KST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Shanghai

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):981
                                                                                                                      Entropy (8bit):4.16042656890735
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5Te3vvZJzHjwH6kHp7FH32AzHjZBHNHlQHuHxmHUjH6zHj2HBHeC:5ovZZO7lLpT24
                                                                                                                      MD5:A266AA43A84FD5E4890BC77AA4E240D0
                                                                                                                      SHA1:CD88C5D451CD7D3F50C9B36FDD47C84D20377441
                                                                                                                      SHA-256:3AABB42D9EFE95D906B7F34640E7815919A1A20979EBB6EC1527FCAA3B09B22A
                                                                                                                      SHA-512:13AE48F58C9AF24002F0FE4F28BF96B10EE0ED293E0DE9D29BCEBAAE102B2EA818F42CA4069544A254C95444A48604EC57E6AB2BEBDA4B5E72C82B49E61AD0A0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Shanghai) {.. {-9223372036854775808 29143 0 LMT}.. {-2177481943 28800 0 CST}.. {-1600675200 32400 1 CDT}.. {-1585904400 28800 0 CST}.. {-933667200 32400 1 CDT}.. {-922093200 28800 0 CST}.. {-908870400 32400 1 CDT}.. {-888829200 28800 0 CST}.. {-881049600 32400 1 CDT}.. {-767869200 28800 0 CST}.. {-745833600 32400 1 CDT}.. {-733827600 28800 0 CST}.. {-716889600 32400 1 CDT}.. {-699613200 28800 0 CST}.. {-683884800 32400 1 CDT}.. {-670669200 28800 0 CST}.. {-652348800 32400 1 CDT}.. {-650016000 28800 0 CST}.. {515527200 32400 1 CDT}.. {527014800 28800 0 CST}.. {545162400 32400 1 CDT}.. {558464400 28800 0 CST}.. {577216800 32400 1 CDT}.. {589914000 28800 0 CST}.. {608666400 32400 1 CDT}.. {621968400 28800 0 CST}.. {640116000 32400 1 CDT}.. {653418000 28800 0 CST}.. {671565600 32400 1 CDT}.. {684867600 28800 0 CST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Singapore

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):372
                                                                                                                      Entropy (8bit):4.436676898144829
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2wKfbSDm2OHxdoHvm5vWOb/MVSYyF/3MesF5XJSx0dMVSSFF8kvScHS:MB862nbGmdHDCvsvDTMsF/CFDMx/HHbe
                                                                                                                      MD5:C3D13D921E4C6E475910E5080B761C32
                                                                                                                      SHA1:8C5AE73C4098D03908E5D567FD7C4D827601D718
                                                                                                                      SHA-256:05C76B58A4E356FD358E24FBC71FAE98DCB18C441C8D8CBB13A18D4F6E406062
                                                                                                                      SHA-512:3A620597469D31577ECAAA098C95C244F0C288ABACE9E8964D8641154C1893967EFBD7211A41751D0D4CC1B0B9A2286F11738EFB7D01F110A4826BBE1844A2EA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Singapore) {.. {-9223372036854775808 24925 0 LMT}.. {-2177477725 24925 0 SMT}.. {-2038200925 25200 0 +07}.. {-1167634800 26400 1 +0720}.. {-1073028000 26400 0 +0720}.. {-894180000 27000 0 +0730}.. {-879665400 32400 0 +09}.. {-767005200 27000 0 +0730}.. {378664200 28800 0 +08}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Srednekolymsk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2064
                                                                                                                      Entropy (8bit):3.7913177223006698
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5HJeidmbv+OC+jsuwltZQONEa2Ggf3augO8UoxLyHdX/CX6bW4Bv/7NKxwy:5HSv+0j6lua2Gg/3gO8UoOZU2Wc/pKf
                                                                                                                      MD5:B4FA38E884A85F6BD47C8BB02BB0500C
                                                                                                                      SHA1:1DD135B79CC0D81C048D7B2C6BE0CF71171DD19E
                                                                                                                      SHA-256:705D6D8360C2DCD51E909E39E1910FE876145220D151031612DA36B247207395
                                                                                                                      SHA-512:2D32AAAF1BCC865B5F2810BFE0FB82BE98140BB5F2ECA1DA7FD148A3074DA127B81242F17B8BA9C9E259B61CBB123FD1513CCE6A85C8D7679ADFC0D689B552BB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Srednekolymsk) {.. {-9223372036854775808 36892 0 LMT}.. {-1441188892 36000 0 +10}.. {-1247565600 39600 0 +12}.. {354891600 43200 1 +12}.. {370699200 39600 0 +11}.. {386427600 43200 1 +12}.. {402235200 39600 0 +11}.. {417963600 43200 1 +12}.. {433771200 39600 0 +11}.. {449586000 43200 1 +12}.. {465318000 39600 0 +11}.. {481042800 43200 1 +12}.. {496767600 39600 0 +11}.. {512492400 43200 1 +12}.. {528217200 39600 0 +11}.. {543942000 43200 1 +12}.. {559666800 39600 0 +11}.. {575391600 43200 1 +12}.. {591116400 39600 0 +11}.. {606841200 43200 1 +12}.. {622566000 39600 0 +11}.. {638290800 43200 1 +12}.. {654620400 39600 0 +11}.. {670345200 36000 0 +11}.. {670348800 39600 1 +11}.. {686073600 36000 0 +10}.. {695750400 39600 0 +12}.. {701794800 43200 1 +12}.. {717519600 39600 0 +11}.. {733244400 43200 1 +12}.. {748969200 39600 0 +11}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Taipei

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1344
                                                                                                                      Entropy (8bit):4.062084847879695
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5X2eIvZPzGzHjZBHNHlQHKn3HnHNd9HiHkHBHaHLHMtyH9Qm+zHFOzHZ32HZvHiR:5Xi1ypBvt1mwO3Kq46T
                                                                                                                      MD5:AECA800C8F2A679D0B19E5BB90AFD858
                                                                                                                      SHA1:2C7DCEB709F9A4312C511971FE1E6A9DC1FBD0E8
                                                                                                                      SHA-256:389C9D3EE2970665D0D8C5CB61B8B790C5FBDDC0DF0BF2B9753046F5953A477F
                                                                                                                      SHA-512:C2D6BB4FEB5848D0704647D26F94C0BD8CD7E834AA2187EC9C877E80157E9CC225BBA3BECEE0148894C8639105D292AB50EE95830992BF357C632ACF001E020F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Taipei) {.. {-9223372036854775808 29160 0 LMT}.. {-2335248360 28800 0 CST}.. {-1017820800 32400 0 JST}.. {-766224000 28800 0 CST}.. {-745833600 32400 1 CDT}.. {-733827600 28800 0 CST}.. {-716889600 32400 1 CDT}.. {-699613200 28800 0 CST}.. {-683884800 32400 1 CDT}.. {-670669200 28800 0 CST}.. {-652348800 32400 1 CDT}.. {-639133200 28800 0 CST}.. {-620812800 32400 1 CDT}.. {-607597200 28800 0 CST}.. {-589276800 32400 1 CDT}.. {-576061200 28800 0 CST}.. {-562924800 32400 1 CDT}.. {-541760400 28800 0 CST}.. {-528710400 32400 1 CDT}.. {-510224400 28800 0 CST}.. {-497174400 32400 1 CDT}.. {-478688400 28800 0 CST}.. {-465638400 32400 1 CDT}.. {-449830800 28800 0 CST}.. {-434016000 32400 1 CDT}.. {-418208400 28800 0 CST}.. {-402480000 32400 1 CDT}.. {-386672400 28800 0 CST}.. {-370944000 32400 1 CDT}.. {-355136400 28800 0 CST}.. {-3394080

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Tashkent

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):878
                                                                                                                      Entropy (8bit):3.9280321712564845
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5geQqdNRvOt81FCuLqecDngO6jPvTpYy5T4TXvKT10Sv6r:5+EvdJqxiF0rvK50Sv6r
                                                                                                                      MD5:DB59DB8E401E12917B7367D5604D3DE6
                                                                                                                      SHA1:7CC7C5C1DB551BD381B833C81746201D36BC59A9
                                                                                                                      SHA-256:4445F3F892C7267A6867009CC1A3F0B0548D0240408375A9D15360B28993C2A9
                                                                                                                      SHA-512:2C7AE63C408A9F06F973AAC16845E1DBE92D15A421BBBE420914F21155AD5E57CD058D7E4427E43185E023D2FF475EBF9D74003ECEF004FF4E5F9D5681ADFB80
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Tashkent) {.. {-9223372036854775808 16631 0 LMT}.. {-1441168631 18000 0 +05}.. {-1247547600 21600 0 +06}.. {354909600 25200 1 +06}.. {370717200 21600 0 +06}.. {386445600 25200 1 +06}.. {402253200 21600 0 +06}.. {417981600 25200 1 +06}.. {433789200 21600 0 +06}.. {449604000 25200 1 +06}.. {465336000 21600 0 +06}.. {481060800 25200 1 +06}.. {496785600 21600 0 +06}.. {512510400 25200 1 +06}.. {528235200 21600 0 +06}.. {543960000 25200 1 +06}.. {559684800 21600 0 +06}.. {575409600 25200 1 +06}.. {591134400 21600 0 +06}.. {606859200 25200 1 +06}.. {622584000 21600 0 +06}.. {638308800 25200 1 +06}.. {654638400 21600 0 +06}.. {670363200 18000 0 +05}.. {670366800 21600 1 +05}.. {686091600 18000 0 +05}.. {694206000 18000 0 +05}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Tbilisi

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1729
                                                                                                                      Entropy (8bit):3.6815162494646034
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5yBeqvIdZlykbocXcwJUE5iu8JmFebARoc9lVNk7/9bq8dq16b3C9UPqUsx9Ul4N:5MmsUf8mFpNWFnytO6VnYK
                                                                                                                      MD5:C376C9ED66F6CC011E063D3E8E0DCED1
                                                                                                                      SHA1:13C6345F8CB0EC79FE7C78B156C5737BCB66E49E
                                                                                                                      SHA-256:B637BB0E49144C717E99E93540CB2C4D3695D63B91FE42547F2F0AA006498693
                                                                                                                      SHA-512:FD60192CBEDC91C5D6B3B5E6F19DEDCAE14DCF48DCAE6D4865A8F0BBDC01CBF8DAAE92C4C46C353AF5B3EEE36CCC87B23F193DDF221132F5404C42507B708364
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Tbilisi) {.. {-9223372036854775808 10751 0 LMT}.. {-2840151551 10751 0 TBMT}.. {-1441162751 10800 0 +03}.. {-405140400 14400 0 +04}.. {354916800 18000 1 +04}.. {370724400 14400 0 +04}.. {386452800 18000 1 +04}.. {402260400 14400 0 +04}.. {417988800 18000 1 +04}.. {433796400 14400 0 +04}.. {449611200 18000 1 +04}.. {465343200 14400 0 +04}.. {481068000 18000 1 +04}.. {496792800 14400 0 +04}.. {512517600 18000 1 +04}.. {528242400 14400 0 +04}.. {543967200 18000 1 +04}.. {559692000 14400 0 +04}.. {575416800 18000 1 +04}.. {591141600 14400 0 +04}.. {606866400 18000 1 +04}.. {622591200 14400 0 +04}.. {638316000 18000 1 +04}.. {654645600 14400 0 +04}.. {670370400 10800 0 +03}.. {670374000 14400 1 +03}.. {686098800 10800 0 +03}.. {694213200 10800 0 +03}.. {701816400 14400 1 +03}.. {717537600 10800 0 +03}.. {733266000 14400 1 +03}.. {748

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Tehran

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2354
                                                                                                                      Entropy (8bit):3.666553647637418
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5Z2eendFalxbr1p4USUcESUUxSuEqzSUUongA3jJW3eY37U8uuZrc3cNWH1/ANzx:54G9SOSWzx1qcK83kv3OR0xV1ox
                                                                                                                      MD5:A7A174A14E51E0ACD7092D2A5AA50F99
                                                                                                                      SHA1:69ADDDDB68084B90819AD49A5230D5B0E1A9CD85
                                                                                                                      SHA-256:25870503A8A679DA13B98117BD473EAA0C79B094B85D3AD50629FF0946D5EACE
                                                                                                                      SHA-512:1ECFB558B13C94BDC848E7BBBB0CA1BB854BB12E112EBF306045EC14F00CE3E3C2DA51EBA8AF2D63C95D71B945647C3D9E9881158FE128DEBE940A742C4BFEB1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Tehran) {.. {-9223372036854775808 12344 0 LMT}.. {-1704165944 12344 0 TMT}.. {-1090466744 12600 0 +0330}.. {227820600 16200 1 +0330}.. {246227400 14400 0 +04}.. {259617600 18000 1 +04}.. {271108800 14400 0 +04}.. {283982400 12600 0 +0330}.. {296598600 16200 1 +0330}.. {306531000 12600 0 +0330}.. {322432200 16200 1 +0330}.. {338499000 12600 0 +0330}.. {673216200 16200 1 +0330}.. {685481400 12600 0 +0330}.. {701209800 16200 1 +0330}.. {717103800 12600 0 +0330}.. {732745800 16200 1 +0330}.. {748639800 12600 0 +0330}.. {764281800 16200 1 +0330}.. {780175800 12600 0 +0330}.. {795817800 16200 1 +0330}.. {811711800 12600 0 +0330}.. {827353800 16200 1 +0330}.. {843247800 12600 0 +0330}.. {858976200 16200 1 +0330}.. {874870200 12600 0 +0330}.. {890512200 16200 1 +0330}.. {906406200 12600 0 +0330}.. {922048200 16200 1 +0330}.. {937942200 12600

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Tel_Aviv

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):184
                                                                                                                      Entropy (8bit):4.876713308636272
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq85zFFfXHAIgN0AzFFVHRL/2WFK+TT52WFKYzFgn:SlSWB9vsM3yZbPHAIgCAXRN/2wKsswKR
                                                                                                                      MD5:40B15013485EE2138A3DCB915F9121E7
                                                                                                                      SHA1:3ADBE38686C7CA1FDE3DDD12BE908F39BFD1E228
                                                                                                                      SHA-256:07537A30E6236D9E334DAFD5C4D352D25FDEF95D6DC7496F5D93EFAB74D9EBB1
                                                                                                                      SHA-512:DA3B7B44B3BEF07CA8AA5253BF684A838181D8A15D7CCF0447A6B5F5BAE28D155CF65BCFB6286EB36C0B9F4FDD1FE862A3297ADB6FC33532B9F766334283D725
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Jerusalem)]} {.. LoadTimeZoneFile Asia/Jerusalem..}..set TZData(:Asia/Tel_Aviv) $TZData(:Asia/Jerusalem)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Thimbu

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):176
                                                                                                                      Entropy (8bit):4.906503135441824
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8kNZ4WXHAIgNqFNKARL/2WFK9Z752WFKvNZovn:SlSWB9vsM3ykZ42HAIgc3KAN/2wKf126
                                                                                                                      MD5:081862B6FB33389BEC9B0E6B500AA342
                                                                                                                      SHA1:AF9467BB87C4C28921DF62A87B81223052F9FF4A
                                                                                                                      SHA-256:37459C17B59639DF62B3F3943751902CE6AAF1F11B7630069DB45052EBEFB5B9
                                                                                                                      SHA-512:CAF6F1C928528C4471229A2EF2944623545626532986628E6CE38884535286A0B38BA88C1A295E8B11322475D6BFAC61BF89786A76330C1A0C729339A3532BAF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Thimphu)]} {.. LoadTimeZoneFile Asia/Thimphu..}..set TZData(:Asia/Thimbu) $TZData(:Asia/Thimphu)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Thimphu

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):180
                                                                                                                      Entropy (8bit):4.887493603495978
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2WFKvNZJMXGm2OHEQUTFnoHqVaJKuc/v6Q61V9gmZVFSTVV:SlSWB9eg/2wKVZJDm2OHEfnoHDKuc/SC
                                                                                                                      MD5:F239452984CCA9F23E97A880652C39E6
                                                                                                                      SHA1:52D25282D03B79960F152D21E7492EE26DAEBBAA
                                                                                                                      SHA-256:B797C74E3840298C3CD8149FC8AA4BCE839EFE79E7C3310986FF23C965607929
                                                                                                                      SHA-512:1044BEDAE04FCA7BD62937AFCE70F6C447583A90DD1596C3029A64A8251E3F73C106F4D940548DD38E895D67FEFDCD196B257E11437DEB399085EE80C345AA50
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Thimphu) {.. {-9223372036854775808 21516 0 LMT}.. {-706341516 19800 0 +0530}.. {560025000 21600 0 +06}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Tokyo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):388
                                                                                                                      Entropy (8bit):4.470556147950505
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862ymdHOx5CvAoK3zoiIxtoFDIe+zT0agbov:5yeOCvARzzCOVa/gby
                                                                                                                      MD5:3CCC15B63A882DB1B7459A51CD1C8165
                                                                                                                      SHA1:77A3EFE6E4EE524B9EC6F51593DD7521FD7B8DAD
                                                                                                                      SHA-256:3DA522FA88541A375D53F30A0B62DC4A305FA0315FEE534B7998C9E0A239450A
                                                                                                                      SHA-512:15238E96DABAB5D2B9FFD25B3F50417ED32205FA69239D6F6B28DA97A378D669FD409164964D0DD2A5B1D795C8F60E8D4EB15924046348C3D6010646A536E07C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Tokyo) {.. {-9223372036854775808 33539 0 LMT}.. {-2587712400 32400 0 JST}.. {-683802000 36000 1 JDT}.. {-672310800 32400 0 JST}.. {-654771600 36000 1 JDT}.. {-640861200 32400 0 JST}.. {-620298000 36000 1 JDT}.. {-609411600 32400 0 JST}.. {-588848400 36000 1 JDT}.. {-577962000 32400 0 JST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Tomsk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2116
                                                                                                                      Entropy (8bit):3.695316005718174
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5CeLz/XJfsFN/3sFrOksF/sF7IyksF7FRZsFLsFTsFcsFk73sFK/XCFKTipnFEno:5H040yVRB7VfXucydm4IqtTTDOS
                                                                                                                      MD5:E95DE93CBCE72C5E02D7ECFE94C96308
                                                                                                                      SHA1:59A49EBFE544D97545BADFEFE716BB5659C64C20
                                                                                                                      SHA-256:6B64A01D0F0B5EC7A1410C3BD6883BA7CC133E9F073D40E8BFECE037E3A3FA24
                                                                                                                      SHA-512:9E33DC9C1C6D60F3226263C484AF46A14AAB31F838516A0D69BA08F8F416EF10D09697E8D7ABAC1CE1F5BCE8AB0C2635D99FBE70C89ECC268DED0DCE89E67466
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Tomsk) {.. {-9223372036854775808 20391 0 LMT}.. {-1578807591 21600 0 +06}.. {-1247551200 25200 0 +08}.. {354906000 28800 1 +08}.. {370713600 25200 0 +07}.. {386442000 28800 1 +08}.. {402249600 25200 0 +07}.. {417978000 28800 1 +08}.. {433785600 25200 0 +07}.. {449600400 28800 1 +08}.. {465332400 25200 0 +07}.. {481057200 28800 1 +08}.. {496782000 25200 0 +07}.. {512506800 28800 1 +08}.. {528231600 25200 0 +07}.. {543956400 28800 1 +08}.. {559681200 25200 0 +07}.. {575406000 28800 1 +08}.. {591130800 25200 0 +07}.. {606855600 28800 1 +08}.. {622580400 25200 0 +07}.. {638305200 28800 1 +08}.. {654634800 25200 0 +07}.. {670359600 21600 0 +07}.. {670363200 25200 1 +07}.. {686088000 21600 0 +06}.. {695764800 25200 0 +08}.. {701809200 28800 1 +08}.. {717534000 25200 0 +07}.. {733258800 28800 1 +08}.. {748983600 25200 0 +07}.. {7647084

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Ujung_Pandang

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):186
                                                                                                                      Entropy (8bit):4.897140749162557
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8pYFfXHAIgNzGRRL/2WFKPQOrFJ4WFKov:SlSWB9vsM3yWFPHAIg0RN/2wKPQOrFJD
                                                                                                                      MD5:F6AE33D706C36FDD8A21F44AD59F5607
                                                                                                                      SHA1:94D6EC7A437249AEBE2FA4AF8AFB029A620368C0
                                                                                                                      SHA-256:732751845ACEDBFFD3C6170F4B94CB20B25BFDCFCC5EEA19F4BE439F5C5B573A
                                                                                                                      SHA-512:2314AB2B154887842211C9A570BC1323D9B4375FF60C96296835DB001E8A277CA62D40B8562BC34EDDF281D96D5325640B79F7907558C6E0319C7D2A76BE239C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Makassar)]} {.. LoadTimeZoneFile Asia/Makassar..}..set TZData(:Asia/Ujung_Pandang) $TZData(:Asia/Makassar)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Ulaanbaatar

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1590
                                                                                                                      Entropy (8bit):3.7728141273024374
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5IerIvusF7cCGK6zoCjZte3kzMjsBw0oZzlL98oysHqGzJvqE+ksabzdX+YjL:5VujmUCei46oljFC67
                                                                                                                      MD5:A4647294401D2B54ABAA8E509BF05A6F
                                                                                                                      SHA1:BF804CC38996D7715E3BA9BAD715D7ADBED781B9
                                                                                                                      SHA-256:A56A26981163A717CF388A423CFE7A2BAD1BE8652BE2E338670CBC0C0A70E5E9
                                                                                                                      SHA-512:B43157FABDE016FA6636CAB7B06CC1DEA53526B42FB46BB41DC4B7E48188D191C325BEF0D170B125E885F321C4316746A8D478D798828E2DC4A51C71DA4A610C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Ulaanbaatar) {.. {-9223372036854775808 25652 0 LMT}.. {-2032931252 25200 0 +07}.. {252435600 28800 0 +08}.. {417974400 32400 1 +08}.. {433782000 28800 0 +08}.. {449596800 32400 1 +08}.. {465318000 28800 0 +08}.. {481046400 32400 1 +08}.. {496767600 28800 0 +08}.. {512496000 32400 1 +08}.. {528217200 28800 0 +08}.. {543945600 32400 1 +08}.. {559666800 28800 0 +08}.. {575395200 32400 1 +08}.. {591116400 28800 0 +08}.. {606844800 32400 1 +08}.. {622566000 28800 0 +08}.. {638294400 32400 1 +08}.. {654620400 28800 0 +08}.. {670348800 32400 1 +08}.. {686070000 28800 0 +08}.. {701798400 32400 1 +08}.. {717519600 28800 0 +08}.. {733248000 32400 1 +08}.. {748969200 28800 0 +08}.. {764697600 32400 1 +08}.. {780418800 28800 0 +08}.. {796147200 32400 1 +08}.. {811868400 28800 0 +08}.. {828201600 32400 1 +08}.. {843922800 28800 0 +08}.. {859

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Ulan_Bator

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):192
                                                                                                                      Entropy (8bit):4.728285544456033
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8TcXkXHAIgNrfcXORL/2WFKhrMEBQWFKucXB:SlSWB9vsM3yXHAIgTN/2wKhrMEewKX
                                                                                                                      MD5:D2EAEA6182FB332CAA707B523F6C8A9D
                                                                                                                      SHA1:3BFC654E2B3BCF902AF41AEEC46772C84FFF3890
                                                                                                                      SHA-256:D17FDAF17B3DAC3A1310E2332F61585598185E64CED799ABD68249EB5B698591
                                                                                                                      SHA-512:E16BEE28BFE3AFFFE6F0025C09D0D65001F38D5045AAB1B554E4D3A66A88273F985B7BAA11F8D26E76E5ABC9F559E3E4B794CC939AAD5FF012A5A47924D08CB3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Ulaanbaatar)]} {.. LoadTimeZoneFile Asia/Ulaanbaatar..}..set TZData(:Asia/Ulan_Bator) $TZData(:Asia/Ulaanbaatar)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Urumqi

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):149
                                                                                                                      Entropy (8bit):5.006390440264841
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2WFKjhfMXGm2OHEVPoHsWA0GVFSTVVn:SlSWB9eg/2wKjJDm2OHEVPoH3A0CUX
                                                                                                                      MD5:D6245CAAEC9BA2579F4CEFFF196A9369
                                                                                                                      SHA1:4D182953F2CEEFF3583265F977B14F40C1A2FB43
                                                                                                                      SHA-256:C445B8030DEDDDED0AFF5CC692CC323B63BE8C14BBD42DC3FDE90AD4F9D14785
                                                                                                                      SHA-512:A32C477B6FAA79247907D1C4E2DF400B05AF4B529277C4CE12B33097872311E3F579115DC8CBA93DAC936928FD574414F3473A9CB7C8E85AB57CCA57489B60F8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Urumqi) {.. {-9223372036854775808 21020 0 LMT}.. {-1325483420 21600 0 +06}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Ust-Nera

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2058
                                                                                                                      Entropy (8bit):3.773734429231407
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5petrlfgLv+OC+jsuwltZQONEa2Ggf3augO8UoxLyHdX/CX6bW4Bv/7NKxKG:5Ysv+0j6lua2Gg/3gO8UoOZU2Wc/pKF
                                                                                                                      MD5:5ADD78E4AFCBA913D078A8790861A2DE
                                                                                                                      SHA1:BB63A762D5D76C0FD3CB9AB2BCDE95718E1C99EB
                                                                                                                      SHA-256:9D639C0FC69B3BEEBC96969092F9590EB48E7946E901B225BF245E165973B9A8
                                                                                                                      SHA-512:7C2418FD1F96F101B83E2ABDF2551405C6E429DBBF30A2FA7CD2477E2CE1CEEBB790C51B28AEFF043BA7A7A914CEF3C812668058D69225B9FE9475C56508453D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Ust-Nera) {.. {-9223372036854775808 34374 0 LMT}.. {-1579426374 28800 0 +08}.. {354898800 43200 0 +12}.. {370699200 39600 0 +11}.. {386427600 43200 1 +12}.. {402235200 39600 0 +11}.. {417963600 43200 1 +12}.. {433771200 39600 0 +11}.. {449586000 43200 1 +12}.. {465318000 39600 0 +11}.. {481042800 43200 1 +12}.. {496767600 39600 0 +11}.. {512492400 43200 1 +12}.. {528217200 39600 0 +11}.. {543942000 43200 1 +12}.. {559666800 39600 0 +11}.. {575391600 43200 1 +12}.. {591116400 39600 0 +11}.. {606841200 43200 1 +12}.. {622566000 39600 0 +11}.. {638290800 43200 1 +12}.. {654620400 39600 0 +11}.. {670345200 36000 0 +11}.. {670348800 39600 1 +11}.. {686073600 36000 0 +10}.. {695750400 39600 0 +12}.. {701794800 43200 1 +12}.. {717519600 39600 0 +11}.. {733244400 43200 1 +12}.. {748969200 39600 0 +11}.. {764694000 43200 1 +12}.. {780418

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Vientiane

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):179
                                                                                                                      Entropy (8bit):4.858039387006872
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8VLYO5YFfXHAIgN8ELYOJARL/2WFKgTjEHp4WFKELt:SlSWB9vsM3y1LePHAIgKELtAN/2wKgsX
                                                                                                                      MD5:D23A09C84A5368FBB47174BC0A460D14
                                                                                                                      SHA1:045A72FEA79C75E5F0029BD110E33A022C57DFAB
                                                                                                                      SHA-256:18F5E4FE8247F676278AC5F1912AC401DC48DF5B756D22E76FF1CFA702F88DA7
                                                                                                                      SHA-512:404EABC2FC162E18C678CED063249C7FF4C28653880EA1903CE846FD191CD1C5B61E0610736F250B79BBAC768B1AFD6B9A8824D56D74591A95D7301B47D48387
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Bangkok)]} {.. LoadTimeZoneFile Asia/Bangkok..}..set TZData(:Asia/Vientiane) $TZData(:Asia/Bangkok)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Vladivostok

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2062
                                                                                                                      Entropy (8bit):3.7094518963173035
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:56beOUYQ7FyDy3le3i96VwAmnuBNuTw6vl9O8nfipRkwhUZDAcD:56cYQBIy343dVNUIukElcXRDhUBAcD
                                                                                                                      MD5:5C0C094B088D0212182E7B944197D4FE
                                                                                                                      SHA1:CF43A511FE9CD295207DF350704462E09D4D5278
                                                                                                                      SHA-256:2558C96E25359C72F168DAC6FB3C16C54F8FD7D0724EEB1671156D4A1F42AC6C
                                                                                                                      SHA-512:5D659EBDC8C2B06C964B083ECC78B4370A4658590D83F020CD23910C44E2D8DAFE69F61E8EB569E1905E89F38CD03ABE6B92F6CE36CF0B1EE0732A7645AFA65D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Vladivostok) {.. {-9223372036854775808 31651 0 LMT}.. {-1487321251 32400 0 +09}.. {-1247562000 36000 0 +11}.. {354895200 39600 1 +11}.. {370702800 36000 0 +10}.. {386431200 39600 1 +11}.. {402238800 36000 0 +10}.. {417967200 39600 1 +11}.. {433774800 36000 0 +10}.. {449589600 39600 1 +11}.. {465321600 36000 0 +10}.. {481046400 39600 1 +11}.. {496771200 36000 0 +10}.. {512496000 39600 1 +11}.. {528220800 36000 0 +10}.. {543945600 39600 1 +11}.. {559670400 36000 0 +10}.. {575395200 39600 1 +11}.. {591120000 36000 0 +10}.. {606844800 39600 1 +11}.. {622569600 36000 0 +10}.. {638294400 39600 1 +11}.. {654624000 36000 0 +10}.. {670348800 32400 0 +10}.. {670352400 36000 1 +10}.. {686077200 32400 0 +09}.. {695754000 36000 0 +11}.. {701798400 39600 1 +11}.. {717523200 36000 0 +10}.. {733248000 39600 1 +11}.. {748972800 36000 0 +10}.. {7

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Yakutsk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2058
                                                                                                                      Entropy (8bit):3.7081033128260934
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5h+r1gIgWH/lt0irzEzCSCItWiIrW+rDQk9CVhyFY7rRWjYuhUmgr2j:K5PhtjLiII2ZFlgm
                                                                                                                      MD5:E43E5F0EA7C4575525BAB130984DCDCC
                                                                                                                      SHA1:2D715749469FEA51A8E25D1F4F8DC4FF9178817D
                                                                                                                      SHA-256:3BEF13638C46F16435D326C675907E61BB68C8173153CED3359E983BE0E413E5
                                                                                                                      SHA-512:27954FEC865031BC363CFDE94E97B3B19836A6F777646EA4AAB12ECCAEE6D60A0C690711EA192B917AC717F94A01D1EF64BAE97DF968069CC12415971B070498
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Yakutsk) {.. {-9223372036854775808 31138 0 LMT}.. {-1579423138 28800 0 +08}.. {-1247558400 32400 0 +10}.. {354898800 36000 1 +10}.. {370706400 32400 0 +09}.. {386434800 36000 1 +10}.. {402242400 32400 0 +09}.. {417970800 36000 1 +10}.. {433778400 32400 0 +09}.. {449593200 36000 1 +10}.. {465325200 32400 0 +09}.. {481050000 36000 1 +10}.. {496774800 32400 0 +09}.. {512499600 36000 1 +10}.. {528224400 32400 0 +09}.. {543949200 36000 1 +10}.. {559674000 32400 0 +09}.. {575398800 36000 1 +10}.. {591123600 32400 0 +09}.. {606848400 36000 1 +10}.. {622573200 32400 0 +09}.. {638298000 36000 1 +10}.. {654627600 32400 0 +09}.. {670352400 28800 0 +09}.. {670356000 32400 1 +09}.. {686080800 28800 0 +08}.. {695757600 32400 0 +10}.. {701802000 36000 1 +10}.. {717526800 32400 0 +09}.. {733251600 36000 1 +10}.. {748976400 32400 0 +09}.. {76470

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Yangon

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):244
                                                                                                                      Entropy (8bit):4.692243303623333
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2wKs5XDm2OHGVQoHvZN6FCDx+UIFDVkvScHbY/s5UIAy:MB862KTmdHGuCvZNNkkHH3Sy
                                                                                                                      MD5:D45766D30074719C9A88ACE8BB53204B
                                                                                                                      SHA1:69B333DFCCCCEB66DD0F7DC28B272BB10769B6B0
                                                                                                                      SHA-256:2526557810747E78E713AE09BC305621A80FAEECF8D441632E7825738D4C79CB
                                                                                                                      SHA-512:5255DEED72D7D13862A4D6BED7E0458C099D2EF5A1B41536CAA7C0E65A61DE8B8D1AD62AD44559F970B6613ADFB3862778D1CC99B9A05CB5BBCA7F0202B5A5B2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Yangon) {.. {-9223372036854775808 23087 0 LMT}.. {-2840163887 23087 0 RMT}.. {-1577946287 23400 0 +0630}.. {-873268200 32400 0 +09}.. {-778410000 23400 0 +0630}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Yekaterinburg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2095
                                                                                                                      Entropy (8bit):3.704641905144701
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:5ievNhYvm1qv7vXIovPvSvlDvtvuovKKvKcNvHvAvivBvqvvEyv8vlvEv+v4v+v+:/Nupj40H6l75FKCKcZP8qdyEaoBAWkW+
                                                                                                                      MD5:D4DABA407BB8A10E4961D1DE5D9781D1
                                                                                                                      SHA1:6933DE65336331BD90E2BEC6AEA0609B16DAEDC9
                                                                                                                      SHA-256:2C78699EFC60758B8F8D0D1DEEDFDED5E65C65EBF3082B23E60BDEA8BF8FBCFE
                                                                                                                      SHA-512:459E2187FAA66414F5CE934C335F563DFD2FA5316B86A54D1A29123A0460AFD65B7CE46629BD6A070A14CB6873A28A2F2803DE5FF4F29EA610712EB07FAD303F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Yekaterinburg) {.. {-9223372036854775808 14553 0 LMT}.. {-1688270553 13505 0 PMT}.. {-1592610305 14400 0 +04}.. {-1247544000 18000 0 +06}.. {354913200 21600 1 +06}.. {370720800 18000 0 +05}.. {386449200 21600 1 +06}.. {402256800 18000 0 +05}.. {417985200 21600 1 +06}.. {433792800 18000 0 +05}.. {449607600 21600 1 +06}.. {465339600 18000 0 +05}.. {481064400 21600 1 +06}.. {496789200 18000 0 +05}.. {512514000 21600 1 +06}.. {528238800 18000 0 +05}.. {543963600 21600 1 +06}.. {559688400 18000 0 +05}.. {575413200 21600 1 +06}.. {591138000 18000 0 +05}.. {606862800 21600 1 +06}.. {622587600 18000 0 +05}.. {638312400 21600 1 +06}.. {654642000 18000 0 +05}.. {670366800 14400 0 +05}.. {670370400 18000 1 +05}.. {686095200 14400 0 +04}.. {695772000 18000 0 +06}.. {701816400 21600 1 +06}.. {717541200 18000 0 +05}.. {733266000 21600 1 +06}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Asia\Yerevan

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2029
                                                                                                                      Entropy (8bit):3.6487650030366106
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:5O4GeuadYlykbocXcwJUE5iu8JmFebARoc9lVNk7/9bq8dq16b3C9UPBUUUl2ue/:5xKdsUf8mFpNWFnyLCPYmPJSi3sh4
                                                                                                                      MD5:2CFA7C55D0731D24679CA5D5DC716381
                                                                                                                      SHA1:2BB66783D75C71E76409365757980FBC15F53231
                                                                                                                      SHA-256:20871FA6AA959DDFB73D846271B4A568627B564CFC08A11BDD84B98C2F2019A3
                                                                                                                      SHA-512:CAB10A48859B2C0B2CC7C56E0AA530AE7E506A4986BADC5ED974D124BD46DB328B50C423F83FCFD52D31962A249EEFC10351798B86D51EDA500F412C8D42E6BC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Asia/Yerevan) {.. {-9223372036854775808 10680 0 LMT}.. {-1441162680 10800 0 +03}.. {-405140400 14400 0 +04}.. {354916800 18000 1 +04}.. {370724400 14400 0 +04}.. {386452800 18000 1 +04}.. {402260400 14400 0 +04}.. {417988800 18000 1 +04}.. {433796400 14400 0 +04}.. {449611200 18000 1 +04}.. {465343200 14400 0 +04}.. {481068000 18000 1 +04}.. {496792800 14400 0 +04}.. {512517600 18000 1 +04}.. {528242400 14400 0 +04}.. {543967200 18000 1 +04}.. {559692000 14400 0 +04}.. {575416800 18000 1 +04}.. {591141600 14400 0 +04}.. {606866400 18000 1 +04}.. {622591200 14400 0 +04}.. {638316000 18000 1 +04}.. {654645600 14400 0 +04}.. {670370400 10800 0 +03}.. {670374000 14400 1 +03}.. {686098800 10800 0 +03}.. {701823600 14400 1 +03}.. {717548400 10800 0 +03}.. {733273200 14400 1 +03}.. {748998000 10800 0 +03}.. {764722800 14400 1 +03}.. {780447

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Atlantic\Azores

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9879
                                                                                                                      Entropy (8bit):3.557602151081988
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:K35nZPOUYySoluItljncxelTMwtrayE6x5sETNek/CyNzybxYKmX6SXL/XbEcygI:K940pb6cL/b3Ldr9Q7TMq+ML
                                                                                                                      MD5:E7F2A3EE0362E9ED3ECBAD24168AD098
                                                                                                                      SHA1:98832274F6D9B641B809123D1272A1C04EEAA177
                                                                                                                      SHA-256:6B3609BE4E93D21A2AB492594EDD387931E2C787E8471C9F2D3A677F34002D8F
                                                                                                                      SHA-512:C48A76F8251AE455C759CB98802E40B3BEF716FD8E7441B6DE0242942C913367E3572B7C871082E97CA9BE67EC7DC37F8D01C438965217AC0EC36AD508DCE0D4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Atlantic/Azores) {.. {-9223372036854775808 -6160 0 LMT}.. {-2713904240 -6872 0 HMT}.. {-1830376800 -7200 0 -02}.. {-1689548400 -3600 1 -01}.. {-1677794400 -7200 0 -02}.. {-1667430000 -3600 1 -01}.. {-1647730800 -7200 0 -02}.. {-1635807600 -3600 1 -01}.. {-1616194800 -7200 0 -02}.. {-1604358000 -3600 1 -01}.. {-1584658800 -7200 0 -02}.. {-1572735600 -3600 1 -01}.. {-1553036400 -7200 0 -02}.. {-1541199600 -3600 1 -01}.. {-1521500400 -7200 0 -02}.. {-1442444400 -3600 1 -01}.. {-1426806000 -7200 0 -02}.. {-1379286000 -3600 1 -01}.. {-1364770800 -7200 0 -02}.. {-1348441200 -3600 1 -01}.. {-1333321200 -7200 0 -02}.. {-1316386800 -3600 1 -01}.. {-1301266800 -7200 0 -02}.. {-1284332400 -3600 1 -01}.. {-1269817200 -7200 0 -02}.. {-1221433200 -3600 1 -01}.. {-1206918000 -7200 0 -02}.. {-1191193200 -3600 1 -01}.. {-1175468400 -7200 0 -02}.. {-1127689

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Atlantic\Bermuda

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8784
                                                                                                                      Entropy (8bit):3.833553120942514
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:ZRBHksL3zq6bCvyjvspNWMPm4bPJWXtRbALtuFW4ng2CEBJuQaeEy9P19OBYEi/+:ft0CC
                                                                                                                      MD5:B04E22B9B42722013941169B5D04DEA2
                                                                                                                      SHA1:32B96A7D9504D5022A6C4E2D310E95B5F062947F
                                                                                                                      SHA-256:099C3BEFBA3B4C00AE19BC53D475A52B32FAC9B36EC823C8EAEFC7D00F78F388
                                                                                                                      SHA-512:8B93BCA1E923B7A43F2EB0889216E8FF991D13CB8D25BD300310ED7CD8537DBD858E8F422C9B52AE2F52F7C1CB450EF0B7C5C1B3AE547C9C1E18E2A851569DD5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Atlantic/Bermuda) {.. {-9223372036854775808 -15558 0 LMT}.. {-2524506042 -15558 0 BMT}.. {-1664307642 -11958 1 BMT}.. {-1648932042 -15558 0 BMT}.. {-1632080442 -11958 1 BMT}.. {-1618692042 -15558 0 BST}.. {-1262281242 -14400 0 AT}.. {-882727200 -10800 1 ADT}.. {-858538800 -14400 0 AST}.. {-845229600 -10800 1 ADT}.. {-825879600 -14400 0 AST}.. {-814384800 -10800 1 ADT}.. {-793825200 -14400 0 AST}.. {-782935200 -10800 1 ADT}.. {-762375600 -14400 0 AST}.. {-713988000 -10800 1 ADT}.. {-703710000 -14400 0 AST}.. {-681933600 -10800 1 ADT}.. {-672865200 -14400 0 AST}.. {-650484000 -10800 1 ADT}.. {-641415600 -14400 0 AST}.. {-618429600 -10800 1 ADT}.. {-609966000 -14400 0 AST}.. {-586980000 -10800 1 ADT}.. {-578516400 -14400 0 AST}.. {-555530400 -10800 1 ADT}.. {-546462000 -14400 0 AST}.. {-429127200 -10800 1 ADT}.. {-415825200 -14400 0 AST}.. {1

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Atlantic\Canary

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6856
                                                                                                                      Entropy (8bit):3.8064107143060752
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:KXVuHfXCiZoFtFPIaFF1w0urfva946ZGsE3f2Sf+aCNmSv+kznl4klEp8OT:KXVQbkIaFF1w0us4qE3+sSGjT
                                                                                                                      MD5:8ABD279386C50705C074EEE18BF5AE59
                                                                                                                      SHA1:C392231DBE744F5942DA4BFAC8AD0ABEBAEA0BF3
                                                                                                                      SHA-256:2026944DCDEBC52F64405E35119F4CF97EA9AA1E769498730880B03F29A2B885
                                                                                                                      SHA-512:3095759D01AC7EEA25E427CA38E8A0395BEFA7250E7A0C1327BF9D61F07F4570CDF7313FBE6695973EB0DD66D201C6C63591CC0DA8A1E0029926DC7056F4C95B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Atlantic/Canary) {.. {-9223372036854775808 -3696 0 LMT}.. {-1509663504 -3600 0 -01}.. {-733874400 0 0 WET}.. {323827200 3600 1 WEST}.. {338950800 0 0 WET}.. {354675600 3600 1 WEST}.. {370400400 0 0 WET}.. {386125200 3600 1 WEST}.. {401850000 0 0 WET}.. {417574800 3600 1 WEST}.. {433299600 0 0 WET}.. {449024400 3600 1 WEST}.. {465354000 0 0 WET}.. {481078800 3600 1 WEST}.. {496803600 0 0 WET}.. {512528400 3600 1 WEST}.. {528253200 0 0 WET}.. {543978000 3600 1 WEST}.. {559702800 0 0 WET}.. {575427600 3600 1 WEST}.. {591152400 0 0 WET}.. {606877200 3600 1 WEST}.. {622602000 0 0 WET}.. {638326800 3600 1 WEST}.. {654656400 0 0 WET}.. {670381200 3600 1 WEST}.. {686106000 0 0 WET}.. {701830800 3600 1 WEST}.. {717555600 0 0 WET}.. {733280400 3600 1 WEST}.. {749005200 0 0 WET}.. {764730000 3600 1 WEST}.. {780454800 0 0 WET}.. {796179600

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Atlantic\Cape_Verde

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):246
                                                                                                                      Entropy (8bit):4.637993677747699
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/2RQ7RfDm2OHDoH1JlvQV/FFrR3FcykVvQV/FFf+nmwV:MB86267RLmdHDC1w/FH3FcyL/FomwV
                                                                                                                      MD5:1581C6470850E0C9DB204975488B1AF8
                                                                                                                      SHA1:6933ED13F18AD785CEDF0837F86EFAC671297A85
                                                                                                                      SHA-256:2EA59ACDB5BBDD3C6ABCEEA456838A5CA57371A3D2BB93604B37F998ED8B9D4D
                                                                                                                      SHA-512:9FFFA013D82CEFF6F447521C19270ECDD71152F23670164423E6013FEC46253C62D2CB79B42630BD786BD113F27369E746CA981DD17E789F7571F473B47247C1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Atlantic/Cape_Verde) {.. {-9223372036854775808 -5644 0 LMT}.. {-1830376800 -7200 0 -02}.. {-862610400 -3600 1 -01}.. {-764118000 -7200 0 -02}.. {186120000 -3600 0 -01}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Atlantic\Faeroe

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):186
                                                                                                                      Entropy (8bit):4.709193799640151
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqLG4E23vXHAIgvMG4EeRRL/2RQqG4EZrB/4RQqG4E1n:SlSWB9vsM3yCPHAIgvoRN/2RQ1rB/4Ri
                                                                                                                      MD5:601EB889A87F9CAD6F1DF4D1AB009FAE
                                                                                                                      SHA1:EB43C253A48755442A67A2408D7E3295549F831C
                                                                                                                      SHA-256:64FB8CAD17CD36666C7027AAD01344FEF659B13699EEF1942365842F8ED2170E
                                                                                                                      SHA-512:9CFC4A446ED6A3BEF6C26AE57324F10A970EE2ADD6933130447FAD6A3DB538841F2490DD461AF5776FACD9BD2CDC4A83247DFA6B34802AE844DDC6D4C37B28EA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Atlantic/Faroe)]} {.. LoadTimeZoneFile Atlantic/Faroe..}..set TZData(:Atlantic/Faeroe) $TZData(:Atlantic/Faroe)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Atlantic\Faroe

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6796
                                                                                                                      Entropy (8bit):3.804838552487436
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:96ufXCiZoFtFPIaFF1w0urfva946ZGsE3f2Sf+aCNmSv+kznl4klEp8OT:/bkIaFF1w0us4qE3+sSGjT
                                                                                                                      MD5:F97CC7EB9C52D00177BFF4715832FCD5
                                                                                                                      SHA1:CD9DCBB5E6ADD6EA91C8F142957EC229FC7F6DA3
                                                                                                                      SHA-256:795F438E7F01342D5F25ECCDD09FCE65C03C5D2D561B9B5191301D57EC16B850
                                                                                                                      SHA-512:9586289FEB6C597160011A47432F0AC40000483FA2E579BD89046EFD33E98DDAD652B792FD80CEDEB4CD87B6439A7B473F25F1B7375BC75353CBAF9F77E1084E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Atlantic/Faroe) {.. {-9223372036854775808 -1624 0 LMT}.. {-1955748776 0 0 WET}.. {347155200 0 0 WET}.. {354675600 3600 1 WEST}.. {370400400 0 0 WET}.. {386125200 3600 1 WEST}.. {401850000 0 0 WET}.. {417574800 3600 1 WEST}.. {433299600 0 0 WET}.. {449024400 3600 1 WEST}.. {465354000 0 0 WET}.. {481078800 3600 1 WEST}.. {496803600 0 0 WET}.. {512528400 3600 1 WEST}.. {528253200 0 0 WET}.. {543978000 3600 1 WEST}.. {559702800 0 0 WET}.. {575427600 3600 1 WEST}.. {591152400 0 0 WET}.. {606877200 3600 1 WEST}.. {622602000 0 0 WET}.. {638326800 3600 1 WEST}.. {654656400 0 0 WET}.. {670381200 3600 1 WEST}.. {686106000 0 0 WET}.. {701830800 3600 1 WEST}.. {717555600 0 0 WET}.. {733280400 3600 1 WEST}.. {749005200 0 0 WET}.. {764730000 3600 1 WEST}.. {780454800 0 0 WET}.. {796179600 3600 1 WEST}.. {811904400 0 0 WET}.. {828234000 3600

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Atlantic\Jan_Mayen

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):186
                                                                                                                      Entropy (8bit):4.957633978425468
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV/y+YF3vXHAIgoq8yFRRL/2RQqG0EHEcAg/h8QahV:SlSWB9vsM3ymhVoPHAIgoh6N/2RQaK85
                                                                                                                      MD5:95C2D55CCE5809089CDB041EA3D464F8
                                                                                                                      SHA1:B395F5F26CE979BDF2B9E2CB51C06929AED11A6C
                                                                                                                      SHA-256:11BF0746F95BA01807D3B34C8FAE3FF4AE9DB5E4E6BC0CB8B36906CC3F44EDE5
                                                                                                                      SHA-512:AB2BE22E95A7C36E18EBA1BB63B3930A523ED793E43A3F597A8F63AE2F0E44436C39144BC136E7E5716D7FCBFAE7F1FAF36BCFFCF9C8D51151FF25BB14D6F8B5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Berlin)]} {.. LoadTimeZoneFile Europe/Berlin..}..set TZData(:Atlantic/Jan_Mayen) $TZData(:Europe/Berlin)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Atlantic\Madeira

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9709
                                                                                                                      Entropy (8bit):3.80455694200614
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:hZUiLbMsf/ss0qKd+aKyUXtOZHY1SCOcesoQivoKbFVCdm1rXWNXyCXTOuUbkIaq:hZZDQX1rWJysukysLE3+sSGjT
                                                                                                                      MD5:AC6647F9B53B5958214EC3F3B78A4D85
                                                                                                                      SHA1:7355622AF99296F069F73899D5C70941C207F676
                                                                                                                      SHA-256:B2A0D0DDC26806A05B2BE806CA3F938DB12A3FA40110B8B21FD3F04EFED3A531
                                                                                                                      SHA-512:07569CA4D5DC6D57D91D6FDC370671A7546B73BA653D094E1B501D33570F7700727AD7FF2A083BC79E9EDE807C47E7A5604BEF5803F290B2F277C51DEF10FA6B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Atlantic/Madeira) {.. {-9223372036854775808 -4056 0 LMT}.. {-2713906344 -4056 0 FMT}.. {-1830380400 -3600 0 -01}.. {-1689552000 0 1 +00}.. {-1677798000 -3600 0 -01}.. {-1667433600 0 1 +00}.. {-1647734400 -3600 0 -01}.. {-1635811200 0 1 +00}.. {-1616198400 -3600 0 -01}.. {-1604361600 0 1 +00}.. {-1584662400 -3600 0 -01}.. {-1572739200 0 1 +00}.. {-1553040000 -3600 0 -01}.. {-1541203200 0 1 +00}.. {-1521504000 -3600 0 -01}.. {-1442448000 0 1 +00}.. {-1426809600 -3600 0 -01}.. {-1379289600 0 1 +00}.. {-1364774400 -3600 0 -01}.. {-1348444800 0 1 +00}.. {-1333324800 -3600 0 -01}.. {-1316390400 0 1 +00}.. {-1301270400 -3600 0 -01}.. {-1284336000 0 1 +00}.. {-1269820800 -3600 0 -01}.. {-1221436800 0 1 +00}.. {-1206921600 -3600 0 -01}.. {-1191196800 0 1 +00}.. {-1175472000 -3600 0 -01}.. {-1127692800 0 1 +00}.. {-1111968000 -3600 0 -01}.. {-

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Atlantic\Reykjavik

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.910514445868106
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/2RQqGsA/8rVDcsS:SlSWB9vsM3y7s3HAIgNT4pHN/2RQjQD4
                                                                                                                      MD5:ECB480DA99D29C0ACE67426D45534754
                                                                                                                      SHA1:784CF126B030C3D883EE541877E6181F795C9697
                                                                                                                      SHA-256:BDA015714260001BAE2848991DD21E802580BE2915797E5DABC376135D1C5246
                                                                                                                      SHA-512:54C1B20E45C7C73354DCD4E0F4444720771820ED10B282F745DC391BEADEAEDC629BEF97B1908FB62CDAEC915D32AF1F54FC6AA9DC83E317E7CE19FC2586EF28
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Atlantic/Reykjavik) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Atlantic\South_Georgia

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):160
                                                                                                                      Entropy (8bit):5.011466665416709
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/2RQqGtlN62/EiMXGm2OHXT14YoHvhFvdQVIyV:SlSWB9eg/2RQrlo2MiDm2OHXqYoHvTFS
                                                                                                                      MD5:3B310BB8C90CA716DC1AC5A697ACA9CD
                                                                                                                      SHA1:CD583F49478DCDAD91EF78539502C6FC62945C1E
                                                                                                                      SHA-256:51BFABCB3388107753A3C1A8CF31118E6627132BAA09B9878D9E7CEDBEBB4886
                                                                                                                      SHA-512:F593B7A1FAF0EA6B42D5EE86C20C9A8F5CD7ACD9B30EF7755E45ECAFEA8752C32E4CF4BEDF531F494E59D9F0C49CCC6FCA077292E20794AA265DFC0A56DFE579
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Atlantic/South_Georgia) {.. {-9223372036854775808 -8768 0 LMT}.. {-2524512832 -7200 0 -02}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Atlantic\St_Helena

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.880390141563645
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/2RQqGt4r+DcsS:SlSWB9vsM3y7s3HAIgNT4pHN/2RQr4rV
                                                                                                                      MD5:2C73A963F515376A46762CE153AAF5C5
                                                                                                                      SHA1:996C3C93DFAD89EA80AC5DFA1DFBD7CECD9ED28D
                                                                                                                      SHA-256:1C9CA8966FC8BD0BE70F4A187E17E56FB99139BC88C392E82BA2E23E23111C54
                                                                                                                      SHA-512:35A9ADC047DB058D71C21FC4ECB57CD14B0D9BA4416506763D1800D72CE6C9E81636F332AAD3533616F05C86F90A60416BD4065C5F832A51AA3DC186218BDCAE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Atlantic/St_Helena) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Atlantic\Stanley

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2256
                                                                                                                      Entropy (8bit):3.662522763865322
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:506KSBSdSs2SbSwGSyPU3lSsS5SGScSo/SkSuShSceS3SBSc7XSiSgSwSd/SJkS6:JKU+Ew0FU1TuhrR//tOIoOjXZfDWSkPR
                                                                                                                      MD5:77C7ECE4FCBE150069B611C75E8DAA0E
                                                                                                                      SHA1:22F4E5F15BCA92D8456B70BB36230F2605CA5E1C
                                                                                                                      SHA-256:F0E99EF01F140CD5AAFE16803A657922207E6F7F6AF10B0AE795790916C302C4
                                                                                                                      SHA-512:6FB57E8499A587292AFAFA9BD003721572393D5268CAF956230DA76983A112B27D6731BE561A22CCEF84935F43AC988B667C2DC404C157EA8D0E7830FC1A2AB8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Atlantic/Stanley) {.. {-9223372036854775808 -13884 0 LMT}.. {-2524507716 -13884 0 SMT}.. {-1824235716 -14400 0 -04}.. {-1018209600 -10800 1 -04}.. {-1003093200 -14400 0 -04}.. {-986760000 -10800 1 -04}.. {-971643600 -14400 0 -04}.. {-954705600 -10800 1 -04}.. {-939589200 -14400 0 -04}.. {-923256000 -10800 1 -04}.. {-908139600 -14400 0 -04}.. {-891806400 -10800 1 -04}.. {-876690000 -14400 0 -04}.. {-860356800 -10800 1 -04}.. {420606000 -7200 0 -03}.. {433303200 -7200 1 -03}.. {452052000 -10800 0 -03}.. {464151600 -7200 1 -03}.. {483501600 -10800 0 -03}.. {495597600 -14400 0 -04}.. {495604800 -10800 1 -04}.. {514350000 -14400 0 -04}.. {527054400 -10800 1 -04}.. {545799600 -14400 0 -04}.. {558504000 -10800 1 -04}.. {577249200 -14400 0 -04}.. {589953600 -10800 1 -04}.. {608698800 -14400 0 -04}.. {621403200 -10800 1 -04}.. {640753200 -14400 0 -

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\ACT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.862270414049974
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq/xJjLkXHAIgoXjLyFvHRL/2QWCCjpMFBx/h4QWCCj1:SlSWB9vsM3yI9kHAIgmON/2DCeMFB/4d
                                                                                                                      MD5:2EF41863430897F45E0CBB51E6A44069
                                                                                                                      SHA1:8E9561060E9509FAF235E5E033FC9C2918E438DB
                                                                                                                      SHA-256:DF7CBDDCBB2F5926A07D19A35739E5B8DCD9733C037F7D1FF95753C28D574674
                                                                                                                      SHA-512:9D3A37D64DCCCA28093C30FAB595690D021FACEC15F351A77CA33A779D645D305A2FA031869F0DE3B0404C498C2C321D3D02E4DC592D3C632F6700F5DCB54900
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Australia/Sydney)]} {.. LoadTimeZoneFile Australia/Sydney..}..set TZData(:Australia/ACT) $TZData(:Australia/Sydney)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Adelaide

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8372
                                                                                                                      Entropy (8bit):3.894755849491153
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:j8SY62BXovlCyRL8pJXa4NyPaNw0leasxMQ/UvuQPxBFNsLQ2nDs020DdDncIsea:j8X3Xzgl3PaN8asiQ/Uv9UnvtCaRs
                                                                                                                      MD5:94E1A0C4326D09AF103107E64625CC6C
                                                                                                                      SHA1:C026565F020EB158309549D98313632BAA79205F
                                                                                                                      SHA-256:5C43D3152982BCFD5B9F51D0E909CF3A558BED1C270FEFFE030531D38D6F91B7
                                                                                                                      SHA-512:CA08A8BC0EB740D59650FE0A9E56D9E169348AD0994F2BFFD6CCFBF9CC42E82F892FB719E80C4E2084B5702E9725C651359EE3066BD71BB19397EA83B6A68430
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Australia/Adelaide) {.. {-9223372036854775808 33260 0 LMT}.. {-2364110060 32400 0 ACST}.. {-2230189200 34200 0 ACST}.. {-1672558200 37800 1 ACDT}.. {-1665387000 34200 0 ACST}.. {-883639800 37800 1 ACDT}.. {-876123000 34200 0 ACST}.. {-860398200 37800 1 ACDT}.. {-844673400 34200 0 ACST}.. {-828343800 37800 1 ACDT}.. {-813223800 34200 0 ACST}.. {31501800 34200 0 ACST}.. {57688200 37800 1 ACDT}.. {67969800 34200 0 ACST}.. {89137800 37800 1 ACDT}.. {100024200 34200 0 ACST}.. {120587400 37800 1 ACDT}.. {131473800 34200 0 ACST}.. {152037000 37800 1 ACDT}.. {162923400 34200 0 ACST}.. {183486600 37800 1 ACDT}.. {194977800 34200 0 ACST}.. {215541000 37800 1 ACDT}.. {226427400 34200 0 ACST}.. {246990600 37800 1 ACDT}.. {257877000 34200 0 ACST}.. {278440200 37800 1 ACDT}.. {289326600 34200 0 ACST}.. {309889800 37800 1 ACDT}.. {320776200 34200 0 ACST}

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Brisbane

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):674
                                                                                                                      Entropy (8bit):4.32071371733564
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862ELmdHLOYCvSi0xT0ryRIvUr0obZv:5ELe6dvSi6L
                                                                                                                      MD5:900B39F1D4AB93A445F37B6C0A8DE3D9
                                                                                                                      SHA1:DE82800779DCB8094C395B5024BD01FFA3C3BB8C
                                                                                                                      SHA-256:0D3C39EDAB34A8DB31A658A1549772F7D69EB57565E40AA87B707953A2D854A4
                                                                                                                      SHA-512:8D115D1D14FE6FF21A4AE77E3AAC075E6A877214E568956B9A4FD2E75A46E458CAA5AE26B483F128B4C62960D73BD7543BC32F22B760059423B3D9ABCBA24B6A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Australia/Brisbane) {.. {-9223372036854775808 36728 0 LMT}.. {-2366791928 36000 0 AEST}.. {-1672560000 39600 1 AEDT}.. {-1665388800 36000 0 AEST}.. {-883641600 39600 1 AEDT}.. {-876124800 36000 0 AEST}.. {-860400000 39600 1 AEDT}.. {-844675200 36000 0 AEST}.. {-828345600 39600 1 AEDT}.. {-813225600 36000 0 AEST}.. {31500000 36000 0 AEST}.. {57686400 39600 1 AEDT}.. {67968000 36000 0 AEST}.. {625593600 39600 1 AEDT}.. {636480000 36000 0 AEST}.. {657043200 39600 1 AEDT}.. {667929600 36000 0 AEST}.. {688492800 39600 1 AEDT}.. {699379200 36000 0 AEST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Broken_Hill

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8437
                                                                                                                      Entropy (8bit):3.902306256303896
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:QZSSY62BXovldRL8q75aANyPaNw0leasxMQ/UvuQPxBFNsLQ2nDs020DdDncIsea:QZSX3X2QfPaN8asiQ/Uv9UnvtCaRs
                                                                                                                      MD5:1553DAAB804A6C9BB15D711554980D3B
                                                                                                                      SHA1:5E3161B1FBB4C246DCB5E11ABD94095121CE38ED
                                                                                                                      SHA-256:734F295BD0B558BDF6178DE62151B8913699D08AB2B1D101C55B8DEBC410074C
                                                                                                                      SHA-512:06B21886070E39E390ECBD18841B7FDBFCA2C7C8573495D2BAA2B92EB113CD1C73C18D73C49DE3C49572CBCBCBED2FAD3248BC651BEB825A1E089B1DEDEFCBFA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Australia/Broken_Hill) {.. {-9223372036854775808 33948 0 LMT}.. {-2364110748 36000 0 AEST}.. {-2314951200 32400 0 ACST}.. {-2230189200 34200 0 ACST}.. {-1672558200 37800 1 ACDT}.. {-1665387000 34200 0 ACST}.. {-883639800 37800 1 ACDT}.. {-876123000 34200 0 ACST}.. {-860398200 37800 1 ACDT}.. {-844673400 34200 0 ACST}.. {-828343800 37800 1 ACDT}.. {-813223800 34200 0 ACST}.. {31501800 34200 0 ACST}.. {57688200 37800 1 ACDT}.. {67969800 34200 0 ACST}.. {89137800 37800 1 ACDT}.. {100024200 34200 0 ACST}.. {120587400 37800 1 ACDT}.. {131473800 34200 0 ACST}.. {152037000 37800 1 ACDT}.. {162923400 34200 0 ACST}.. {183486600 37800 1 ACDT}.. {194977800 34200 0 ACST}.. {215541000 37800 1 ACDT}.. {226427400 34200 0 ACST}.. {246990600 37800 1 ACDT}.. {257877000 34200 0 ACST}.. {278440200 37800 1 ACDT}.. {289326600 34200 0 ACST}.. {309889800 37800 1

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Canberra

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):195
                                                                                                                      Entropy (8bit):4.851279484907769
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq/xJjLkXHAIgoXjLyFvHRL/2QWCCjnSV1+QWCCjLBn:SlSWB9vsM3yI9kHAIgmON/2DCcq+DCyB
                                                                                                                      MD5:8944D3DF8FBECC03A8FB18C3B2DA3B53
                                                                                                                      SHA1:6B17B38D6560592CA49840C47DB9BDA7E79F9F76
                                                                                                                      SHA-256:5FE3CED97293FE0573D5ECE0CEF59CE5DDB4C57BC568AE7199E77B01D3ADE17C
                                                                                                                      SHA-512:907D8BB7EA840E0B3AC683884F2F709A2C06D67CE9258BE46400A0DA63581A9B1403A44FA43E1059BE8F5C7E06F9FA05C176309AD6295317BF14F0E9FA5741E4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Australia/Sydney)]} {.. LoadTimeZoneFile Australia/Sydney..}..set TZData(:Australia/Canberra) $TZData(:Australia/Sydney)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Currie

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):193
                                                                                                                      Entropy (8bit):4.79231670095588
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3yI4DVJHAIgxnvVWAN/2DCkx+4DCVDy:MByMjUQVv8At2s4Ky
                                                                                                                      MD5:0C1DFC0877CE8EB08007B7C2B7AF2D87
                                                                                                                      SHA1:02F835BE2DA4FCA79DC2A6959BB4EB6ACC8DF708
                                                                                                                      SHA-256:1DD4EC4ED4F854E2EF6162B2F28C89208710F8EC5AABB95FFA9425D3FBBCAB13
                                                                                                                      SHA-512:358347045915B7D10940DB15E49528D0C636BEC1BE70129847D0B9D034F9E96E847394D88358E87D98A9E581605A3C2AB917B85FDE1296F290B4194BB7E3FA46
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Australia/Hobart)]} {.. LoadTimeZoneFile Australia/Hobart..}..set TZData(:Australia/Currie) $TZData(:Australia/Hobart)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Darwin

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):437
                                                                                                                      Entropy (8bit):4.508468081487136
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862pmdHPCvZUjMWpXgda/gd026Xgdvgd+v:5peKvZqMSX+4+56X+v+Q
                                                                                                                      MD5:A81864B2C0BD7BF81F4FA21F17800059
                                                                                                                      SHA1:518AC9E040A17083ED3962F4FBB47D1D83764FF7
                                                                                                                      SHA-256:AC004FD4B3C536406991EC13EBB3E64E0EC0C7B264BC18C0700C8FA545868155
                                                                                                                      SHA-512:3C24F4C2CC3072B3E820FCC1C68A747DCCBB9481FE743C1555783CC932DCBA44FE4851A732D24EABF62E845474D4E1278F120A04DB7549A18C7C49C31FB8D425
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Australia/Darwin) {.. {-9223372036854775808 31400 0 LMT}.. {-2364108200 32400 0 ACST}.. {-2230189200 34200 0 ACST}.. {-1672558200 37800 1 ACDT}.. {-1665387000 34200 0 ACST}.. {-883639800 37800 1 ACDT}.. {-876123000 34200 0 ACST}.. {-860398200 37800 1 ACDT}.. {-844673400 34200 0 ACST}.. {-828343800 37800 1 ACDT}.. {-813223800 34200 0 ACST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Eucla

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):759
                                                                                                                      Entropy (8bit):4.110997549215461
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862EmdHvOYCvV2mV22wF2nUV2CF2+V2pCwF21UF2biV2cHVKF25V2VF2cV2tFq:5Eemdvg2wQCKZ4j5c0LVmtH1iknohwQT
                                                                                                                      MD5:1BC8DBD2E24606EFA49F933034FC0EEF
                                                                                                                      SHA1:A511695A1B87A689C6BFF65257C11D3962FDDA3D
                                                                                                                      SHA-256:79D0C770A304360DB33F3D1EF7B3935F1E4E8125893E0DCE683AC35A51302CFB
                                                                                                                      SHA-512:A839D390D70F22FC833322029B732F3AE68FF48793B07005041BD12322DD6E5D5E5FF31787AA004A507A57F8FC245133891F266C4EF19D49F085E6B412E5B04C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Australia/Eucla) {.. {-9223372036854775808 30928 0 LMT}.. {-2337928528 31500 0 +0945}.. {-1672555500 35100 1 +0945}.. {-1665384300 31500 0 +0945}.. {-883637100 35100 1 +0945}.. {-876120300 31500 0 +0945}.. {-860395500 35100 1 +0945}.. {-844670700 31500 0 +0945}.. {-836473500 35100 0 +0945}.. {152039700 35100 1 +0945}.. {162926100 31500 0 +0945}.. {436295700 35100 1 +0945}.. {447182100 31500 0 +0945}.. {690311700 35100 1 +0945}.. {699383700 31500 0 +0945}.. {1165079700 35100 1 +0945}.. {1174756500 31500 0 +0945}.. {1193505300 35100 1 +0945}.. {1206810900 31500 0 +0945}.. {1224954900 35100 1 +0945}.. {1238260500 31500 0 +0945}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Hobart

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8734
                                                                                                                      Entropy (8bit):3.8515786470328823
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:aOqigkx6WsYyS39nQiAmcO38EJ8i/V9cYgCqMEjKeIZ3wQb25Ly04:aOq05hnQiAmcOM6e0pj
                                                                                                                      MD5:5E04BF8E1DEBFCC4130FDD1BBD67B2DF
                                                                                                                      SHA1:796AADCE7BB2FAF5E6FC916C941A4E3DCAFACC9E
                                                                                                                      SHA-256:D813F6A97BEFC22CA4F24C59EB755D269B9C68A449CC7CF0D2C61F911860EBE7
                                                                                                                      SHA-512:3A69CF1D1F57D6BD39E5F4DAF76BBB06A749D42BEB29452A0A5BDAA68F5DACC0DF176EDDA7A083F5B5B84FC651926C09D46CAAD2F6C4F1595AB9CCA1A958D653
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Australia/Hobart) {.. {-9223372036854775808 35356 0 LMT}.. {-2345795356 36000 0 AEST}.. {-1680508800 39600 1 AEDT}.. {-1665388800 36000 0 AEST}.. {-1646640000 39600 1 AEDT}.. {-1635753600 36000 0 AEST}.. {-1615190400 39600 1 AEDT}.. {-1604304000 36000 0 AEST}.. {-1583920800 36000 0 AEST}.. {-883641600 39600 1 AEDT}.. {-876124800 36000 0 AEST}.. {-860400000 39600 1 AEDT}.. {-844675200 36000 0 AEST}.. {-828345600 39600 1 AEDT}.. {-813225600 36000 0 AEST}.. {-94730400 36000 0 AEST}.. {-71136000 39600 1 AEDT}.. {-55411200 36000 0 AEST}.. {-37267200 39600 1 AEDT}.. {-25776000 36000 0 AEST}.. {-5817600 39600 1 AEDT}.. {5673600 36000 0 AEST}.. {25632000 39600 1 AEDT}.. {37728000 36000 0 AEST}.. {57686400 39600 1 AEDT}.. {67968000 36000 0 AEST}.. {89136000 39600 1 AEDT}.. {100022400 36000 0 AEST}.. {120585600 39600 1 AEDT}.. {131472000 36000 0 AES

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\LHI

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):199
                                                                                                                      Entropy (8bit):4.912882643701746
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3yIoGEoPHAIgjGg6N/2DCkx/2DCPGUv:MByMjeXV6t2a8v
                                                                                                                      MD5:425DC7B1E31F4AA41DAD74E3C9AE3562
                                                                                                                      SHA1:D92A3269F7BF5EC00F082C64CEF6E20C43017180
                                                                                                                      SHA-256:4D84E4040FBC529C9E0366BB74D0CFADEEEEDA0DFCC6C2C9204DED6C6455CAC3
                                                                                                                      SHA-512:F3031F16C0D00D9F8A38CD378F599EB3E63F4FF85F120DB38E3013E93F08E6F512D969F164BBC88CD625910FB3E086F3352E5B8FFC1373C3CC98F363FB3FD3F7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Australia/Lord_Howe)]} {.. LoadTimeZoneFile Australia/Lord_Howe..}..set TZData(:Australia/LHI) $TZData(:Australia/Lord_Howe)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Lindeman

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):824
                                                                                                                      Entropy (8bit):4.249672335529665
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862gtmdHVCvCi0xT0ryRIvUr0obbty/ywtUj3yv:5gteMvCi6Xlt8
                                                                                                                      MD5:504A422280E0459A2126E7CB02F527E6
                                                                                                                      SHA1:EF61B98EFB1E44EE59020E99A69EA67D6B8ACFC2
                                                                                                                      SHA-256:01B278309353849CC2FDF62A30E2FF483833D5713CF5E329252738BE6F2C0A84
                                                                                                                      SHA-512:BFDAAD56D817CD3AAB17DFD0A33EFDD422645BC542ABE269C0F8520E33796DF4F19EAB2E40BFC6C4AF93EF654239B8F2E285639B4662040D865B9C340A23CFAD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Australia/Lindeman) {.. {-9223372036854775808 35756 0 LMT}.. {-2366790956 36000 0 AEST}.. {-1672560000 39600 1 AEDT}.. {-1665388800 36000 0 AEST}.. {-883641600 39600 1 AEDT}.. {-876124800 36000 0 AEST}.. {-860400000 39600 1 AEDT}.. {-844675200 36000 0 AEST}.. {-828345600 39600 1 AEDT}.. {-813225600 36000 0 AEST}.. {31500000 36000 0 AEST}.. {57686400 39600 1 AEDT}.. {67968000 36000 0 AEST}.. {625593600 39600 1 AEDT}.. {636480000 36000 0 AEST}.. {657043200 39600 1 AEDT}.. {667929600 36000 0 AEST}.. {688492800 39600 1 AEDT}.. {699379200 36000 0 AEST}.. {709912800 36000 0 AEST}.. {719942400 39600 1 AEDT}.. {731433600 36000 0 AEST}.. {751996800 39600 1 AEDT}.. {762883200 36000 0 AEST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Lord_Howe

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7764
                                                                                                                      Entropy (8bit):3.5615258807990537
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:pmz39IyKxb/JbcD9gKniAF23QbNS1fEGXALNbbT2JFJ/FaKaTQ9ZJhRVK:p+cpVKniAF2AbkFKL
                                                                                                                      MD5:10F983F4683CDE13A1228AC0B04D8513
                                                                                                                      SHA1:45378BA5949BE53D698108F50FECFF50C9E3D296
                                                                                                                      SHA-256:76D1F1ED67B8F8D6903789C2FDDF79590A83677972D416F5F3C9687614EC6238
                                                                                                                      SHA-512:D60D802EF215A33750E4F859657BA12A67084B1E9FCF1B4A7CEEE7B9D816BC2C6670775D93C88EC8380CDD7790AD574133D6F90F0828F848313C26583B2F196A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Australia/Lord_Howe) {.. {-9223372036854775808 38180 0 LMT}.. {-2364114980 36000 0 AEST}.. {352216800 37800 0 +1030}.. {372785400 41400 1 +1030}.. {384273000 37800 0 +1030}.. {404839800 41400 1 +1030}.. {415722600 37800 0 +1030}.. {436289400 41400 1 +1030}.. {447172200 37800 0 +1030}.. {467739000 41400 1 +1030}.. {478621800 37800 0 +1030}.. {488984400 37800 0 +1030}.. {499188600 39600 1 +1030}.. {511282800 37800 0 +1030}.. {530033400 39600 1 +1030}.. {542732400 37800 0 +1030}.. {562087800 39600 1 +1030}.. {574786800 37800 0 +1030}.. {594142200 39600 1 +1030}.. {606236400 37800 0 +1030}.. {625591800 39600 1 +1030}.. {636476400 37800 0 +1030}.. {657041400 39600 1 +1030}.. {667926000 37800 0 +1030}.. {688491000 39600 1 +1030}.. {699375600 37800 0 +1030}.. {719940600 39600 1 +1030}.. {731430000 37800 0 +1030}.. {751995000 39600 1 +1030}.. {762

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Melbourne

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8341
                                                                                                                      Entropy (8bit):3.8532171550973526
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:Yyigkp2EUyn8/dnQiAmcO38EJ8i/V9cYgCqMEjKeIZ3wQb25Ly04:Yy3VnQiAmcOM6e0pj
                                                                                                                      MD5:40D06B80A4A0DB415270EFD9698B97BF
                                                                                                                      SHA1:1999F0E8C7EBAA11BD21D64D9E07FA911F13C64C
                                                                                                                      SHA-256:F21B9EA51C0D41BAD0420FE0601E5A4B491FB895856F4BDDF6541D704469D92F
                                                                                                                      SHA-512:E47D597CC85D177CF2804C44C216EB4C5B74472457F15F697704311A847BF8A051DCAFD26FA61DD689555F35640151E26F25D5DC5319EFEFEA62AD86657A4A95
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Australia/Melbourne) {.. {-9223372036854775808 34792 0 LMT}.. {-2364111592 36000 0 AEST}.. {-1672560000 39600 1 AEDT}.. {-1665388800 36000 0 AEST}.. {-883641600 39600 1 AEDT}.. {-876124800 36000 0 AEST}.. {-860400000 39600 1 AEDT}.. {-844675200 36000 0 AEST}.. {-828345600 39600 1 AEDT}.. {-813225600 36000 0 AEST}.. {31500000 36000 0 AEST}.. {57686400 39600 1 AEDT}.. {67968000 36000 0 AEST}.. {89136000 39600 1 AEDT}.. {100022400 36000 0 AEST}.. {120585600 39600 1 AEDT}.. {131472000 36000 0 AEST}.. {152035200 39600 1 AEDT}.. {162921600 36000 0 AEST}.. {183484800 39600 1 AEDT}.. {194976000 36000 0 AEST}.. {215539200 39600 1 AEDT}.. {226425600 36000 0 AEST}.. {246988800 39600 1 AEDT}.. {257875200 36000 0 AEST}.. {278438400 39600 1 AEDT}.. {289324800 36000 0 AEST}.. {309888000 39600 1 AEDT}.. {320774400 36000 0 AEST}.. {341337600 39600 1 AEDT}.

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\NSW

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.893713405897538
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq/xJjLkXHAIgoXjLyFvHRL/2QWCCjREeQWCCjLBn:SlSWB9vsM3yI9kHAIgmON/2DC5eDCyB
                                                                                                                      MD5:80B7CDD1EA5A5308CE84C038180005F2
                                                                                                                      SHA1:B7CA15B58ADA8CA3EB74B7971073022D57D8EE70
                                                                                                                      SHA-256:73D7C9E207E61ACF8DF7242BDCD84488189033E22A84873A953B65DE02FA1B0B
                                                                                                                      SHA-512:F627F5FF335600AC9158D6A0D3694AB7E70180177449C17B5605BBF7B1B7F8FB447A9C207F4E1BCB627074DB47B8A66F5D78E03C6DB8FA17F8BDD6AABB331665
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Australia/Sydney)]} {.. LoadTimeZoneFile Australia/Sydney..}..set TZData(:Australia/NSW) $TZData(:Australia/Sydney)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\North

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):192
                                                                                                                      Entropy (8bit):4.830368875485429
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq/xJjbvvXHAIgoXjbBvRL/2QWCCjsrQWCCjbi:SlSWB9vsM3yIFHAIg2N/2DCZrDCl
                                                                                                                      MD5:14CB7EA1C028F457345EBEB8ADDC9237
                                                                                                                      SHA1:208BF676F56533BA271D1B98363A766DF17CF6F2
                                                                                                                      SHA-256:A983C9CAD7E542CAED43B083E68CD2B782959A4B54015F374C29250D3ACF9B8D
                                                                                                                      SHA-512:099F65E5FA705FD7257CF7B8E103905EE313C6D082844F69CCD3F318E3E7F4098B29F952FA0AA28655E1FE290A0FB2E809911088315889DE7CAAF0E04698C2FC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Australia/Darwin)]} {.. LoadTimeZoneFile Australia/Darwin..}..set TZData(:Australia/North) $TZData(:Australia/Darwin)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Perth

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):739
                                                                                                                      Entropy (8bit):4.31793586514766
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB8623mdHCBdCvmlXz6zezzOz4iaLYvzkzi4zm5fVcBhg8mfev:53eCB0v4+e3Oz4iaLYbkzi4zxhfqw
                                                                                                                      MD5:01B1A88867472AD60B8F5C0E1648E3ED
                                                                                                                      SHA1:9975EA750458E8061DD8A83585675CB7E4910CA6
                                                                                                                      SHA-256:FC1B54CA261074E47A8A486FEAC12DD04D46166D1D2B44163BD8791BEC32D275
                                                                                                                      SHA-512:20BDFBCD1A5038C81552EBD955F3921DE3447A1F30E64935937768B2B98735AE53049601DCDD2D519646C78E6D03289EB465CFF4F2DADEA7D89A329504C6C475
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Australia/Perth) {.. {-9223372036854775808 27804 0 LMT}.. {-2337925404 28800 0 AWST}.. {-1672552800 32400 1 AWDT}.. {-1665381600 28800 0 AWST}.. {-883634400 32400 1 AWDT}.. {-876117600 28800 0 AWST}.. {-860392800 32400 1 AWDT}.. {-844668000 28800 0 AWST}.. {-836470800 32400 0 AWST}.. {152042400 32400 1 AWDT}.. {162928800 28800 0 AWST}.. {436298400 32400 1 AWDT}.. {447184800 28800 0 AWST}.. {690314400 32400 1 AWDT}.. {699386400 28800 0 AWST}.. {1165082400 32400 1 AWDT}.. {1174759200 28800 0 AWST}.. {1193508000 32400 1 AWDT}.. {1206813600 28800 0 AWST}.. {1224957600 32400 1 AWDT}.. {1238263200 28800 0 AWST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Queensland

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):203
                                                                                                                      Entropy (8bit):4.803539644461131
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3yIaWhSHAIgPWAvN/2DCoRWJvFBx+DC7WN:MByMjL9t2rOvFel
                                                                                                                      MD5:401B6B2E30EF17BE20212645287EB94B
                                                                                                                      SHA1:67D15A45C61122CE680B829FE0FA3A1C501A8C8F
                                                                                                                      SHA-256:DDA669B9BFB3E08FC23CE67030148B9E4740824ADD8DE02580D6AFD31CE05BAB
                                                                                                                      SHA-512:F4348F8F4FF261C47854725AEE4E14E7E334B3C31496E5C46B0E0041551CB6861380E684E8888AFE9DA7E8E97236AC322B9CE2738EF245E9D46C9681665F83A1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Australia/Brisbane)]} {.. LoadTimeZoneFile Australia/Brisbane..}..set TZData(:Australia/Queensland) $TZData(:Australia/Brisbane)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\South

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):198
                                                                                                                      Entropy (8bit):4.752918480727309
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3yIDRpGSHAIgSRrN/2DCa7QDCuRpyn:MByMjdpQYrt23QHpy
                                                                                                                      MD5:D226A0718185854DFE549E00856AA8D5
                                                                                                                      SHA1:94EE96FAE259D90C2FDF169DD95BD82B3171FFAE
                                                                                                                      SHA-256:D9DCFDC377901EC0C0FEB9CEA743C2C1425273F69A1BAA7BF3B74FEC5885B267
                                                                                                                      SHA-512:7EE29A7235CAAEF4889246B7A2241CA9A0D5D2B2E1D56B20141247C93B8736F17280F0D46004AC4588E137D1E76F661C779C906BBFC2B5F8FA73C19F7657F952
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Australia/Adelaide)]} {.. LoadTimeZoneFile Australia/Adelaide..}..set TZData(:Australia/South) $TZData(:Australia/Adelaide)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Sydney

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8338
                                                                                                                      Entropy (8bit):3.847525715050911
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:AZJigk42/yn8/dnQiAmcO38EJ8i/V9cYgCqMEjKeIZ3wQb25Ly04:AZJuVnQiAmcOM6e0pj
                                                                                                                      MD5:C0F1776E011C4C86B7709A592E7CA1EB
                                                                                                                      SHA1:1CA528D529BF4995E145D6E0D87A8752A3577E7F
                                                                                                                      SHA-256:FC453486325ADE1D31F14087B76D4936F3A6D551ABD1DB6FCAC129BDB043951C
                                                                                                                      SHA-512:F872182962C2615A35F012ECAB30C88F07C6BEF0261207AD52706DB22D8CDD0DA65723CD801FDA7C548C5EB0ECFC39DD66CC17503BAA3BBB77BFA35D20650E4F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Australia/Sydney) {.. {-9223372036854775808 36292 0 LMT}.. {-2364113092 36000 0 AEST}.. {-1672560000 39600 1 AEDT}.. {-1665388800 36000 0 AEST}.. {-883641600 39600 1 AEDT}.. {-876124800 36000 0 AEST}.. {-860400000 39600 1 AEDT}.. {-844675200 36000 0 AEST}.. {-828345600 39600 1 AEDT}.. {-813225600 36000 0 AEST}.. {31500000 36000 0 AEST}.. {57686400 39600 1 AEDT}.. {67968000 36000 0 AEST}.. {89136000 39600 1 AEDT}.. {100022400 36000 0 AEST}.. {120585600 39600 1 AEDT}.. {131472000 36000 0 AEST}.. {152035200 39600 1 AEDT}.. {162921600 36000 0 AEST}.. {183484800 39600 1 AEDT}.. {194976000 36000 0 AEST}.. {215539200 39600 1 AEDT}.. {226425600 36000 0 AEST}.. {246988800 39600 1 AEDT}.. {257875200 36000 0 AEST}.. {278438400 39600 1 AEDT}.. {289324800 36000 0 AEST}.. {309888000 39600 1 AEDT}.. {320774400 36000 0 AEST}.. {341337600 39600 1 AEDT}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Tasmania

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):195
                                                                                                                      Entropy (8bit):4.777331394201868
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3yI4DVJHAIgxnvVWAN/2DC3neDCVDy:MByMjUQVv8At2+eKy
                                                                                                                      MD5:9C58D9EFBB03472BBDA76CE2FFAD4BB4
                                                                                                                      SHA1:30959E3681B64AE26F7FA3957887896C26AF7F19
                                                                                                                      SHA-256:C94FA7A7640CD00963EE8FF1A3D9DCDA2075408739D998EDBF7CFC998DB764FD
                                                                                                                      SHA-512:2D6B778217726691F2CB4A4995A8B1AB08DDB7FE4570A3FD04EF54F718F455EF3CBD4EEF1A1BCC99A2088C82A6E89DB455BAF1327CECD6BF608837E50F14A6C1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Australia/Hobart)]} {.. LoadTimeZoneFile Australia/Hobart..}..set TZData(:Australia/Tasmania) $TZData(:Australia/Hobart)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Victoria

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):204
                                                                                                                      Entropy (8bit):4.818875198673406
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3yIvFfkSHAIgoFNNvN/2DCzyQDCMF4:MByMj9fKaNNvt2xQz4
                                                                                                                      MD5:0B144A2E47C81354BC510BC741DE5150
                                                                                                                      SHA1:A7396F1741F02C6C208FD1286362E4E0720198B8
                                                                                                                      SHA-256:DBEF9C5BDD290FEC5FA740D697143332D3CA1FC373CF1DF736F1883AC9BA3298
                                                                                                                      SHA-512:562B029591F9ADB8C324BA56E849B2B524E91B26D3DB441510194882A8E1E63E6948D041874A00A0A76F29925A1CEAC53DD2AE5D7F23123B6FE919346CBFD8CC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Australia/Melbourne)]} {.. LoadTimeZoneFile Australia/Melbourne..}..set TZData(:Australia/Victoria) $TZData(:Australia/Melbourne)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\West

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):188
                                                                                                                      Entropy (8bit):4.831654343064909
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq/xJjXFeyXHAIgoXjrWARL/2QWCCjH0QWCCjQ:SlSWB9vsM3yInHAIgOWAN/2DC00DCt
                                                                                                                      MD5:5F5916CB038876BE27AA5E2AD74EE085
                                                                                                                      SHA1:18AC21B638188B542455BA3DA91F958DF1724E68
                                                                                                                      SHA-256:75ABB7F20C4A0B618138AA190AF33CEAF2A6D2C707DA6C1314E4BFF2F9904F58
                                                                                                                      SHA-512:ADFD83E292AC1BB5E19255A9B2DA0E3BB9323A5F9B92D458DE34C291D7F9B6CFBBF62AA3351FB320E54F34305DD485ADC72134D21AFA6A27B2B8B7D93DCA2113
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Australia/Perth)]} {.. LoadTimeZoneFile Australia/Perth..}..set TZData(:Australia/West) $TZData(:Australia/Perth)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Australia\Yancowinna

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):212
                                                                                                                      Entropy (8bit):4.918079927018121
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3yIcKlHAIgJK3N/2DCkuM0DC9KM:MByMjcKeJK3t2kVSKM
                                                                                                                      MD5:BEDEA56FCE4B2F0A3F3E9319856A5560
                                                                                                                      SHA1:9FD0FE998A003C6B4CCCD00A977153347DE07F55
                                                                                                                      SHA-256:55A9264D0414644A1BE342106AE86086A6659596DC9322A74FC4D1DDB41F7C60
                                                                                                                      SHA-512:7C438B72262B99EDEEB31AC95E0135BB722A3B0B049278B6DE67DB5FB501837FB9C03785233B538E83F4B56104F6EA3B3DA0F7C2275E0F78F232161840AA4C63
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Australia/Broken_Hill)]} {.. LoadTimeZoneFile Australia/Broken_Hill..}..set TZData(:Australia/Yancowinna) $TZData(:Australia/Broken_Hill)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Brazil\Acre

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):194
                                                                                                                      Entropy (8bit):4.888429541699473
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7thteSHAIgpth9RN/xWh490th4:MByMYdIp7tQ490I
                                                                                                                      MD5:A8A7A10DA4321819ED71F891480770F8
                                                                                                                      SHA1:930674EF7711542D7F471A59C1870D4576E027FD
                                                                                                                      SHA-256:2F594239A434052D36053A2B3EAB134EADBAD06EB6737E67CF72166DAB157537
                                                                                                                      SHA-512:C6AD1869A713DDE0E4DE53F7894E5CE0B7AEFDDD7C5C3D83BB5B92FB7D8E20B373A6694045053E1AE8EA98A7B7D0C052EF2C21310E47DC650A7A399A5F73D586
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Rio_Branco)]} {.. LoadTimeZoneFile America/Rio_Branco..}..set TZData(:Brazil/Acre) $TZData(:America/Rio_Branco)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Brazil\DeNoronha

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.875339623736144
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0wKy4oeyXHAIg20wKARL/1bIAJl0IAcGEwKyovn:SlSWB9vsM3y7/rDSHAIgp/AN/xIAE90j
                                                                                                                      MD5:E0D0EFBEC37E27532B49FF6DD9893DA0
                                                                                                                      SHA1:9C00993A885AF448E48201A46E17629A7A602FC6
                                                                                                                      SHA-256:A676562A90FF8587A775F6F0E3BE05D870456A56D25B5330816BF9043C8D475B
                                                                                                                      SHA-512:AB0E6907F9C0002CA5C050A0069AF013B14BADA08CA4553C96B302C078DF7629D5D7EDE4A19A53DEC6E7B9E6D9857F14EC7A1DB9BC11F2EEC9FFBAC70E129EEE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Noronha)]} {.. LoadTimeZoneFile America/Noronha..}..set TZData(:Brazil/DeNoronha) $TZData(:America/Noronha)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Brazil\East

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):191
                                                                                                                      Entropy (8bit):4.948480276987682
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0tQJXveyXHAIg20tQJE6RL/1bJHIAcGEtQJXy:SlSWB9vsM3y7tIGSHAIgpt36N/xR90tF
                                                                                                                      MD5:FCCB5F44903E1B988A058E5BBF5E163B
                                                                                                                      SHA1:E1CC03DD4A804C7305D8B0C12D8451D08AE262EA
                                                                                                                      SHA-256:961FB3AB99A63B1E9704B737EAB2D588B5A39D253A213E175CC678BEDFFD498D
                                                                                                                      SHA-512:F31C80E4AD6EBE6CB8A3382E0052DC47601D073E8F81375D50241105675AA3AB45433FFD0534524D9992ABE1086C6671D85FF7C72B0D6766EB9984426F608B77
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Sao_Paulo)]} {.. LoadTimeZoneFile America/Sao_Paulo..}..set TZData(:Brazil/East) $TZData(:America/Sao_Paulo)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Brazil\West

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):182
                                                                                                                      Entropy (8bit):4.902113962502196
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0znQZF3vXHAIg20znQv5RL/1bbAWVIAcGEznQe:SlSWB9vsM3y7zn+PHAIgpznSN/xn90zN
                                                                                                                      MD5:9F4B43F4F27D0B7EAC0C5401A1A794B4
                                                                                                                      SHA1:2A8543B994E93E54BD50EAA78463905E6A8EBE74
                                                                                                                      SHA-256:0500C9A248C8CE9030EA30D0AF9DD95DC465480BAF60646C0B7C511FA23C6D1F
                                                                                                                      SHA-512:0ADAF708ACFBD80F4704951EEBC24AD144FD5856997A429279E804F3A7F7F9A8FED41DCEE85BFB1ECDBF1E05137E87E7430186474BCF5DE42067FFC74746F048
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Manaus)]} {.. LoadTimeZoneFile America/Manaus..}..set TZData(:Brazil/West) $TZData(:America/Manaus)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\CET

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7736
                                                                                                                      Entropy (8bit):3.7984816540097843
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:09+xKDBb0S274elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCsyZhlt7:9Ss41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:6DB983AD72FB2A88FC557BE5E873336F
                                                                                                                      SHA1:C64E988010087ED559A990B3D95078949C9B4D72
                                                                                                                      SHA-256:E2AEA7CFD428A43D9DB938BCC476623ADC1250BD8057013A7FFF5F89D7FF8EFC
                                                                                                                      SHA-512:C0A646F80FB2FD42D9146A4FD36CF5A7F62016684F8D5AF80453EC190F4AEA65EDADC5BCF071AE746ABFB43B29C27B2743F2152B6986D41BFDE1617CA774A7C5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:CET) {.. {-9223372036854775808 3600 0 CET}.. {-1693706400 7200 1 CEST}.. {-1680483600 3600 0 CET}.. {-1663455600 7200 1 CEST}.. {-1650150000 3600 0 CET}.. {-1632006000 7200 1 CEST}.. {-1618700400 3600 0 CET}.. {-938905200 7200 1 CEST}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-796777200 3600 0 CET}.. {-781052400 7200 1 CEST}.. {-766623600 3600 0 CET}.. {228877200 7200 1 CEST}.. {243997200 3600 0 CET}.. {260326800 7200 1 CEST}.. {276051600 3600 0 CET}.. {291776400 7200 1 CEST}.. {307501200 3600 0 CET}.. {323830800 7200 1 CEST}.. {338950800 3600 0 CET}.. {354675600 7200 1 CEST}.. {370400400 3600 0 CET}.. {386125200 7200 1 CEST}.. {401850000 3600 0 CET}.. {417574800 7200 1 CEST}.. {433299600 3600 0 CET}.. {449024400 7200 1 CEST}.. {465354000 3600 0 CET}.. {481078800 7200

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\CST6CDT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8505
                                                                                                                      Entropy (8bit):3.8095769056779916
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:e3HgahLi8hbZlNA604qSScBgN+4ctDzIVQ/c/3hNxTh:eQaUqtfA604qSBgI7DBch
                                                                                                                      MD5:A6F88C55E8613A27DE3E6C25B0672910
                                                                                                                      SHA1:3B593CC17BF153A6209FC5AACE7B88DA9603BD44
                                                                                                                      SHA-256:73A9841F233AA657AFB6CED8A86A37D55FE5582DD996B9B28975D218BCCC078F
                                                                                                                      SHA-512:526A922B1594A2800B03F363F7BFEC29203D4A4F2B49C5F2618469F59176CE4F8AFBA0616B226AC39D308DB05DE7147714D9B6CDBB2EA7373A041A4D47F50E2E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:CST6CDT) {.. {-9223372036854775808 -21600 0 CST}.. {-1633276800 -18000 1 CDT}.. {-1615136400 -21600 0 CST}.. {-1601827200 -18000 1 CDT}.. {-1583686800 -21600 0 CST}.. {-880214400 -18000 1 CWT}.. {-769395600 -18000 1 CPT}.. {-765392400 -21600 0 CST}.. {-84384000 -18000 1 CDT}.. {-68662800 -21600 0 CST}.. {-52934400 -18000 1 CDT}.. {-37213200 -21600 0 CST}.. {-21484800 -18000 1 CDT}.. {-5763600 -21600 0 CST}.. {9964800 -18000 1 CDT}.. {25686000 -21600 0 CST}.. {41414400 -18000 1 CDT}.. {57740400 -21600 0 CST}.. {73468800 -18000 1 CDT}.. {89190000 -21600 0 CST}.. {104918400 -18000 1 CDT}.. {120639600 -21600 0 CST}.. {126691200 -18000 1 CDT}.. {152089200 -21600 0 CST}.. {162374400 -18000 1 CDT}.. {183538800 -21600 0 CST}.. {199267200 -18000 1 CDT}.. {215593200 -21600 0 CST}.. {230716800 -18000 1 CDT}.. {247042800 -21600 0 CST}.. {262771200

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Canada\Atlantic

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.804821796604604
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx02NEO/vXHAIg202NEqA6RL/0nalGe2IAcGE2NEOyn:SlSWB9vsM3y7UEOXHAIgpUEqA6N/0af9
                                                                                                                      MD5:33A04963E70EBF29339204348E0DF874
                                                                                                                      SHA1:456C0DB88ECE4D180EEE5AE5AEF5FBEB6E977D00
                                                                                                                      SHA-256:6DC6354D761CBE7820C9186568CAB87AD48CA925507F6A740357195B60E16D87
                                                                                                                      SHA-512:DF8F46827760BD7EC922C6837E0B6649B4FBD220B79E6F1B67FE3DD8CB3D2D035ECDAF4CF6CE5BDE6DC79C6F7B6EE2B9787AF08A97845CD0D647720A2E78D7EF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Halifax)]} {.. LoadTimeZoneFile America/Halifax..}..set TZData(:Canada/Atlantic) $TZData(:America/Halifax)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Canada\Central

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):191
                                                                                                                      Entropy (8bit):4.863241040396457
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0po/vXHAIg20puFvHRL/0nPQox/h4IAcGEpoyn:SlSWB9vsM3y7pYHAIgppuRN/0d490pl
                                                                                                                      MD5:97E50CE9FBA3F1A6DFCF333F9E6D592C
                                                                                                                      SHA1:EE472C411079E788DBF32FAC9C5B7EE121960DC2
                                                                                                                      SHA-256:DB32E83949D62478D229E9FB57BB1624D21B3A9CCEE4CD55335F8262C01D820A
                                                                                                                      SHA-512:D547E3DC03848A677BE67F7CF4124E067F76EE09BB724A5B10F028BEA72C1526B17678A035B2C53F69498E9ECAACD3C5445D42B7FE58DF706DD2C5F2ADA05A73
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Winnipeg)]} {.. LoadTimeZoneFile America/Winnipeg..}..set TZData(:Canada/Central) $TZData(:America/Winnipeg)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Canada\Eastern

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):188
                                                                                                                      Entropy (8bit):4.758562813220951
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0qMKLRXnXHAIg20qMKLRE6RL/0nbHboxp4IAcGEqM:SlSWB9vsM3y7RQtHAIgpRQPN/0Dboxpp
                                                                                                                      MD5:4365BEFA3D50EEE20843EF97A095E512
                                                                                                                      SHA1:7756049B4CD6459742686925E9516E64A9727306
                                                                                                                      SHA-256:22844994AE893F3236A091B050E932E84A5218EC0D01F72595E17CCC471FA564
                                                                                                                      SHA-512:CB265E79DF926026BEBF7158590369ABE5353C759540F509ABBA2A7ADBE59A705BC2AB936F400614BE610EDB761DE9A2B1E179A0A8B0A87E595392362C2516AA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Toronto)]} {.. LoadTimeZoneFile America/Toronto..}..set TZData(:Canada/Eastern) $TZData(:America/Toronto)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Canada\Mountain

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):192
                                                                                                                      Entropy (8bit):4.8181126338833655
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx07nKL50vXHAIg207nKLyRRL/0nNYLo/4IAcGE7nK1:SlSWB9vsM3y77G2HAIgp7bN/0W8/4908
                                                                                                                      MD5:FA0D0024AD72CCE4EC7229FA897FB1B7
                                                                                                                      SHA1:4373A07F2674FE974189CC801987652AA97F0204
                                                                                                                      SHA-256:D7A203E60FF19DCDEAAD14121720DE51DA73392D25B40FFA301C1935CDF89517
                                                                                                                      SHA-512:82EF7F429604A69734B04D298B4C9C9AC3BE57B9DD8C4CECF59C7AB3470BDFBA0505886C4E6AA3864F5EC7FBB4C69C54CF153A6417376828234833013C29A0C1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Edmonton)]} {.. LoadTimeZoneFile America/Edmonton..}..set TZData(:Canada/Mountain) $TZData(:America/Edmonton)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Canada\Newfoundland

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):196
                                                                                                                      Entropy (8bit):4.998628928230972
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7tgYJHAIgptVN/0xdBx+90twv:MByMYnKpTt590g
                                                                                                                      MD5:A2DCCB8BFC65DD4E7C3BB7F10DCEFF11
                                                                                                                      SHA1:6FD2F4FAE06C5D4D3F189A167A98AA76497569DD
                                                                                                                      SHA-256:87F42F45FD7D059CA47650D445420DE8320F3A7C1CBC7671FBFA8A8881274433
                                                                                                                      SHA-512:F42E32C5BD785BA914E5054784BF67DDF951460A708290D1899621CEEDC63475B584FC052A86A3B6D45BF3C651D42427FB6F9CE2A2A33764DFFF731053BECC16
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/St_Johns)]} {.. LoadTimeZoneFile America/St_Johns..}..set TZData(:Canada/Newfoundland) $TZData(:America/St_Johns)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Canada\Pacific

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):194
                                                                                                                      Entropy (8bit):4.887587766811186
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7ZLgXPHAIgpZLgFN/0N290ZLgK:MByMY13p1stx901/
                                                                                                                      MD5:68900CE38FE0E40578323BBD3D75184E
                                                                                                                      SHA1:9D5EAB5CBCD495DD46974207FBE354A81DD2070F
                                                                                                                      SHA-256:5C4FD46054B190A6D4B92585B4DAE4E3A8233EE2996D14472835DDD264911DC6
                                                                                                                      SHA-512:3EF53F0FCD8D88A1B977886BDFAA03D7B84EF021AC6BEDF7C571BFBF2242BFC3F3EB6A6B6A9C2F6852AF412A96DFBC30F3BB25A6619CBCD8736F3DF5B64DE1BF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Vancouver)]} {.. LoadTimeZoneFile America/Vancouver..}..set TZData(:Canada/Pacific) $TZData(:America/Vancouver)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Canada\Saskatchewan

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.887593462838566
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0sAzE5Y5XHAIg20sAzEo5RL/0nogS64IAcGEsAzEB:SlSWB9vsM3y7hzi2HAIgphznN/0Hd499
                                                                                                                      MD5:A4237BDCAF68B0EFECA97178F3DEE724
                                                                                                                      SHA1:A9CBC02B5545A63A0C9B38C8FA7FA2DE6D483188
                                                                                                                      SHA-256:46BA00AE3A07A4DC83D6CB517D87C9CBBA491B3421FE9AD6C74CAC5695EB73F7
                                                                                                                      SHA-512:832BF256BE8CB2DD205DDE50017448D5830B46FF4DCA77BDB852067EE0C9DF9977014F2A3E3DD6944336158D8EA377CFBBE519EE5B56FB26EB64325B45476B9D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Regina)]} {.. LoadTimeZoneFile America/Regina..}..set TZData(:Canada/Saskatchewan) $TZData(:America/Regina)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Canada\Yukon

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):195
                                                                                                                      Entropy (8bit):4.889486451014262
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7peR2fkSHAIgppeR2rN/0CF/490peR24:MByMYkGk7pkOtBQ90kB
                                                                                                                      MD5:490D99BD5465CBF5A8FE28F33180B8A6
                                                                                                                      SHA1:4783295C31A804BE98145270ED28956A0783E655
                                                                                                                      SHA-256:A1B1AF37DC89C6BA663E4E967A18409AE4E0FA9EF1B908D0461368DA31001C09
                                                                                                                      SHA-512:9F6B4F204A21B69E1DFCB766C0671D3736414C73269DCEDCDB4FC3DBA869BBA1511DF6B5061F8964F0AF9C3816133D04E5DFB8A6AD07CA06E7712787A8FECC5A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Whitehorse)]} {.. LoadTimeZoneFile America/Whitehorse..}..set TZData(:Canada/Yukon) $TZData(:America/Whitehorse)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Chile\Continental

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):194
                                                                                                                      Entropy (8bit):4.812019117774239
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7tfEJkHAIgptfEJo5N/0rHM490tfEJB:MByMYE9pEOt4X90EB
                                                                                                                      MD5:6EF54792279C249B16877100682F1806
                                                                                                                      SHA1:A62629EA055207D917740E3AEF4F0B005EA49CC4
                                                                                                                      SHA-256:5B40167DD0C0B5C293861070C4AC249F78DDF8BAD798DD0165E3AE894C9B9570
                                                                                                                      SHA-512:3CF93003C3EA2B4386660F0C87074F9AE2BAC4EE72D88451DCB1EA8B79502D2187B1608B6D5CE8D7EDC00AED99CF9DB7B006EB6ED2A2B5009F2C0E757D282D74
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Santiago)]} {.. LoadTimeZoneFile America/Santiago..}..set TZData(:Chile/Continental) $TZData(:America/Santiago)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Chile\EasterIsland

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.808907056781067
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQG7ZAJWXHAIgObT7ZAiFvRL/0bxOdBx/nUDH7ZAZv:SlSWB9vsM3ycJAUHAIgObJAiRN/04dBn
                                                                                                                      MD5:2EC4FDD1EFBAF1D9F9DBAC8B1B5EDD09
                                                                                                                      SHA1:FECED8EBC7B666628B7B45C9694FCB3A0B20A42A
                                                                                                                      SHA-256:1E2DA1862E0E0F131B7C6EB12FAC5F920852C61C162993A30BC843A464A5AAD4
                                                                                                                      SHA-512:74D61141505BAF1ABAD61FB91941C63C169EFE3C85829FEBB4D29A72EA54D1A07EC84E2E9B48E963E65CBF7663245459FAD288D620B1BEFFE682A2D1C243794D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Easter)]} {.. LoadTimeZoneFile Pacific/Easter..}..set TZData(:Chile/EasterIsland) $TZData(:Pacific/Easter)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Cuba

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):175
                                                                                                                      Entropy (8bit):4.857134440822812
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx02TEMVFfXHAIg202TEyRRL/0lIAcGE2TEMy:SlSWB9vsM3y76EkHAIgp6EyRN/0l9068
                                                                                                                      MD5:3FB16EA4A9B0529220133C4A7B05215B
                                                                                                                      SHA1:BD56B6E76A92A5925140CB5CC3D940E1DE90993F
                                                                                                                      SHA-256:6F4F2D7F5BCA4E5183460C0153D2B98F5239A99F149DE6638B311C73CEDB1329
                                                                                                                      SHA-512:690EC1BCE7FA979BD55725B8ED6DF042BB331CAD332827B2C64B31F107539934AA5A30268B1F03D52697528E68A1BA72E4D56B5199A68B1ED897B75FAFB33A8A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Havana)]} {.. LoadTimeZoneFile America/Havana..}..set TZData(:Cuba) $TZData(:America/Havana)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\EET

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7440
                                                                                                                      Entropy (8bit):3.695300167191082
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:CgDIMcVbf+uO7DVopaNlKkUpvBeRF+iDlKSdkwSMTHkB2vwz59F06Kgr/y/rYjlt:KlfyDjivBeRF+W35Syrwl9h5j
                                                                                                                      MD5:34339D40AC889DCB5A09D10F123175AD
                                                                                                                      SHA1:57E1F70FA8999106FA3874A9CE1E75A7ACBC81E9
                                                                                                                      SHA-256:64E284F9F7A36CC0A352809141D76E73A99344A9F30CFFEA254CBB9D2C589ADA
                                                                                                                      SHA-512:2DCF16D9D7593FC3E5844E18FD689AADA157866490CFD37A38A47F747DDA189822055F6DD470CA2D77040D2C5A2527512880C22ED8EC16D9424EDF3DC228AFED
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:EET) {.. {-9223372036854775808 7200 0 EET}.. {228877200 10800 1 EEST}.. {243997200 7200 0 EET}.. {260326800 10800 1 EEST}.. {276051600 7200 0 EET}.. {291776400 10800 1 EEST}.. {307501200 7200 0 EET}.. {323830800 10800 1 EEST}.. {338950800 7200 0 EET}.. {354675600 10800 1 EEST}.. {370400400 7200 0 EET}.. {386125200 10800 1 EEST}.. {401850000 7200 0 EET}.. {417574800 10800 1 EEST}.. {433299600 7200 0 EET}.. {449024400 10800 1 EEST}.. {465354000 7200 0 EET}.. {481078800 10800 1 EEST}.. {496803600 7200 0 EET}.. {512528400 10800 1 EEST}.. {528253200 7200 0 EET}.. {543978000 10800 1 EEST}.. {559702800 7200 0 EET}.. {575427600 10800 1 EEST}.. {591152400 7200 0 EET}.. {606877200 10800 1 EEST}.. {622602000 7200 0 EET}.. {638326800 10800 1 EEST}.. {654656400 7200 0 EET}.. {670381200 10800 1 EEST}.. {686106000 7200 0 EET}.. {701830800 10800 1 E

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\EST

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):111
                                                                                                                      Entropy (8bit):4.924838898127838
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yLbNMXGm2OHLVva0v:SlSWB9eg/ylDm2OHLVi0v
                                                                                                                      MD5:B221E7141FFC9DEA317F64F81C7BB4E0
                                                                                                                      SHA1:B13BBDE790B169D8B9075275523F319D5173E2C7
                                                                                                                      SHA-256:6344BE02529C1CC5F7B5FE14B7E9BBCED4DDE68A24B824601EEBCAE207ABFDF2
                                                                                                                      SHA-512:FFFA733476D6C7DCF49C0B88C9F5E381DE2B69BAEDF6C7B1D91C6F45CE2D36E06D40F25B6BB65D4B5D650471BB52CD2EC3F68703DAB4BD5414F8D3F831D92BD2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:EST) {.. {-9223372036854775808 -18000 0 EST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\EST5EDT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8505
                                                                                                                      Entropy (8bit):3.8091719283634853
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:R+kNoStCt/cL1BRP0HY2iU7KKdFL6Aa2K4gSLf8e:RXoSItON0HY2iUmUFLqU
                                                                                                                      MD5:4578FE48781599B55F4BCF5560019789
                                                                                                                      SHA1:4EAA7134621DFDEBFD1405F5CC58227FA7E80C3A
                                                                                                                      SHA-256:0BE6161403BC5A96BFAB174F2C3FCBA8A677D4349699B408E9872B9DD0FE15CE
                                                                                                                      SHA-512:9ACC2EF396F635D22E3DF6B785831AD74B510049F1BE85F996467A5BBC0DF49A28B2FC3E4CA0CA9DC8FC2C29EA50D909F0B153265B107445D3052E81D9A4D50A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:EST5EDT) {.. {-9223372036854775808 -18000 0 EST}.. {-1633280400 -14400 1 EDT}.. {-1615140000 -18000 0 EST}.. {-1601830800 -14400 1 EDT}.. {-1583690400 -18000 0 EST}.. {-880218000 -14400 1 EWT}.. {-769395600 -14400 1 EPT}.. {-765396000 -18000 0 EST}.. {-84387600 -14400 1 EDT}.. {-68666400 -18000 0 EST}.. {-52938000 -14400 1 EDT}.. {-37216800 -18000 0 EST}.. {-21488400 -14400 1 EDT}.. {-5767200 -18000 0 EST}.. {9961200 -14400 1 EDT}.. {25682400 -18000 0 EST}.. {41410800 -14400 1 EDT}.. {57736800 -18000 0 EST}.. {73465200 -14400 1 EDT}.. {89186400 -18000 0 EST}.. {104914800 -14400 1 EDT}.. {120636000 -18000 0 EST}.. {126687600 -14400 1 EDT}.. {152085600 -18000 0 EST}.. {162370800 -14400 1 EDT}.. {183535200 -18000 0 EST}.. {199263600 -14400 1 EDT}.. {215589600 -18000 0 EST}.. {230713200 -14400 1 EDT}.. {247039200 -18000 0 EST}.. {262767600

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Egypt

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):170
                                                                                                                      Entropy (8bit):4.862365884559795
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsPHV5XHAIgNGE7TRRL/yCh0DcPHy:SlSWB9vsM3y7fHAIgNTRN/yg0DH
                                                                                                                      MD5:ACD69F34396296BA553243267D06CEE0
                                                                                                                      SHA1:9575FFE5E7833B9532F17AC5413EA9DB23F07ECA
                                                                                                                      SHA-256:936B6484469351DEF8FAFE8EC180862729F5E43BDE4E53E2E9636E221B54C3C2
                                                                                                                      SHA-512:149D23FF35747127E9A2F4056D09472E8E689970BC795D5411C5BF621D949ADDEBDA68674D375A248A63106ABDFF6C54A8AFE5385C45BE2916CAED0C30F7C4A1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Cairo)]} {.. LoadTimeZoneFile Africa/Cairo..}..set TZData(:Egypt) $TZData(:Africa/Cairo)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Eire

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):172
                                                                                                                      Entropy (8bit):4.901791318009318
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV5QH+o3vXHAIgoq6QHFRRL/yMQs/h8QanQHuv:SlSWB9vsM3ymnQeoPHAIgonQzN/yM/hm
                                                                                                                      MD5:E9C2C97EB65526F1D4BE1AD7385336FA
                                                                                                                      SHA1:09E4000CE320F779E2DFCA2FFD6B9258FFBA6CE4
                                                                                                                      SHA-256:B78A833337EFEC8B5F64622F1BFDA21FCB79CF290E9CF32A54B206EB20C6FDE9
                                                                                                                      SHA-512:EAEC097B58BF466CC7D6C0C6297628AF910CC308AC822565FD6CDABF96CD4EC57D4CC724FE782B6C1B606DFF9424013F6A890A871339577F7CB68BBB3C425E65
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Dublin)]} {.. LoadTimeZoneFile Europe/Dublin..}..set TZData(:Eire) $TZData(:Europe/Dublin)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):110
                                                                                                                      Entropy (8bit):4.928744204623185
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDMbNMXGm2OHvDwy:SlSWB9eg/yRQJDm2OHsy
                                                                                                                      MD5:9C08898081382F52CE681B592B8E2C8D
                                                                                                                      SHA1:165944424740B1FA9B4B3B8E622198ABD0BDA0F8
                                                                                                                      SHA-256:66B0DF8888883BFF44B18728B48CDF24AAED0BB745D601F3422C4F2D4063E0AC
                                                                                                                      SHA-512:86EA639F999169F2FBA2457BE5042463A1938031268CCA71FDD03CCBC6194932937BA58B49FBED461E055E9AA668FF6EBF391AA7EC603C0A425416DF2E6CC84D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT) {.. {-9223372036854775808 0 0 GMT}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+0

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):159
                                                                                                                      Entropy (8bit):4.910789466104329
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqSsM4DovXHAIgexovYovHRL/yRDOm7/8RDMovn:SlSWB9vsM3yFXHAIgnvVHN/yRSw8RQy
                                                                                                                      MD5:333F2BFA92742A49BB88F11C7CD896A9
                                                                                                                      SHA1:BB5BEC010C36427AEEBDDA2FB72083E22A3F5073
                                                                                                                      SHA-256:64466EA3759301E88C29AD1A833CDCBBC495EB4A5A3AC45E7B2987FECD6702BD
                                                                                                                      SHA-512:E2270F4B57C5F1C849726259B886E8644DCF497FA0D034AD48885146BEDC70DC8899900DA9AC01F2609A2DA881E10F9042CCBF75A3F5DA7344D7E92F1B070806
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/GMT)]} {.. LoadTimeZoneFile Etc/GMT..}..set TZData(:Etc/GMT+0) $TZData(:Etc/GMT)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+1

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):116
                                                                                                                      Entropy (8bit):4.980500771169276
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDOveyXMXGm2OH1VOwVn:SlSWB9eg/yRSvPDm2OH1VOwV
                                                                                                                      MD5:A7C3FD06D1E06F125813C9687C42067C
                                                                                                                      SHA1:515622C0B63E977AFBFC78AD8466053C4A4A71A6
                                                                                                                      SHA-256:3BE1EC71D2CC88FA9A3DB7DC0476475F33FE5BCBE6BC35C0F083859766466C32
                                                                                                                      SHA-512:548DA608CFCA5B8539652F94CA2040D624602D2DF64B2C8CCDB8B219B9B384E01386CDF95F3BF77409DF0584FA12A3B73D56D13107D98BEB4C2555F458B3F374
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT+1) {.. {-9223372036854775808 -3600 0 -01}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+10

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):118
                                                                                                                      Entropy (8bit):4.965033464829338
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDOPFNMXGm2OH1VYU7vV:SlSWB9eg/yRSPXDm2OH1VYW9
                                                                                                                      MD5:FF71149E56D4CB553D0ED949B5F4C122
                                                                                                                      SHA1:3459B47E0EEC80D7A29512CA4F3F236C89E86573
                                                                                                                      SHA-256:E61E826E6FBC2396EF152640698098F4477D4FFDFE5F791F62250C3EC5865304
                                                                                                                      SHA-512:43B0CC8BD7F1EFC80C3F14F115D651EADD5743B17B854C2FB7AC25995138D3DF8792915C2952B80F35784A7115F8FB335ACE171479B24C668190AC175523DB21
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT+10) {.. {-9223372036854775808 -36000 0 -10}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+11

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):118
                                                                                                                      Entropy (8bit):5.002239901486653
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDOeJMXGm2OHaBByVn:SlSWB9eg/yRSsDm2OHa7yV
                                                                                                                      MD5:08AABA917A8D6B3BB3D0DD1637F5ABFC
                                                                                                                      SHA1:D1D704F0250D4CBD450922A02D021E0000FBF5CF
                                                                                                                      SHA-256:143528946275DDC8B894218D3F1BE56C950F740828CEC13166C3D7E8E1B6BB7E
                                                                                                                      SHA-512:F37AE54864A613C830308CB94AB7CEA9534A86A53B52B4A2C28CEEFE6F5BC0518143AAFD77A6DA5EC55D392F5BD34FCD4B5BE51794B1A386ED783B9BA89C10C3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT+11) {.. {-9223372036854775808 -39600 0 -11}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+12

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):118
                                                                                                                      Entropy (8bit):4.97889339723103
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDONdNMXGm2OH3FNyUFFv:SlSWB9eg/yRSNDm2OH3XyMv
                                                                                                                      MD5:7374B66D6E883D7581E9561C3815EB92
                                                                                                                      SHA1:235E96A7420DF6733F3CA368D4A2D57766656043
                                                                                                                      SHA-256:A93EAFAC2C1089C608C8536127D0E8B53D8C7CFD13AE7DD69339E12A89F803C6
                                                                                                                      SHA-512:9BA59B17F20D65DFF1A5A2D557B535F69B04C172AECB15F88CA3484D74CC7D53894985C08653CF13D868BCBD5E7E5041E0CB2F457B5B603F3851198E552E33A7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT+12) {.. {-9223372036854775808 -43200 0 -12}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+2

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):116
                                                                                                                      Entropy (8bit):4.922268982357521
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDOcF3vFNMXGm2OHnFQVIyV:SlSWB9eg/yRS0fXDm2OHnFQVb
                                                                                                                      MD5:FDDC663E40F8FFFE27959E94625725DF
                                                                                                                      SHA1:EE3FBC1F6C8BBCF1BDC9E5DB4D2EA1A57E2E9BB3
                                                                                                                      SHA-256:AD5833153446960BDE0653A22AE2111BF80CFD61C3010993CE87B81D40C75C72
                                                                                                                      SHA-512:A1B2A153834FEAD7DC27C0918E1B1CB905671F82850C1CAAEBD89F5535703FB259F02F699EA7F82F3044E37668EE93DFA4D4EB862CD437AFF0DABA84867B1963
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT+2) {.. {-9223372036854775808 -7200 0 -02}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+3

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):117
                                                                                                                      Entropy (8bit):4.949132511023475
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDOFfMXGm2OHBFVGAvFv:SlSWB9eg/yRSlDm2OHBFAKV
                                                                                                                      MD5:5C6F16F2CFD46030688066F9BFBE675D
                                                                                                                      SHA1:1DB5F36584822EB92E75B9AC9F440FD671BD90AE
                                                                                                                      SHA-256:C7BEE4C71905EDDB40BAF42C0CD0DC70BB9F298EAAB8B9367D484B8431DD084A
                                                                                                                      SHA-512:FFB2C4CD8EA7DE165C3D989454898FF2023D1A1E3B2B34EC23B1B71EFA7BF2538488DA0069E59F1152B8933D2263B762D2D7C56ADBED826C33FC0BA6672E34DB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT+3) {.. {-9223372036854775808 -10800 0 -03}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+4

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):117
                                                                                                                      Entropy (8bit):4.971627677226461
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDOqJMXGm2OHBvGQy:SlSWB9eg/yRSQDm2OHBON
                                                                                                                      MD5:E35244C1A6084C7BC1D79E437677C55C
                                                                                                                      SHA1:898619DA4B8B9AC72E69C7BD30DEA2ADEF9440FE
                                                                                                                      SHA-256:26D1EF512CC5797FC63BA2B83C7D6271025F4D4F5C904D9FA8E97F053393D9A7
                                                                                                                      SHA-512:0687758558C4C5FF7802F3A57212694A1515761A8337D4B75FFE81434D2AD8A221B005DEC36BF013F2FC3DE1E46DFBED36352811EB7C5A5AE3A167A2E314F57C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT+4) {.. {-9223372036854775808 -14400 0 -04}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+5

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):117
                                                                                                                      Entropy (8bit):4.956438091983076
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDOJNMXGm2OHLVvyV6Aov:SlSWB9eg/yRSDDm2OHLVKVg
                                                                                                                      MD5:7C560A0F3C42E399AC1247CB6C516DC6
                                                                                                                      SHA1:C314B09D4E369C69C23A8DC1FB066FD0CFDC7211
                                                                                                                      SHA-256:054910BDDFC44D9B806BBD3008C30547FA57ECD3C043418C406A725158144688
                                                                                                                      SHA-512:FCE8431B759BD5359847734FD98D9D91394916235B2AF587FC927D5F3196FB283E241A6A9200EA852F9265ECEF81402FF6ACD0FA3A4AAEF6DF9DB1B056B3A9EF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT+5) {.. {-9223372036854775808 -18000 0 -05}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+6

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):117
                                                                                                                      Entropy (8bit):4.974743300958087
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDOAkSMXGm2OHvTmULyn:SlSWB9eg/yRSbSDm2OHviX
                                                                                                                      MD5:EEB1A3E0FD3339E332587D19C116D4EF
                                                                                                                      SHA1:5DBF046031CD354B1EF88E46D3FED74706D21AC6
                                                                                                                      SHA-256:D53BB247E0E429A6243AB9A9BDCAE1EE1CF5F271D79748A843631906AB63A988
                                                                                                                      SHA-512:07BDF9056DC335C773684E634B1D389FBD139464D4597DE862B7EAC096676A093934682BF911F4E68F299789931218C0E431F0CC6BEBD7275B5FC8015EDD0942
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT+6) {.. {-9223372036854775808 -21600 0 -06}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+7

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):117
                                                                                                                      Entropy (8bit):4.930134062078826
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDONeyFNMXGm2OHrXVYVny:SlSWB9eg/yRSNPDm2OHriVy
                                                                                                                      MD5:F92B31548D6BF8CCFA326C0CA6E205A0
                                                                                                                      SHA1:3FFC6C214EDBCBE9C2509306CE73B429113E1C8A
                                                                                                                      SHA-256:6BA5779E35D581B409F53B14B6E28ECC16F536FFEDD45DDBC8DAE4B8C28F66E7
                                                                                                                      SHA-512:317872E986099D02AF083397AE936854043D54CEBF45A70672F02DDC9E2F3B27BC3FA80902F9675131C51A09BBD3C2BD1CD437330935CEA113C643769E0DF20C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT+7) {.. {-9223372036854775808 -25200 0 -07}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+8

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):117
                                                                                                                      Entropy (8bit):4.915798027862021
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDOOF3vXMXGm2OHmFvGpn:SlSWB9eg/yRSqfXDm2OHaOp
                                                                                                                      MD5:B31B15E6006F8DF0D7627D6C90FF39AF
                                                                                                                      SHA1:7C4137BE11DA84771DF6DC5EBC32D5E5E87E060F
                                                                                                                      SHA-256:CA87559B154B165E83482AEE3D753BA8E38ABCA347A005E8504C566433CF4CB3
                                                                                                                      SHA-512:220F7E7379EABBC8ACD7ADBB7A4AC8E93E4B268F8F1C0965B7E6A09735EE86E293EF1C492990331EEB4176B8301A91EC20579756B962AE45C858A96C09349CCD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT+8) {.. {-9223372036854775808 -28800 0 -08}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT+9

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):117
                                                                                                                      Entropy (8bit):4.95764928386407
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDO3fMXGm2OHNms:SlSWB9eg/yRSPDm2OHNms
                                                                                                                      MD5:5B10173EB7119F1219250763504A3526
                                                                                                                      SHA1:A845021437C4638079040EF27AEF163C865FF8F8
                                                                                                                      SHA-256:A0987A1D078B0993FB3B07208E3F4538A2319DCDDDEB2FAEA32FC463DEAFB8DB
                                                                                                                      SHA-512:D213285D0A723B7771263122AFA269C2ABD0325A97D32C3870341255C06597DD6851C22860CFF42BF54E3FF5A36FC88C306F3BF1C69E7BD7FD7F69FE7601ED1A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT+9) {.. {-9223372036854775808 -32400 0 -09}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-0

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):159
                                                                                                                      Entropy (8bit):4.898210849752128
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqSsM4DovXHAIgexovYovHRL/yRDIyHp8RDMovn:SlSWB9vsM3yFXHAIgnvVHN/yRUyJ8RQy
                                                                                                                      MD5:5AFB7F12BA056619252D48904523DFA9
                                                                                                                      SHA1:CD6E6681C8302BF38095975DF556BD14959FDAC8
                                                                                                                      SHA-256:EFF27B3DEE9306641FF344801E06BB33FF768CDCCFE2409FA8AF752FF6D39F66
                                                                                                                      SHA-512:2869BB347F42667A3D174816466B15916FC61FCB5A6A1BE1DD750C5C1751602FEE0FE5A27651B7A19C9F6764872DD0F00D3D5AA16CA1A743DBA09646D25A4EB2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/GMT)]} {.. LoadTimeZoneFile Etc/GMT..}..set TZData(:Etc/GMT-0) $TZData(:Etc/GMT)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-1

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):115
                                                                                                                      Entropy (8bit):4.979902281541545
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDI/fMXGm2OHMKUrn:SlSWB9eg/yRUXDm2OHtUr
                                                                                                                      MD5:4000096844091488200125FC8F50E2F5
                                                                                                                      SHA1:9FFEAE66405CFB254180C7DBE185288791DFEE5F
                                                                                                                      SHA-256:B4BF883FBE9246EF4079179A746B1F9E59F2C77D4F598794B60732D198DC6044
                                                                                                                      SHA-512:25C69E04018C2978A2E5748F0D3C61157453D998C16FA4B3C257A6515B87F5FD2B754893B47604BBC60AB60B60BA162BF2D1463E616E72CB8713C736F1B4D428
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-1) {.. {-9223372036854775808 3600 0 +01}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-10

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):117
                                                                                                                      Entropy (8bit):4.964101313797091
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDINFeyFNMXGm2OHMUUMy:SlSWB9eg/yRUN5XDm2OHXFy
                                                                                                                      MD5:AE6601FACF6BE1E68083F8D353901181
                                                                                                                      SHA1:8B3BFA307D2A94BADD3A1A5E42545D6F7C620BCE
                                                                                                                      SHA-256:EF3046D7789CAE069B5473D053F3EF0157248F8A359A1282EE02BA613A75FC94
                                                                                                                      SHA-512:1859E6A2CB94EFEE7CD5C17803AA4F2DEEBE4DCF43D3B1EA737DF00BA86ECEC79D296D75E69D5829DECB48380B6B650724104FFA7959FD18FE032DF7D002A88B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-10) {.. {-9223372036854775808 36000 0 +10}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-11

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):117
                                                                                                                      Entropy (8bit):5.00162575418652
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDIVSMXGm2OHlVVtyn:SlSWB9eg/yRUVSDm2OHlVLy
                                                                                                                      MD5:D864BA451C9E441BF47D233626C57B99
                                                                                                                      SHA1:6C38E6F8BA292575C496124572D187F97C9F8E73
                                                                                                                      SHA-256:CCDEADBD18BE81E59A669A460A14AFCBFF733C3A5D164FC2B6B93DEAF009B78A
                                                                                                                      SHA-512:5C16BD1189F3FE6789CB3630C841FD168EC87D0498EE6FCC4C8D635F8CF4BCAF0558B44F859C37E418F6BC5A7F6693D6EF1DD218A1DB6DA2D54FF55916685119
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-11) {.. {-9223372036854775808 39600 0 +11}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-12

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):117
                                                                                                                      Entropy (8bit):4.978079707159482
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDIjbNMXGm2OHwvv0UIoAov:SlSWB9eg/yRUjJDm2OHwvv0YAov
                                                                                                                      MD5:C3E7748C7CB9D8A7F7FA5170D5098983
                                                                                                                      SHA1:54F5374A32173BEC6EDA430745DCD18749ABC233
                                                                                                                      SHA-256:23B61B18C653E25F7245B0BB6E04AD347E038585B145962FD1EEACE26F118D54
                                                                                                                      SHA-512:4783A7CD4C94CCC67C1C71F9C5D9CD99A3918EA4792D8CE2443ACE8F034B9023EBC02405B5DEAB919AA35FD1FD29D8980774316AC96D32ECDEBEFA15BBE6878D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-12) {.. {-9223372036854775808 43200 0 +12}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-13

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):117
                                                                                                                      Entropy (8bit):4.994320173226919
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDIaMXGm2OH1dNv7Dy:SlSWB9eg/yRUaDm2OHty
                                                                                                                      MD5:224AAAA8A31C283F50149A090E3970D5
                                                                                                                      SHA1:E7E4876EC2474FEFD82D4B174CA8E3A3427062F5
                                                                                                                      SHA-256:A9F1AD5A7CB5ED43C5E6E8A7A9B887329890ABB75B9FC9483B8543A367457EBE
                                                                                                                      SHA-512:6EE0C6F519AAB2DAA3F7D802F0F838BA9F6BF1D56530000D3C9EA4FDA81DCB9832A3285E36208F29EEB23C27EC5BFD3438DC272929A7531268B7C0626A65D6A5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-13) {.. {-9223372036854775808 46800 0 +13}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-14

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):117
                                                                                                                      Entropy (8bit):4.9895752453470585
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDIxhfMXGm2OH0FVtXvFv:SlSWB9eg/yRUxJDm2OH8jNv
                                                                                                                      MD5:8ADF71739DCADE63433B7BF8321EAC77
                                                                                                                      SHA1:AA6BDE83FF0D8BCFDE0426160250F2D17D3AF81D
                                                                                                                      SHA-256:A37A7160027BD38356764C4D1AA5B9B17F8D5DC3CFB81EF2ED399E44C41734CE
                                                                                                                      SHA-512:AEE3929DE269ADB5265A54841F041E41595359C101539F6309A4E737E3F5DF0BC91560781C7118975398C29A084113682C78F66E07E2E4AC5EAC8DFC33C4F0ED
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-14) {.. {-9223372036854775808 50400 0 +14}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-2

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):115
                                                                                                                      Entropy (8bit):4.921164129348819
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDInWNMXGm2OH/VXF9:SlSWB9eg/yRUnSDm2OH/Vb
                                                                                                                      MD5:CABB864F4E76B90928F5C54CD9334DEB
                                                                                                                      SHA1:4818D47F83F16B9F7612D1E979B2440C170ECDB9
                                                                                                                      SHA-256:7211BF8329B2388563ED8FA8C5140099A171B8A303A9473E9A6F3AF0C5D239CB
                                                                                                                      SHA-512:1FDCB05D675F1D28CB52B9F5EAC7EC52FDF2CE7E7411740A6F8FB5E9D443ED636CE268E3AF9E08605CC3E13A49B2D86FF4EA6A85F518D5C79E263BA94263361D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-2) {.. {-9223372036854775808 7200 0 +02}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-3

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):116
                                                                                                                      Entropy (8bit):4.948161547682094
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDIYyXMXGm2OHkNsWYcv:SlSWB9eg/yRUlDm2OHkKWYe
                                                                                                                      MD5:4AE5F29A13A86E4A7064E9200668E43B
                                                                                                                      SHA1:2460BD1BB0FF3A3C774A5C7CC3DA10235DA06B0D
                                                                                                                      SHA-256:BFC86D65B0B94725DCE4C88EDC4300141ABBCA4B6CDECF037C437DF49F0C1D6A
                                                                                                                      SHA-512:190DC38B4A20F964C967866507086317D85D979DFCFA415D1569C485C6476024922BC6E7103273C41889D9D7B22E97933F286FCF4D341248077C1BA777D0EE3B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-3) {.. {-9223372036854775808 10800 0 +03}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-4

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):116
                                                                                                                      Entropy (8bit):4.970850637731657
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDIQXMXGm2OHkVsRYovV:SlSWB9eg/yRUQXDm2OHkSN
                                                                                                                      MD5:BBAF760E27C02D176A675AC3CF2D1E6D
                                                                                                                      SHA1:E524FAA7D424A1C1545D1D8EC00169125A68E8E5
                                                                                                                      SHA-256:02E2EEAF88EE179EF63DD29ACC7384A4B46DE1E3A151C1F3A5DD31BBB5A05AEE
                                                                                                                      SHA-512:6AC7CC0E52E7793C7F2D3DDA9551709DEAE654C1182EAD7108D04F1BAAAB7E1C473B6E8A3A126B0E421D8A246294A03B2EE9E070330924502DF2869CC61C37F7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-4) {.. {-9223372036854775808 14400 0 +04}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-5

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):116
                                                                                                                      Entropy (8bit):4.955530107787899
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDI7tNMXGm2OHM0VQVFv:SlSWB9eg/yRU7PDm2OHnVQVV
                                                                                                                      MD5:17F64A5969D3755211E60C0A9F83974F
                                                                                                                      SHA1:FEFA84725EFAE6405F43797296C342B974F2D272
                                                                                                                      SHA-256:3A2C75DCA11D1167126F0D44A8682420FAF75B0B82B3DCFC35A9F028A9A759E8
                                                                                                                      SHA-512:77DBCD8284A470E4869976E2E8A5EDE28104283F120C863785A6B2E64CF87E06243196817C0055A9B32D6FFFE94A25772F67D58BF8E885F7EC06C34FABE38766
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-5) {.. {-9223372036854775808 18000 0 +05}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-6

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):116
                                                                                                                      Entropy (8bit):4.973993120288556
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDIg3fMXGm2OHETNSTVVn:SlSWB9eg/yRUgPDm2OHETMX
                                                                                                                      MD5:51CAF7956E133C8A9788AE0B8C6145AB
                                                                                                                      SHA1:47F8B49DF9ED477BD95F908693A483AE4FDE881F
                                                                                                                      SHA-256:D22C87321373EC0EFB0F312925476CD0747323EF303E17621A871BF814C8ABB1
                                                                                                                      SHA-512:EC4B4BE74C1BA64DEC8EF11DAAA338C52BD67D55E8A2352FBC6C83FA142F8DBE424CC1110E9A9D9A891E1E858D1FFA6D1E3B997D41BBB374556FA1F9A708559E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-6) {.. {-9223372036854775808 21600 0 +06}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-7

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):116
                                                                                                                      Entropy (8bit):4.928999319005163
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDIpdNMXGm2OHAXUVSYovV:SlSWB9eg/yRURDm2OHAXUVSYyV
                                                                                                                      MD5:56D88B54CA33B43E2E7D3EA6AD3A4D6E
                                                                                                                      SHA1:9351E0C001C5D83325281AF54363D76D65548B7D
                                                                                                                      SHA-256:70CB3A766A2E84148B68613D68687D263D3592ED4B6E672797FB20801ECA8231
                                                                                                                      SHA-512:32B58AD16F64590903C7AB49BA4890DAF6F1F3D33187A7654D3DA88A1C0047483EAA58B2498D824A30116E235FCC8F8FB3FADD57F86396240E5D92B2CA337027
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-7) {.. {-9223372036854775808 25200 0 +07}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-8

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):116
                                                                                                                      Entropy (8bit):4.9145396982864895
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDIlSMXGm2OHN/VsdYLyn:SlSWB9eg/yRUlSDm2OHUp
                                                                                                                      MD5:E462AD5E0C046EA6769EDB4B2C80F4D4
                                                                                                                      SHA1:6DDB94485648622875E0927BA1E8CFE67CEC1382
                                                                                                                      SHA-256:80C85D59416CEC91DB3DAC5FDD2FD7B91D6FC74A37BBBEF6FF58F6F6816E8FC9
                                                                                                                      SHA-512:42734FD2DA8BD6E0BC271FF1375A31DEB72EED85AB5EA6E1E0F81EE4E3E7E74380FFC98FAC30409684F736DB580AAAF4F62DB4757AA35C10383584F6144EF363
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-8) {.. {-9223372036854775808 28800 0 +08}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT-9

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):116
                                                                                                                      Entropy (8bit):4.956751740978211
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRDIeyXMXGm2OHENScFAy:SlSWB9eg/yRUPDm2OHsScr
                                                                                                                      MD5:98F70EC1B1AC7D38CB8D01705FB0CA56
                                                                                                                      SHA1:EDAFA132E48935ACEB8E72D3FF463E4FC857C1A9
                                                                                                                      SHA-256:57395BB968AFA5A041EADA4B684B82F0379A9333F9522D69F069A79FDEA2B8D7
                                                                                                                      SHA-512:97B8D7603D6B54C075B005B905B2A7A28B8BEA67894F055663C44D2BF730BB937AC8EF5B2DF182BDD2D9EFFDBD135DF9467C813AEE39AA6B34256908A12DC011
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/GMT-9) {.. {-9223372036854775808 32400 0 +09}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\GMT0

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):158
                                                                                                                      Entropy (8bit):4.886484135647838
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqSsM4DovXHAIgexovYovHRL/yRDVMFHp8RDMovn:SlSWB9vsM3yFXHAIgnvVHN/yRC1p8RQy
                                                                                                                      MD5:F879FB24EA976394B8F4FAF1A9BF268C
                                                                                                                      SHA1:903714237EBD395A27EAF00B3DAAA89131267EE5
                                                                                                                      SHA-256:AB742F93BE44BD68AB8FE84505FA28120F1808765D9BAED32A3490AF7C83D35B
                                                                                                                      SHA-512:F5EE4C331E37036516F2A1BF12F2E088B2E2C7F6475127BF4E7B4937F864550D64D570BC855B6058D4311755E8696EC42095A36AEF13BB29E62192EE0AFB6EAF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/GMT)]} {.. LoadTimeZoneFile Etc/GMT..}..set TZData(:Etc/GMT0) $TZData(:Etc/GMT)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\Greenwich

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):163
                                                                                                                      Entropy (8bit):4.911342539638601
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqSsM4DovXHAIgexovYovHRL/yRp+FB5yRDMovn:SlSWB9vsM3yFXHAIgnvVHN/yRp6BURQy
                                                                                                                      MD5:CDD2DE9CF0FECFEA0CDD32DAC32DCDE2
                                                                                                                      SHA1:311CD4C6E819E18BAAACC382F81359BC208E2F73
                                                                                                                      SHA-256:F89167B6117838D9679C0397496B6D96D3A7BEAEF0BD99406ABACDBDB658FBCC
                                                                                                                      SHA-512:1AF061D07D2F579A089905B6B259AABD7C58F4FA0CD379EE54206164F0DCAEA5C720FB1F5E76F5782F8613E62D8F83BD55F1848D5D7A73D4A5C9F7BC6B9F5DB1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/GMT)]} {.. LoadTimeZoneFile Etc/GMT..}..set TZData(:Etc/Greenwich) $TZData(:Etc/GMT)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\UCT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):157
                                                                                                                      Entropy (8bit):4.838936002050477
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqAxmS3vXHAIgELyHRL/yRKh8RFB:SlSWB9vsM3yzTHAIgm6N/yR68RX
                                                                                                                      MD5:0587EB7D1B1C684A4A0F90D3CB0959C8
                                                                                                                      SHA1:3F2840AE512774494D9A0B6357C52CCB7DBA5265
                                                                                                                      SHA-256:0856D14DBBC53D46460BCD530BD070E9E8966D1C96BA01BA556E215A98C09CD4
                                                                                                                      SHA-512:DE38EF28893853219AC24AE4A522307ADAA1502F6D0C129219FAD9D75CFCE03A505C3E0758CFF2D2D4F7101414A5F7E4FC1C1B119B667E6A9C89B60DDA641E86
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/UTC)]} {.. LoadTimeZoneFile Etc/UTC..}..set TZData(:Etc/UCT) $TZData(:Etc/UTC)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\UTC

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):110
                                                                                                                      Entropy (8bit):4.903699772785336
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/yRF3yFNMXGm2OHvL:SlSWB9eg/yR9SDm2OHj
                                                                                                                      MD5:3D3F94B6AC5FA232E509356C703D9177
                                                                                                                      SHA1:502B8EE9D4A1EA75A91272181AC87B9B6ECE1F84
                                                                                                                      SHA-256:4D74D9EC2397B1708FEF47806294B0BCA26679F3A63149AE24E4E0C641976970
                                                                                                                      SHA-512:205A761A01C577F602236CB5C9938C834B7F3F9F681B94036B0A86101119893EF87D206D0C3F7737075ED833D4E35E374ACAE6605163E9C37B705D99BEBC928C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Etc/UTC) {.. {-9223372036854775808 0 0 UTC}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\Universal

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):163
                                                                                                                      Entropy (8bit):4.874807282103623
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqAxmS3vXHAIgELyHRL/yRYzXDJMFfh8RFB:SlSWB9vsM3yzTHAIgm6N/yRY7VMr8RX
                                                                                                                      MD5:65E28EFF342B625E79175793FD38F9FD
                                                                                                                      SHA1:08B11474822E670DEAB8F0EA168BAED7D5E3DBE1
                                                                                                                      SHA-256:A2B62C5914DE169A68A018A5B47C1253DBCA10A251862D17B0781ECFD19B6192
                                                                                                                      SHA-512:79641D0E05F81BFB80034937D34E74B7483A790F33C1F9A0FA92C6A7913AC8C03036CFDEFB43850B84EFB3DD3C4A39022DC8F22E5B5DE6353586A546E03A5789
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/UTC)]} {.. LoadTimeZoneFile Etc/UTC..}..set TZData(:Etc/Universal) $TZData(:Etc/UTC)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Etc\Zulu

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):158
                                                                                                                      Entropy (8bit):4.874356623237119
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqAxmS3vXHAIgELyHRL/yRaQEBURFB:SlSWB9vsM3yzTHAIgm6N/yRYaRX
                                                                                                                      MD5:EDABCAC858EC9632D5D8DCCFB28F4D6E
                                                                                                                      SHA1:E5BEF1367A97A1900749CE6B1E01CF32F582BDD9
                                                                                                                      SHA-256:BBD6E93206FF3B7017AFBE63905B4C932C422B582F3CE2A79A7B885D390EE555
                                                                                                                      SHA-512:3A22364D423F2F970123561408018A2B72F43C4978836D3B6DF7517217445605838DCB8DDBDA204FD01C49A4A7D5ADAD4CA8BDA7C3B412D54750BAEAA589B683
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/UTC)]} {.. LoadTimeZoneFile Etc/UTC..}..set TZData(:Etc/Zulu) $TZData(:Etc/UTC)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Amsterdam

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.892809684252761
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV/So3vXHAIgoq82yHRL/yQaiFAXowQahCv:SlSWB9vsM3ymhS2HAIgoh26N/ywAXoww
                                                                                                                      MD5:B0B409D665190569A56697799FBA5CD3
                                                                                                                      SHA1:840AA7D61E64ACE61FDDAB96F716575A61CEDB52
                                                                                                                      SHA-256:46141E7BC0F99D2117319C661569F8B38AF7D00108CED5784FA3A3B5090EF8E9
                                                                                                                      SHA-512:D7C0588D98AC46B5191D7C7E8F5181E94306EFFCC9E3F2DBA9E0003BAE51D992334527ADDD6D0C9701CFD60169A74984B3401E7A6A1322A734BC3D90DCC933BC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Brussels)]} {.. LoadTimeZoneFile Europe/Brussels..}..set TZData(:Europe/Amsterdam) $TZData(:Europe/Brussels)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Andorra

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6927
                                                                                                                      Entropy (8bit):3.8182041031531897
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:CA34elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCsyZhltlUxOrnW+:CI41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:D897DCA686A03495EB2C3323FAB0BEAD
                                                                                                                      SHA1:1433BC303DE92F7B36F881C8595A42B35E0814FC
                                                                                                                      SHA-256:F0B48DA7CA3659450D87CC0DDFDDFD28B464543DF1EE40D935C44D5CD7C9B9B3
                                                                                                                      SHA-512:A1C4AE1E0EC26B159B0F5D058A7A77B8774F611A4D3C6AECEDD7186957D6BD9F15CDFCBA248FCC8A4B4146BD72CD7D66B9F88A2BF7CDEF416F1831A2F335D48C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Andorra) {.. {-9223372036854775808 364 0 LMT}.. {-2177453164 0 0 WET}.. {-733881600 3600 0 CET}.. {481078800 7200 0 CEST}.. {496803600 3600 0 CET}.. {512528400 7200 1 CEST}.. {528253200 3600 0 CET}.. {543978000 7200 1 CEST}.. {559702800 3600 0 CET}.. {575427600 7200 1 CEST}.. {591152400 3600 0 CET}.. {606877200 7200 1 CEST}.. {622602000 3600 0 CET}.. {638326800 7200 1 CEST}.. {654656400 3600 0 CET}.. {670381200 7200 1 CEST}.. {686106000 3600 0 CET}.. {701830800 7200 1 CEST}.. {717555600 3600 0 CET}.. {733280400 7200 1 CEST}.. {749005200 3600 0 CET}.. {764730000 7200 1 CEST}.. {780454800 3600 0 CET}.. {796179600 7200 1 CEST}.. {811904400 3600 0 CET}.. {828234000 7200 1 CEST}.. {846378000 3600 0 CET}.. {859683600 7200 1 CEST}.. {877827600 3600 0 CET}.. {891133200 7200 1 CEST}.. {909277200 3600 0 CET}.. {922582800 7200 1 CEST}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Astrakhan

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2063
                                                                                                                      Entropy (8bit):3.679377249443024
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:TvCAs6kKR6aQmF1cSNWrI+AjXgV/Ap40FjDOP:rCAs6kC6aZF1cSN4I+AjXgV/ApDFjDM
                                                                                                                      MD5:CB860328FA96A14055BF51A3B2D35A08
                                                                                                                      SHA1:CFA49DC861F4AC3D29A78D63D71C2D6D83D68F84
                                                                                                                      SHA-256:4B5FB0AF225974D117374028285F20A02B833FF4136E6BFAE7B65E6D6D28829E
                                                                                                                      SHA-512:960152826F4245012462E53F80B69B0C45C27D75D46C70D485674CA19071DF268671C7691B614BE53B9E7BD8CFEC5D24F3DCF933F2F14D827F2A32EB347D7540
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Astrakhan) {.. {-9223372036854775808 11532 0 LMT}.. {-1441249932 10800 0 +03}.. {-1247540400 14400 0 +05}.. {354916800 18000 1 +05}.. {370724400 14400 0 +04}.. {386452800 18000 1 +05}.. {402260400 14400 0 +04}.. {417988800 18000 1 +05}.. {433796400 14400 0 +04}.. {449611200 18000 1 +05}.. {465343200 14400 0 +04}.. {481068000 18000 1 +05}.. {496792800 14400 0 +04}.. {512517600 18000 1 +05}.. {528242400 14400 0 +04}.. {543967200 18000 1 +05}.. {559692000 14400 0 +04}.. {575416800 18000 1 +05}.. {591141600 14400 0 +04}.. {606866400 10800 0 +04}.. {606870000 14400 1 +04}.. {622594800 10800 0 +03}.. {638319600 14400 1 +04}.. {654649200 10800 0 +03}.. {670374000 14400 0 +04}.. {701820000 10800 0 +04}.. {701823600 14400 1 +04}.. {717548400 10800 0 +03}.. {733273200 14400 1 +04}.. {748998000 10800 0 +03}.. {764722800 14400 1 +04}.. {7

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Athens

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7954
                                                                                                                      Entropy (8bit):3.7252594544513795
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:1D/8QdzFu+f+uO7DVopaNlKkUpvBeRF+iDlKSdkwSMTHkB2vwz59F06Kgr/y/rYf:Z/8ohvyDjivBeRF+W35Syrwl9h5j
                                                                                                                      MD5:8B2C99E1CD04D7559709FDF8D382343C
                                                                                                                      SHA1:C595D5159C742B815AF89EC8604376E01291F9F1
                                                                                                                      SHA-256:47353319419505AAB205C23F8C97EA0B12E5DED2113147794F77B67349AFF52F
                                                                                                                      SHA-512:227CA21A3B6160357988582E261A62AE7B09D46D479EABFAC8039185D710EFA765CD1694F4388EBF8800978A1E1DB69F6AF9BB9BF82C0FCD66E883930E1F8249
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Athens) {.. {-9223372036854775808 5692 0 LMT}.. {-2344642492 5692 0 AMT}.. {-1686101632 7200 0 EET}.. {-1182996000 10800 1 EEST}.. {-1178161200 7200 0 EET}.. {-906861600 10800 1 EEST}.. {-904878000 7200 0 CEST}.. {-857257200 3600 0 CET}.. {-844477200 7200 1 CEST}.. {-828237600 3600 0 CET}.. {-812422800 7200 0 EET}.. {-552362400 10800 1 EEST}.. {-541652400 7200 0 EET}.. {166485600 10800 1 EEST}.. {186184800 7200 0 EET}.. {198028800 10800 1 EEST}.. {213753600 7200 0 EET}.. {228873600 10800 1 EEST}.. {244080000 7200 0 EET}.. {260323200 10800 1 EEST}.. {275446800 7200 0 EET}.. {291798000 10800 1 EEST}.. {307407600 7200 0 EET}.. {323388000 10800 1 EEST}.. {338936400 7200 0 EET}.. {347148000 7200 0 EET}.. {354675600 10800 1 EEST}.. {370400400 7200 0 EET}.. {386125200 10800 1 EEST}.. {401850000 7200 0 EET}.. {417574800 10800 1 EEST}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Belfast

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):182
                                                                                                                      Entropy (8bit):4.876296755647751
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVxKL823vXHAIgoqyKL8H6RL/yQahs3QavKL81n:SlSWB9vsM3ymvKA2PHAIgovKAH6N/y72
                                                                                                                      MD5:7160C6EE32380846653F016AE8AFD52A
                                                                                                                      SHA1:DE7805089639C54893F2107FA67342DA72A79BBC
                                                                                                                      SHA-256:557023674F6E8376707517103EE69C1DEBBE53CDD4BCAB11E763CC53B9CB1908
                                                                                                                      SHA-512:FDBDECBBDB0C419226E2604608FD2923CFB06E4B6948493208FD83FD796880E81F6147C0FAFEB572079C9C916831B7B055620EC939164CCA1DAF76897BE60F2C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/London)]} {.. LoadTimeZoneFile Europe/London..}..set TZData(:Europe/Belfast) $TZData(:Europe/London)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Belgrade

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7309
                                                                                                                      Entropy (8bit):3.8204712502914653
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:lp+/4elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCsyZhltlUxOrnW+:lY41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:02A003411B61A311896A6407B622152A
                                                                                                                      SHA1:3B8BC6D1AF698CE7BB14A08307F5A4295EB8ED03
                                                                                                                      SHA-256:74B225511B518B0CED972CBB33D694697712CCB96A6D81E0F50ADA28CF6E2C92
                                                                                                                      SHA-512:9E03B3EB1E528E5B1ADBA09F808E73BF9C4314EDCBF6F96E46844D51A5F425BED3EE8FD5BA8706C46A7FB9882485F119F81996F2EAB7E1E9B598978C402DDE0F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Belgrade) {.. {-9223372036854775808 4920 0 LMT}.. {-2713915320 3600 0 CET}.. {-905824800 3600 0 CET}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-796777200 3600 0 CET}.. {-788922000 3600 0 CET}.. {-777942000 7200 1 CEST}.. {-766623600 3600 0 CET}.. {407199600 3600 0 CET}.. {417574800 7200 1 CEST}.. {433299600 3600 0 CET}.. {449024400 7200 1 CEST}.. {465354000 3600 0 CET}.. {481078800 7200 1 CEST}.. {496803600 3600 0 CET}.. {512528400 7200 1 CEST}.. {528253200 3600 0 CET}.. {543978000 7200 1 CEST}.. {559702800 3600 0 CET}.. {575427600 7200 1 CEST}.. {591152400 3600 0 CET}.. {606877200 7200 1 CEST}.. {622602000 3600 0 CET}.. {638326800 7200 1 CEST}.. {654656400 3600 0 CET}.. {670381200 7200 1 CEST}.. {686106000 3600 0 CET}.. {701830800 7200 1 CEST}.. {717555600 360

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Berlin

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8020
                                                                                                                      Entropy (8bit):3.820756136386754
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:Pi9+qFR274elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCsyZhltlUxo:PQs41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:84027C3C8315BD479B38DE11F38E873F
                                                                                                                      SHA1:6E92A2A9734A9C6B02ECCD99F114D667C909C5BA
                                                                                                                      SHA-256:7E7111F06288069B52A4E1CA0B016216DF9328FB3B1560A740146497CCDD4D24
                                                                                                                      SHA-512:5FFDE523021FC0C490261F55999204C9CE6C8C274888525EA6EE7C01BC5CCABC7A3877FD454B4167D81F4B89BACB087E8BA6AB0BAC46C2874ED9257BE2092340
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Berlin) {.. {-9223372036854775808 3208 0 LMT}.. {-2422054408 3600 0 CET}.. {-1693706400 7200 1 CEST}.. {-1680483600 3600 0 CET}.. {-1663455600 7200 1 CEST}.. {-1650150000 3600 0 CET}.. {-1632006000 7200 1 CEST}.. {-1618700400 3600 0 CET}.. {-938905200 7200 1 CEST}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-796777200 3600 0 CET}.. {-781052400 7200 1 CEST}.. {-776559600 10800 0 CEMT}.. {-765936000 7200 1 CEST}.. {-761180400 3600 0 CET}.. {-757386000 3600 0 CET}.. {-748479600 7200 1 CEST}.. {-733273200 3600 0 CET}.. {-717631200 7200 1 CEST}.. {-714610800 10800 1 CEMT}.. {-710380800 7200 1 CEST}.. {-701910000 3600 0 CET}.. {-684975600 7200 1 CEST}.. {-670460400 3600 0 CET}.. {-654130800 7200 1 CEST}.. {-639010800 3600 0 CET}.. {315529200 3600 0 CET}.. {323830800 7200

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Bratislava

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.943205109348136
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVtXrAeovXHAIgoquXrsY6RL/yQahcvEB5yQazXrH:SlSWB9vsM3ymzbAeSHAIgozbsY6N/y7c
                                                                                                                      MD5:C69AB60BE74D4BB7E31BE4E5ECCD8FD2
                                                                                                                      SHA1:9DD0BA6171080F074858EF88ADA2E91C1F465619
                                                                                                                      SHA-256:1D7C539AAA1E3AD5EF3574A629523B5B781F1A91D352C9B39B8DE7316756026E
                                                                                                                      SHA-512:C273B97CCFB5F328EB7A13CCA3126DE8D91B3876CBD248990C0BE063DDBE5B0F31EA138E31A1C5C43B1ABCF42EA511448E6DC589EB99E8172D7C2A68BA31A8E7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Prague)]} {.. LoadTimeZoneFile Europe/Prague..}..set TZData(:Europe/Bratislava) $TZData(:Europe/Prague)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Brussels

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9223
                                                                                                                      Entropy (8bit):3.8450929464870804
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:RhcSQnG1Czyc1+FdDKDBb0S274elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcM:Rh8zyc4Ss41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:E6C1153C3F71C8C005D7A46DDF6461FB
                                                                                                                      SHA1:CBDF7D5D36AF57D83859C910B493464617EC9571
                                                                                                                      SHA-256:1402A2072ADC9EBB35F4C0368D2E9A7A11493626C667C022614FFB7CC05B6CB6
                                                                                                                      SHA-512:8B1B47678F75DBE59DB08E034F0701BD11FF4FD3AD0304C8ABF45E848F717D2787B8E47558D3C334D369E0938C633DC217178D3EAE6486CEFBE25CF1668479F6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Brussels) {.. {-9223372036854775808 1050 0 LMT}.. {-2840141850 1050 0 BMT}.. {-2450995200 0 0 WET}.. {-1740355200 3600 0 CET}.. {-1693702800 7200 0 CEST}.. {-1680483600 3600 0 CET}.. {-1663455600 7200 1 CEST}.. {-1650150000 3600 0 CET}.. {-1632006000 7200 1 CEST}.. {-1618700400 3600 0 CET}.. {-1613826000 0 0 WET}.. {-1604278800 3600 1 WEST}.. {-1585530000 0 0 WET}.. {-1574038800 3600 1 WEST}.. {-1552266000 0 0 WET}.. {-1539997200 3600 1 WEST}.. {-1520557200 0 0 WET}.. {-1507510800 3600 1 WEST}.. {-1490576400 0 0 WET}.. {-1473642000 3600 1 WEST}.. {-1459126800 0 0 WET}.. {-1444006800 3600 1 WEST}.. {-1427677200 0 0 WET}.. {-1411952400 3600 1 WEST}.. {-1396227600 0 0 WET}.. {-1379293200 3600 1 WEST}.. {-1364778000 0 0 WET}.. {-1348448400 3600 1 WEST}.. {-1333328400 0 0 WET}.. {-1316394000 3600 1 WEST}.. {-1301263200 0 0 WET}.. {

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Bucharest

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7974
                                                                                                                      Entropy (8bit):3.7264631277913853
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:vMSsQMAz5CXNU5paNlKkUpvBeRF+iDlKSdkwSMTHkB2vwz59F06Kgr/y/rYjlBK0:vMS1kdUoivBeRF+W35Syrwl9h5j
                                                                                                                      MD5:88DB5686937D3499A8142413B2CF2EB5
                                                                                                                      SHA1:E37BAD2127553600D0E38A43053D1B07B2498DA8
                                                                                                                      SHA-256:C560D45104A8DD73FC7370B5AC1615E22043DBC93DFB46A9ECC6468C2D38B19A
                                                                                                                      SHA-512:375B8A63CFF2E278CD8C78BF9DBC86288FFB1AD57DAED00CD2199F0B05F4FBFA7D17D93C6458B20B86F6D05F3E3A49D594E60AC97DDB47141E21D7CDE10F8456
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Bucharest) {.. {-9223372036854775808 6264 0 LMT}.. {-2469404664 6264 0 BMT}.. {-1213148664 7200 0 EET}.. {-1187056800 10800 1 EEST}.. {-1175479200 7200 0 EET}.. {-1159754400 10800 1 EEST}.. {-1144029600 7200 0 EET}.. {-1127700000 10800 1 EEST}.. {-1111975200 7200 0 EET}.. {-1096250400 10800 1 EEST}.. {-1080525600 7200 0 EET}.. {-1064800800 10800 1 EEST}.. {-1049076000 7200 0 EET}.. {-1033351200 10800 1 EEST}.. {-1017626400 7200 0 EET}.. {-1001901600 10800 1 EEST}.. {-986176800 7200 0 EET}.. {-970452000 10800 1 EEST}.. {-954727200 7200 0 EET}.. {296604000 10800 1 EEST}.. {307486800 7200 0 EET}.. {323816400 10800 1 EEST}.. {338940000 7200 0 EET}.. {354672000 10800 0 EEST}.. {370396800 7200 0 EET}.. {386121600 10800 1 EEST}.. {401846400 7200 0 EET}.. {417571200 10800 1 EEST}.. {433296000 7200 0 EET}.. {449020800 10800 1 EEST}.. {465

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Budapest

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8287
                                                                                                                      Entropy (8bit):3.8244305880244567
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:rHw0+D5xp4elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCsyZhltlUxo:rQXj41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:11468F958796F971ADD5FB1A0C426D78
                                                                                                                      SHA1:3FA58BEF391BCF7BAC6A124D093B6505B4EAC452
                                                                                                                      SHA-256:B58F3E9066B8B57EB037D509636AA67A06ACC8348BE6C48482D87CDC49844A4E
                                                                                                                      SHA-512:0492EABD6EE16392C00A196AF38995E5F9E55E30A82A50EFFB381DC978E9E63E801555CDC219869E6251BD51115972F742D8A7D9524372B8B11702AE4B28BFB7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Budapest) {.. {-9223372036854775808 4580 0 LMT}.. {-2498260580 3600 0 CET}.. {-1693706400 7200 1 CEST}.. {-1680483600 3600 0 CET}.. {-1663455600 7200 1 CEST}.. {-1650150000 3600 0 CET}.. {-1640998800 3600 0 CET}.. {-1632006000 7200 1 CEST}.. {-1618700400 3600 0 CET}.. {-1600470000 7200 1 CEST}.. {-1587250800 3600 0 CET}.. {-1569711600 7200 1 CEST}.. {-1555196400 3600 0 CET}.. {-906775200 3600 0 CET}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-796777200 3600 0 CET}.. {-788922000 3600 0 CET}.. {-778471200 7200 1 CEST}.. {-762656400 3600 0 CET}.. {-749689200 7200 1 CEST}.. {-733276800 3600 0 CET}.. {-717634800 7200 1 CEST}.. {-701910000 3600 0 CET}.. {-686185200 7200 1 CEST}.. {-670460400 3600 0 CET}.. {-654130800 7200 1 CEST}.. {-639010800 3600 0 CET}.. {-492656400 7

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Busingen

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):183
                                                                                                                      Entropy (8bit):4.952483060656419
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVnCMPfXHAIgoqkCM4ARL/yQahDZALMFB5h8Qa5CMS:SlSWB9vsM3ym5XPHAIgo5gAN/y7D17/f
                                                                                                                      MD5:CED145F8D9B231234E021D2214C1064B
                                                                                                                      SHA1:7B111DC24CA01C78A382CECD3247CF495D71CD34
                                                                                                                      SHA-256:F511A80AB70FF93A0EB9F29293F73DF952B773BB33EB85D581E4FB1FE06E4F05
                                                                                                                      SHA-512:E2323C04BF99909ABA9A09A66F9B4696519B5F9FE3AF178FB04D5E0053F41CAA8B937DC4148954ED093D317F454E0547786BEC934F2ABF22A60AAA6A24E63BF9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Zurich)]} {.. LoadTimeZoneFile Europe/Zurich..}..set TZData(:Europe/Busingen) $TZData(:Europe/Zurich)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Chisinau

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8096
                                                                                                                      Entropy (8bit):3.7635458172251406
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:jXSsijEpkv2XkN8qc/OyEie8hF5WQ9VX/Zs1cw27oXqdCA5XqjqFLigTE9s5VpJ:jXS+WeUqKie8hF5f9PwdXM9
                                                                                                                      MD5:E7F52393523729CA3916768B3F3B4E55
                                                                                                                      SHA1:1524A3E610DCD33AC0006946BAB2929CA7F5A33F
                                                                                                                      SHA-256:2BD1C0AB412A5E9C97F533C4D06B773D045215B92568A4E89ADC93C7462D62EC
                                                                                                                      SHA-512:218674ECD9FD6C1A1C83EE69AFE6AA5AD0D5A8BB59FF497FDF2573B7CF52DAE98ECE0815CF99668CA4E172FF67D220B227369865076333B3EE802A8839C65279
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Chisinau) {.. {-9223372036854775808 6920 0 LMT}.. {-2840147720 6900 0 CMT}.. {-1637114100 6264 0 BMT}.. {-1213148664 7200 0 EET}.. {-1187056800 10800 1 EEST}.. {-1175479200 7200 0 EET}.. {-1159754400 10800 1 EEST}.. {-1144029600 7200 0 EET}.. {-1127700000 10800 1 EEST}.. {-1111975200 7200 0 EET}.. {-1096250400 10800 1 EEST}.. {-1080525600 7200 0 EET}.. {-1064800800 10800 1 EEST}.. {-1049076000 7200 0 EET}.. {-1033351200 10800 1 EEST}.. {-1017626400 7200 0 EET}.. {-1001901600 10800 1 EEST}.. {-986176800 7200 0 EET}.. {-970452000 10800 1 EEST}.. {-954727200 7200 0 EET}.. {-927165600 10800 1 EEST}.. {-898138800 7200 0 CET}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-800154000 10800 0 MSD}.. {354920400 14400 1 MSD}.. {370728000 10800 0 MSK}.. {386456400 14400 1 MSD}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Copenhagen

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.925156646979837
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV/y+YF3vXHAIgoq8yFRRL/yQagKVihh8Qahyuv:SlSWB9vsM3ymhVoPHAIgoh6N/yy87Fv
                                                                                                                      MD5:3AEDE4B340D0250D496C49CADBA04E62
                                                                                                                      SHA1:C466D8275C465752F5B024615268F6D1CBBA4B41
                                                                                                                      SHA-256:2B9A0F1775355E311FB63903E3829F98B5F6C73C08F1BECE1A2D471ACC2673E3
                                                                                                                      SHA-512:2B08B57D58699C65A9AAA43AC87F29DD1EDCBA9F91E79DF4B1E07832032F5B03A43847E20345484730E8D2323199E7439D8C1FC662E812E8BA6EE19C53C89681
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Berlin)]} {.. LoadTimeZoneFile Europe/Berlin..}..set TZData(:Europe/Copenhagen) $TZData(:Europe/Berlin)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Dublin

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9810
                                                                                                                      Entropy (8bit):3.7678769652077873
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:sExxHZiMU8EKTy74jT56XdEN1+UZBdMN186LPR:sEzZiMUZ6y0jT5bZHMN186LPR
                                                                                                                      MD5:E1EB426EA3351AF0D7D563006F9146BC
                                                                                                                      SHA1:1E94F3B38366FE43BB031A57D19894B569EBABED
                                                                                                                      SHA-256:895957521D6CA4DE7E4089DC587A6C177B803D8ADF63303B1F85DEB279726324
                                                                                                                      SHA-512:8F24E9519F5D42F34AEE5C52A94CAC7D035EAE7B31DC3E629C29CFE3BD85F1510188290D35CD327492A030168443FED8BD80EC57ED27811B786C4DC89B4B1181
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Dublin) {.. {-9223372036854775808 -1521 0 LMT}.. {-2821649679 -1521 0 DMT}.. {-1691962479 2079 1 IST}.. {-1680471279 0 0 GMT}.. {-1664143200 3600 1 BST}.. {-1650146400 0 0 GMT}.. {-1633903200 3600 1 BST}.. {-1617487200 0 0 GMT}.. {-1601848800 3600 1 BST}.. {-1586037600 0 0 GMT}.. {-1570399200 3600 1 BST}.. {-1552168800 0 0 GMT}.. {-1538344800 3600 1 BST}.. {-1522533600 0 0 GMT}.. {-1517011200 0 0 IST}.. {-1507500000 3600 1 IST}.. {-1490565600 0 0 IST}.. {-1473631200 3600 1 IST}.. {-1460930400 0 0 IST}.. {-1442786400 3600 1 IST}.. {-1428876000 0 0 IST}.. {-1410732000 3600 1 IST}.. {-1396216800 0 0 IST}.. {-1379282400 3600 1 IST}.. {-1364767200 0 0 IST}.. {-1348437600 3600 1 IST}.. {-1333317600 0 0 IST}.. {-1315778400 3600 1 IST}.. {-1301263200 0 0 IST}.. {-1284328800 3600 1 IST}.. {-1269813600 0 0 IST}.. {-1253484000 3600 1 IST

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Gibraltar

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9509
                                                                                                                      Entropy (8bit):3.8837074152297704
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:QTOKVA1oCobz0W4x2+ZE74elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNA:QyoCvTZ641sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:D04F8EDDA1C3611692FB91E317CCADFE
                                                                                                                      SHA1:1C483FC95459EC6F1D5FE4DD275879A9EBCA1718
                                                                                                                      SHA-256:0524A31131405347C1D5D86C5EE38A2064AB055C030AB3B43F25DB3B28FFD8D2
                                                                                                                      SHA-512:4E2E18EBDE2765F2251B1FE41EF8E6AC79875617348974A28619F5E59EC0467239C682CCE8DEBD7A698BE2F00252C77D1F7FA50B6CAFF920B3BE53A0B836F815
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Gibraltar) {.. {-9223372036854775808 -1284 0 LMT}.. {-2821649916 0 0 GMT}.. {-1691964000 3600 1 BST}.. {-1680472800 0 0 GMT}.. {-1664143200 3600 1 BST}.. {-1650146400 0 0 GMT}.. {-1633903200 3600 1 BST}.. {-1617487200 0 0 GMT}.. {-1601848800 3600 1 BST}.. {-1586037600 0 0 GMT}.. {-1570399200 3600 1 BST}.. {-1552168800 0 0 GMT}.. {-1538344800 3600 1 BST}.. {-1522533600 0 0 GMT}.. {-1507500000 3600 1 BST}.. {-1490565600 0 0 GMT}.. {-1473631200 3600 1 BST}.. {-1460930400 0 0 GMT}.. {-1442786400 3600 1 BST}.. {-1428876000 0 0 GMT}.. {-1410732000 3600 1 BST}.. {-1396216800 0 0 GMT}.. {-1379282400 3600 1 BST}.. {-1364767200 0 0 GMT}.. {-1348437600 3600 1 BST}.. {-1333317600 0 0 GMT}.. {-1315778400 3600 1 BST}.. {-1301263200 0 0 GMT}.. {-1284328800 3600 1 BST}.. {-1269813600 0 0 GMT}.. {-1253484000 3600 1 BST}.. {-1238364000 0 0 GMT}

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Guernsey

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):183
                                                                                                                      Entropy (8bit):4.879252060643389
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVxKL823vXHAIgoqyKL8H6RL/yQakQAL/yQavKL81n:SlSWB9vsM3ymvKA2PHAIgovKAH6N/yYU
                                                                                                                      MD5:07AF23DA01CB963EA9E57534E34E7704
                                                                                                                      SHA1:1C4A214FF3B722E80C0ECACA0FFD5DFF302F6AE9
                                                                                                                      SHA-256:F7046808A8E80B7AE449D1A49AE3E480096736B7D3F554A240C7DFB10F82076A
                                                                                                                      SHA-512:713860D340C0EBA5EEF873ECB9B28CCDE9BFAD31B6A8626EF507E96585F5CC1091BF8D8A2DB7E5CB532E44F4561FBAE1797141724EF934755B69919FEA09A78A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/London)]} {.. LoadTimeZoneFile Europe/London..}..set TZData(:Europe/Guernsey) $TZData(:Europe/London)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Helsinki

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7368
                                                                                                                      Entropy (8bit):3.7258352536809705
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:OsR0uO7DVopaNlKkUpvBeRF+iDlKSdkwSMTHkB2vwz59F06Kgr/y/rYjlBKb0hzj:OkyDjivBeRF+W35Syrwl9h5j
                                                                                                                      MD5:7FF902B06FA79F14553670A70E77FF8C
                                                                                                                      SHA1:0105051541F38956EA6192BD0C7ED4047668005E
                                                                                                                      SHA-256:5B5C0A9261A414EA8DC34F594EE05BEE16F695488B230857D2B569A6B603BC39
                                                                                                                      SHA-512:551940199783A0FF9D73695B77B10300644F50E91D6B02FE79BB0CD4B78C7BA88CCE56F4B9408EC146361BF408F52D01A1F435183360C801EA5E219FB718247F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Helsinki) {.. {-9223372036854775808 5989 0 LMT}.. {-2890258789 5989 0 HMT}.. {-1535938789 7200 0 EET}.. {-875671200 10800 1 EEST}.. {-859773600 7200 0 EET}.. {354672000 10800 1 EEST}.. {370396800 7200 0 EET}.. {386121600 10800 1 EEST}.. {401846400 7200 0 EET}.. {410220000 7200 0 EET}.. {417574800 10800 1 EEST}.. {433299600 7200 0 EET}.. {449024400 10800 1 EEST}.. {465354000 7200 0 EET}.. {481078800 10800 1 EEST}.. {496803600 7200 0 EET}.. {512528400 10800 1 EEST}.. {528253200 7200 0 EET}.. {543978000 10800 1 EEST}.. {559702800 7200 0 EET}.. {575427600 10800 1 EEST}.. {591152400 7200 0 EET}.. {606877200 10800 1 EEST}.. {622602000 7200 0 EET}.. {638326800 10800 1 EEST}.. {654656400 7200 0 EET}.. {670381200 10800 1 EEST}.. {686106000 7200 0 EET}.. {701830800 10800 1 EEST}.. {717555600 7200 0 EET}.. {733280400 10800 1 EEST}.. {749

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Isle_of_Man

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):186
                                                                                                                      Entropy (8bit):4.914274131294981
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVxKL823vXHAIgoqyKL8H6RL/yQaqpfioxp8QavKLS:SlSWB9vsM3ymvKA2PHAIgovKAH6N/ycS
                                                                                                                      MD5:F9A0F19FAF3131D8A70C50FF21B365B7
                                                                                                                      SHA1:7FC2B5302FAD06BC4C633CD22A80A7D40073FFF8
                                                                                                                      SHA-256:2F1151B0528A5325443379D4E7CCE32C00213722AD9DF764E1DC90198084B076
                                                                                                                      SHA-512:6D04DF4480FE132A6641C4BF7E01936E2E4A71A3A6C2AB9F7DA7A9D8A4B836BC66EE2BB597B8C318D07A06F72C05B07E6785B53308ED9BC1103AE6DBDD0FF24E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/London)]} {.. LoadTimeZoneFile Europe/London..}..set TZData(:Europe/Isle_of_Man) $TZData(:Europe/London)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Istanbul

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3683
                                                                                                                      Entropy (8bit):3.814835316757376
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:Qi0p05zvSPBUUl0ZFzo4ay0CREDcxn6nH78BV0QbCgkCPviiM0H7hdli80+j7x9L:Qiq66OFEIFMssCfMsXV3heM2MRlA0
                                                                                                                      MD5:A8256656B971F58CB991BC270BF93B26
                                                                                                                      SHA1:189796E1B8E29A7A7B8B0E143DD9B44BAF217AB2
                                                                                                                      SHA-256:08061A80FC0F1EF375EEFE784EACDF0812E289FD67E8613BDEC36209985CA1D7
                                                                                                                      SHA-512:1F11308B5BAC1F3DB75CAC7322BBEA6E51C6B4A2A3450F1DB84DE6AA127F0F1BAA7DAB409FAF1288C100BDA77DA6FA1C6E3C0BA962F9406D1445D7C9E2AA3A60
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Istanbul) {.. {-9223372036854775808 6952 0 LMT}.. {-2840147752 7016 0 IMT}.. {-1869875816 7200 0 EET}.. {-1693706400 10800 1 EEST}.. {-1680490800 7200 0 EET}.. {-1570413600 10800 1 EEST}.. {-1552186800 7200 0 EET}.. {-1538359200 10800 1 EEST}.. {-1522551600 7200 0 EET}.. {-1507514400 10800 1 EEST}.. {-1490583600 7200 0 EET}.. {-1440208800 10800 1 EEST}.. {-1428030000 7200 0 EET}.. {-1409709600 10800 1 EEST}.. {-1396494000 7200 0 EET}.. {-931053600 10800 1 EEST}.. {-922676400 7200 0 EET}.. {-917834400 10800 1 EEST}.. {-892436400 7200 0 EET}.. {-875844000 10800 1 EEST}.. {-764737200 7200 0 EET}.. {-744343200 10800 1 EEST}.. {-733806000 7200 0 EET}.. {-716436000 10800 1 EEST}.. {-701924400 7200 0 EET}.. {-684986400 10800 1 EEST}.. {-670474800 7200 0 EET}.. {-654141600 10800 1 EEST}.. {-639025200 7200 0 EET}.. {-622087200 10800 1 EEST}.

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Jersey

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):181
                                                                                                                      Entropy (8bit):4.8801202136140915
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVxKL823vXHAIgoqyKL8H6RL/yQap6cEBx/yQavKLS:SlSWB9vsM3ymvKA2PHAIgovKAH6N/yzx
                                                                                                                      MD5:FE10770868A75F4F8D76C5E23D99AA81
                                                                                                                      SHA1:30AC768BA47AF7A53831F5142B58ECEC41933621
                                                                                                                      SHA-256:97EB33915ED7C9C34144F8F42357FAB2262B3CD45287F3CFFD26C33D65F7651E
                                                                                                                      SHA-512:1D82DF45AB0CCDFBFAD0431C668794996E01776800F34DD4131C5287D37291657A749D497AA5B0AB81CAFF3190896633FBFF456BFFEB7E93A3420AA841E54842
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/London)]} {.. LoadTimeZoneFile Europe/London..}..set TZData(:Europe/Jersey) $TZData(:Europe/London)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Kaliningrad

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2512
                                                                                                                      Entropy (8bit):3.941165221943348
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:coNlj+X2uxhuHJkw0QqXknzaVV04v3TfdGY3kNmneVuNlh000sGpdh:coN9+1EpkwCXkSV3A8qc0
                                                                                                                      MD5:104CCB93300F40BAF8F4D7CC882EFC05
                                                                                                                      SHA1:EA83F3C3791BD6F083844939DC405B248E738FE3
                                                                                                                      SHA-256:2387D26DF5429DF9867F42F7D4F872DC146643B4B3CC57DA7298C18561DE8BFE
                                                                                                                      SHA-512:12724C5BBEE0835626A98B66BF55C3DF1311F07018C70D76FC5C50E7E7BA5C4A9F064D9EDC376CC3B06C4FFFECA3FAF5B66948615A03DFECA7C361E326D950EA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Kaliningrad) {.. {-9223372036854775808 4920 0 LMT}.. {-2422056120 3600 0 CET}.. {-1693706400 7200 1 CEST}.. {-1680483600 3600 0 CET}.. {-1663455600 7200 1 CEST}.. {-1650150000 3600 0 CET}.. {-1632006000 7200 1 CEST}.. {-1618700400 3600 0 CET}.. {-938905200 7200 1 CEST}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-796777200 3600 0 CET}.. {-781052400 7200 1 CEST}.. {-780368400 7200 0 EET}.. {-778730400 10800 1 EEST}.. {-762663600 7200 0 EET}.. {-749095200 10800 0 MSD}.. {354920400 14400 1 MSD}.. {370728000 10800 0 MSK}.. {386456400 14400 1 MSD}.. {402264000 10800 0 MSK}.. {417992400 14400 1 MSD}.. {433800000 10800 0 MSK}.. {449614800 14400 1 MSD}.. {465346800 10800 0 MSK}.. {481071600 14400 1 MSD}.. {496796400 10800 0 MSK}.. {512521200 14400 1 MSD}.. {528246000 10800

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Kiev

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):173
                                                                                                                      Entropy (8bit):4.970386708540243
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV2cvXHAIgoq1csFARL/yQaoM2EBUQaocqn:SlSWB9vsM3ym5HAIgoiAN/yOEBUC
                                                                                                                      MD5:74ACF46A3248341CFD84B1592F884A8F
                                                                                                                      SHA1:888FBB54381A1B5BC19E65AF38A1913635A8E7E4
                                                                                                                      SHA-256:05C55F87182F0D5D3E8E6C1F9164EDDBDB8035146A0955C04283BC1347D45B30
                                                                                                                      SHA-512:21A752390E023CBD582BC43865D43458B44B036299A2373948269196071742ED7EB6067DD9A288F3A15E808B452FE4192750FAE813F70738FAB0C866219D57CB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Kyiv)]} {.. LoadTimeZoneFile Europe/Kyiv..}..set TZData(:Europe/Kiev) $TZData(:Europe/Kyiv)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Kirov

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2029
                                                                                                                      Entropy (8bit):3.668326642402654
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:FFvCAs6kKR6aQmF1cSNWrI+AjXgV/Ap40FjDM:FhCAs6kC6aZF1cSN4I+AjXgV/ApDFjDM
                                                                                                                      MD5:57BB199152815B12FE4491C92FE25186
                                                                                                                      SHA1:7BC5ECDE9EFADE812AF40CB92CCE5323FB57C78D
                                                                                                                      SHA-256:60884D4B8B17A9AB8FB5697DA95F62E570755348109C661D783D56CD047BBE9E
                                                                                                                      SHA-512:2043FDBA860E8F6578F7E26A80C7787B82C7D15188327923EC36D153FDF9BEEAE063012ACE4309B76DB9DBA2DFFB7404DE370BA85023CCE93159FCAD3B9B92B5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Kirov) {.. {-9223372036854775808 11928 0 LMT}.. {-1593820800 10800 0 +03}.. {-1247540400 14400 0 +05}.. {354916800 18000 1 +05}.. {370724400 14400 0 +04}.. {386452800 18000 1 +05}.. {402260400 14400 0 +04}.. {417988800 18000 1 +05}.. {433796400 14400 0 +04}.. {449611200 18000 1 +05}.. {465343200 14400 0 +04}.. {481068000 18000 1 +05}.. {496792800 14400 0 +04}.. {512517600 18000 1 +05}.. {528242400 14400 0 +04}.. {543967200 18000 1 +05}.. {559692000 14400 0 +04}.. {575416800 18000 1 +05}.. {591141600 14400 0 +04}.. {606866400 10800 0 +04}.. {606870000 14400 1 +04}.. {622594800 10800 0 +03}.. {638319600 14400 1 +04}.. {654649200 10800 0 +03}.. {670374000 14400 0 +04}.. {701820000 10800 0 +04}.. {701823600 14400 1 +04}.. {717548400 10800 0 +03}.. {733273200 14400 1 +04}.. {748998000 10800 0 +03}.. {764722800 14400 1 +04}.. {78044

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Kyiv

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7455
                                                                                                                      Entropy (8bit):3.7624983280224953
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:vC1LyEpkv8V3MpaNlKkUpvBeRF+iDlKSdkwSMTHkB2vwz59F06Kgr/y/rYjlBKb4:vC9VW0bivBeRF+W35Syrwl9h5j
                                                                                                                      MD5:F37C7529B53C4C158341AF90F80C3A11
                                                                                                                      SHA1:210650A882350D35C72A934749F276C58C572DFA
                                                                                                                      SHA-256:591264F69DB19DDCDC90E704525E2D3D3984117B710F482F19DA8F88628EE6A7
                                                                                                                      SHA-512:F23B0C5251EB7418A1C80344AB7623D2A0197E681E3B7D152E416187BF66DE09A7A60A65F8ED6A810272CF0C253D63684F08AF594A8C22ABEA89E3BBADC8F0A0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Kyiv) {.. {-9223372036854775808 7324 0 LMT}.. {-2840148124 7324 0 KMT}.. {-1441159324 7200 0 EET}.. {-1247536800 10800 0 MSK}.. {-892522800 3600 0 CET}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-825382800 10800 0 MSD}.. {354920400 14400 1 MSD}.. {370728000 10800 0 MSK}.. {386456400 14400 1 MSD}.. {402264000 10800 0 MSK}.. {417992400 14400 1 MSD}.. {433800000 10800 0 MSK}.. {449614800 14400 1 MSD}.. {465346800 10800 0 MSK}.. {481071600 14400 1 MSD}.. {496796400 10800 0 MSK}.. {512521200 14400 1 MSD}.. {528246000 10800 0 MSK}.. {543970800 14400 1 MSD}.. {559695600 10800 0 MSK}.. {575420400 14400 1 MSD}.. {591145200 10800 0 MSK}.. {606870000 14400 1 MSD}.. {622594800 10800 0 MSK}.. {638319600 14400 1 MSD}.. {646786800 10800 1 EEST}.. {686102400 7200 0 EET}.. {701827200 10800 1 EEST}.. {7175

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Lisbon

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9878
                                                                                                                      Entropy (8bit):3.8275310275285723
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:j76abXsyZLEjx82YbtIaFF1w0us4qE3+sSGjT:j77bXsyZLEjx82atysLE3+sSGjT
                                                                                                                      MD5:0DA331C2A815739E6758797BD24554EA
                                                                                                                      SHA1:3829C441E908BEFDC4ED6AB65FD4ACD0C97D5E1B
                                                                                                                      SHA-256:9FAC9812411F88014779D34722F3E0D2750E45BF21595DF1AE14CB9CCFD3F33F
                                                                                                                      SHA-512:FEBBA05F64AC1F3066AF6351493DD89768154FD171D447503DAEDB90D16858BEDBCE4A74E24AC0C37B5FF191692AF44AADDE4A92E752F88C48DA646352AD9A0B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Lisbon) {.. {-9223372036854775808 -2205 0 LMT}.. {-2713908195 -2205 0 LMT}.. {-1830384000 0 0 WET}.. {-1689555600 3600 1 WEST}.. {-1677801600 0 0 WET}.. {-1667437200 3600 1 WEST}.. {-1647738000 0 0 WET}.. {-1635814800 3600 1 WEST}.. {-1616202000 0 0 WET}.. {-1604365200 3600 1 WEST}.. {-1584666000 0 0 WET}.. {-1572742800 3600 1 WEST}.. {-1553043600 0 0 WET}.. {-1541206800 3600 1 WEST}.. {-1521507600 0 0 WET}.. {-1442451600 3600 1 WEST}.. {-1426813200 0 0 WET}.. {-1379293200 3600 1 WEST}.. {-1364778000 0 0 WET}.. {-1348448400 3600 1 WEST}.. {-1333328400 0 0 WET}.. {-1316394000 3600 1 WEST}.. {-1301274000 0 0 WET}.. {-1284339600 3600 1 WEST}.. {-1269824400 0 0 WET}.. {-1221440400 3600 1 WEST}.. {-1206925200 0 0 WET}.. {-1191200400 3600 1 WEST}.. {-1175475600 0 0 WET}.. {-1127696400 3600 1 WEST}.. {-1111971600 0 0 WET}.. {-1096851

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Ljubljana

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.948438246006353
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV/sUE2tovXHAIgoq8sUE2oAovRL/yQavPSJ5Qahs0:SlSWB9vsM3ymhrE2tSHAIgohrE2LovNl
                                                                                                                      MD5:56C6C95484FEAF9BAF755683E7417B58
                                                                                                                      SHA1:A43176BEBC5B4D7144A7E1109E0AAEFD95C21EC6
                                                                                                                      SHA-256:713A842197516D618F2D86977262542A1CA334D7DF6026539FA2F2980DBF4CD3
                                                                                                                      SHA-512:566B6DF2D76A8A4D3405C4785C7A471A23D65CD8838831BD0DEDF5BF194E8A3B304CA9920CB4A8EC9D6CD60EAA9BE0335E38D9547A4D23C7E4E5E5A39A09DDAC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Belgrade)]} {.. LoadTimeZoneFile Europe/Belgrade..}..set TZData(:Europe/Ljubljana) $TZData(:Europe/Belgrade)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\London

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):10211
                                                                                                                      Entropy (8bit):3.826887992237191
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:GNoCvTZtcf80KYiK3BG0Myj9TYQOeMAwbccM0Fp:GNNTZtcf15iOBG08eNwbccM0Fp
                                                                                                                      MD5:0625C99E16D3C956DED1C0C0F867DEC3
                                                                                                                      SHA1:6ACDF0DB619B63E21EC89046B9320A85FBD3397A
                                                                                                                      SHA-256:D04C4E25DF4DE1C1CFE1EF84B3B6DD746CF08A271AB0958F22C7D580A3ED10E6
                                                                                                                      SHA-512:07AC42F0635DF01CC0AFD13F9668B143D4943BA0E4C377D254B5AF034D9DDBAB77BA813187E9AB73D2EEAD86EBAA26DC15599FD74FC82EEF287F5A6AB9C01635
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/London) {.. {-9223372036854775808 -75 0 LMT}.. {-3852662325 0 0 GMT}.. {-1691964000 3600 1 BST}.. {-1680472800 0 0 GMT}.. {-1664143200 3600 1 BST}.. {-1650146400 0 0 GMT}.. {-1633903200 3600 1 BST}.. {-1617487200 0 0 GMT}.. {-1601848800 3600 1 BST}.. {-1586037600 0 0 GMT}.. {-1570399200 3600 1 BST}.. {-1552168800 0 0 GMT}.. {-1538344800 3600 1 BST}.. {-1522533600 0 0 GMT}.. {-1507500000 3600 1 BST}.. {-1490565600 0 0 GMT}.. {-1473631200 3600 1 BST}.. {-1460930400 0 0 GMT}.. {-1442786400 3600 1 BST}.. {-1428876000 0 0 GMT}.. {-1410732000 3600 1 BST}.. {-1396216800 0 0 GMT}.. {-1379282400 3600 1 BST}.. {-1364767200 0 0 GMT}.. {-1348437600 3600 1 BST}.. {-1333317600 0 0 GMT}.. {-1315778400 3600 1 BST}.. {-1301263200 0 0 GMT}.. {-1284328800 3600 1 BST}.. {-1269813600 0 0 GMT}.. {-1253484000 3600 1 BST}.. {-1238364000 0 0 GMT}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Luxembourg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):191
                                                                                                                      Entropy (8bit):4.920751023999728
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV/So3vXHAIgoq82yHRL/yQavQLHKQX9J8QahCv:SlSWB9vsM3ymhS2HAIgoh26N/y1QzKQt
                                                                                                                      MD5:E4A8C25756D6C5D2073A51D2B54E3A0C
                                                                                                                      SHA1:4A24667ADC9BD31E8CB298BE3787C12301C3F1C8
                                                                                                                      SHA-256:8C0486A5B235E8B01069420976E1B8D08D77A4BEF587203AF1B68D7B5333546E
                                                                                                                      SHA-512:F3593C3B75C9DA931FB39BC2054EB9691C3A544A74F871425169C3244040D6D060510741FE1E352A1E59F53E5A585307D434A0D7C9D159D065717E78C807787C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Brussels)]} {.. LoadTimeZoneFile Europe/Brussels..}..set TZData(:Europe/Luxembourg) $TZData(:Europe/Brussels)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Madrid

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8517
                                                                                                                      Entropy (8bit):3.8326167134909177
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:k5m01LdXKc0TJp+bwS274elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOn:+DaNVLSs41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:63263380F57B756A1DFA3796E4188CD3
                                                                                                                      SHA1:8EEE707AC4FEA1C098C81AC2D289A46239121A5E
                                                                                                                      SHA-256:5337C9843C56DEEC6B91C4468C76EC1C896E80421B72B583B69DE5579063E09A
                                                                                                                      SHA-512:ACA4830020715C471741E27EB2292ACF002D2CD7EDCD1061978B64967EB447F61AA095F960D8A75A01B9B87558D83FF409F30BDACA83E063024F1E2381FA64C4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Madrid) {.. {-9223372036854775808 -884 0 LMT}.. {-2177452800 0 0 WET}.. {-1631926800 3600 1 WEST}.. {-1616889600 0 0 WET}.. {-1601168400 3600 1 WEST}.. {-1585353600 0 0 WET}.. {-1442451600 3600 1 WEST}.. {-1427673600 0 0 WET}.. {-1379293200 3600 1 WEST}.. {-1364774400 0 0 WET}.. {-1348448400 3600 1 WEST}.. {-1333324800 0 0 WET}.. {-1316390400 3600 1 WEST}.. {-1301270400 0 0 WET}.. {-1284339600 3600 1 WEST}.. {-1269820800 0 0 WET}.. {-1026954000 3600 1 WEST}.. {-1017619200 0 0 WET}.. {-1001898000 3600 1 WEST}.. {-999482400 7200 1 WEMT}.. {-986090400 3600 1 WEST}.. {-954115200 0 0 WET}.. {-940208400 3600 0 CET}.. {-873079200 7200 1 CEST}.. {-862621200 3600 0 CET}.. {-842839200 7200 1 CEST}.. {-828320400 3600 0 CET}.. {-811389600 7200 1 CEST}.. {-796870800 3600 0 CET}.. {-779940000 7200 1 CEST}.. {-765421200 3600 0 CET}.. {-74849

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Malta

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8724
                                                                                                                      Entropy (8bit):3.816380386871747
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:KAGvi2GmkwwnpH74elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCsyZN:KLsww141sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:9B09D6EED8F23BAFFB62929C0115E852
                                                                                                                      SHA1:4AEF15333C73C2836C09D818FD0E20440D7C4780
                                                                                                                      SHA-256:C5C240BAAECE8235D1FBDD251C1A67CB2D2FC8195DD5BBE37FF9CFF0445FCDA2
                                                                                                                      SHA-512:43AA3492BD335A290C6EFEE275B47EA18E544199E37A9BBAE2E350D42BDFF42F0E9ED461A4BB1824CA33F84A90D4060906844A3E22DA49C9821E4CB460832D6E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Malta) {.. {-9223372036854775808 3484 0 LMT}.. {-2403478684 3600 0 CET}.. {-1690765200 7200 1 CEST}.. {-1680487200 3600 0 CET}.. {-1664758800 7200 1 CEST}.. {-1648951200 3600 0 CET}.. {-1635123600 7200 1 CEST}.. {-1616896800 3600 0 CET}.. {-1604278800 7200 1 CEST}.. {-1585533600 3600 0 CET}.. {-1571014800 7200 1 CEST}.. {-1555293600 3600 0 CET}.. {-932432400 7200 1 CEST}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812588400 7200 1 CEST}.. {-798073200 3600 0 CET}.. {-781052400 7200 1 CEST}.. {-766717200 3600 0 CET}.. {-750898800 7200 1 CEST}.. {-733359600 3600 0 CET}.. {-719456400 7200 1 CEST}.. {-701917200 3600 0 CET}.. {-689209200 7200 1 CEST}.. {-670460400 3600 0 CET}.. {-114051600 7200 1 CEST}.. {-103168800 3600 0 CET}.. {-81997200 7200 1 CEST}.. {-71715600 3600 0 CET}.. {-50547600 7200 1

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Mariehamn

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.959733196757503
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV1AYKjG5XHAIgoq2AYKjo0ARL/yQausWILMFJ8QaC:SlSWB9vsM3ymrAdjGJHAIgorAdjo0ANn
                                                                                                                      MD5:C1844961691214F6E6DF6487788A7758
                                                                                                                      SHA1:6D08E9FB7B8602A80622148BFACD9676F45F0E2B
                                                                                                                      SHA-256:6136C3CFA4A767E7C9DDA23A283AD98B72E9868F192E6A8E3BFE6396F6989BD1
                                                                                                                      SHA-512:B2D1EA51AC5B34792AC02820A9D60FD41F3B91AB6505896476FCB0DC339B8DC1DE9E2C89A7627F69E16247661AE8040D789FFD2F8F1CD59F243B57C4845B450F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Helsinki)]} {.. LoadTimeZoneFile Europe/Helsinki..}..set TZData(:Europe/Mariehamn) $TZData(:Europe/Helsinki)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Minsk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2177
                                                                                                                      Entropy (8bit):3.9354590900153172
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:K8cVnR7xhuHJkminzaVV04v3TfdGY3kNmneVuNlh000sGpde:5mnRtEpkmiSV3A8qcN
                                                                                                                      MD5:9C10EAE9FA0DE192C5FD4F76E12606F0
                                                                                                                      SHA1:AFD5650410EC3E6ED564A8B2ABF91709D090B4AD
                                                                                                                      SHA-256:8C95EA696EA578DEF726502AC181AF475A676030878F56B4E2D667757BBD1C49
                                                                                                                      SHA-512:3B9ED6B68858485B9A46A0863B7D9D3C1E4C5BBA269457F24A9A12C274F0F9B35E63D8C25EB53E7200DB57DD35ACCB7FD7D8AB005FEE2C4D7FC6E72E8CF57194
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Minsk) {.. {-9223372036854775808 6616 0 LMT}.. {-2840147416 6600 0 MMT}.. {-1441158600 7200 0 EET}.. {-1247536800 10800 0 MSK}.. {-899780400 3600 0 CET}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-804646800 10800 0 MSD}.. {354920400 14400 1 MSD}.. {370728000 10800 0 MSK}.. {386456400 14400 1 MSD}.. {402264000 10800 0 MSK}.. {417992400 14400 1 MSD}.. {433800000 10800 0 MSK}.. {449614800 14400 1 MSD}.. {465346800 10800 0 MSK}.. {481071600 14400 1 MSD}.. {496796400 10800 0 MSK}.. {512521200 14400 1 MSD}.. {528246000 10800 0 MSK}.. {543970800 14400 1 MSD}.. {559695600 10800 0 MSK}.. {575420400 14400 1 MSD}.. {591145200 10800 0 MSK}.. {606870000 14400 1 MSD}.. {622594800 10800 0 MSK}.. {631141200 10800 0 MSK}.. {670374000 7200 0 EEMMTT}.. {670377600 10800 1 EEST}.. {

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Monaco

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):178
                                                                                                                      Entropy (8bit):4.9089012087310095
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVtEXc4o3vXHAIgoquEXeRL/yQauPMFBx6QazEXcov:SlSWB9vsM3ymzESPHAIgozEON/ySRpEB
                                                                                                                      MD5:2015CF8BBEEE12AF0D9C82FD2E246C72
                                                                                                                      SHA1:062BFFBB266C3EBB5776A509DDB7A6044C82B864
                                                                                                                      SHA-256:9DF16BB1C26100635DC4CB1DF409B0FA7B139C22BF09574ED337EE244CA3C546
                                                                                                                      SHA-512:FD3479588D4F3B84CF6C8B8A5DB1AB3BFA0A87CA2FFADB4FEBBBB25711C77963BE7CD0D1DA5ED985D729F39C5B44E8CBD429F1E2DA813DF26272D66CAE4F425A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Paris)]} {.. LoadTimeZoneFile Europe/Paris..}..set TZData(:Europe/Monaco) $TZData(:Europe/Paris)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Moscow

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2430
                                                                                                                      Entropy (8bit):3.942836780611272
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:7fnjazk7e+LxhuHJkvVineTeCTU50x0Y7:7fnjazk7eoEpkvVieTeCTUax0Y7
                                                                                                                      MD5:4547D47E9364ACAFB2A4BEE52D04BFBB
                                                                                                                      SHA1:1E7F964692F81D49AEAF581FE70AD22D4E36226B
                                                                                                                      SHA-256:31F9C3C2F17B3EE4FA6D9EE6A86BF407AC0377DE4D666C65E86CE5AC591F829F
                                                                                                                      SHA-512:7F1D7C80A1BF611D5440EEF9085DA6CDED86B5EF4C2737C105640030E5AA998A0951182E72DC224190A25DA8846CDE856A78EBAA8876AA0B18B1CBCADBB060FF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Moscow) {.. {-9223372036854775808 9017 0 LMT}.. {-2840149817 9017 0 MMT}.. {-1688265017 9079 0 MMT}.. {-1656819079 12679 1 MST}.. {-1641353479 9079 0 MMT}.. {-1627965079 16279 1 MDST}.. {-1618716679 12679 1 MST}.. {-1596429079 16279 1 MDST}.. {-1593820800 14400 0 MSD}.. {-1589860800 10800 0 MSK}.. {-1542427200 14400 1 MSD}.. {-1539493200 18000 1 +05}.. {-1525323600 14400 1 MSD}.. {-1491188400 7200 0 EET}.. {-1247536800 10800 0 MSD}.. {354920400 14400 1 MSD}.. {370728000 10800 0 MSK}.. {386456400 14400 1 MSD}.. {402264000 10800 0 MSK}.. {417992400 14400 1 MSD}.. {433800000 10800 0 MSK}.. {449614800 14400 1 MSD}.. {465346800 10800 0 MSK}.. {481071600 14400 1 MSD}.. {496796400 10800 0 MSK}.. {512521200 14400 1 MSD}.. {528246000 10800 0 MSK}.. {543970800 14400 1 MSD}.. {559695600 10800 0 MSK}.. {575420400 14400 1 MSD}.. {591145200 10

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Nicosia

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):179
                                                                                                                      Entropy (8bit):4.7873368289068905
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq85GKLlXHAIgNwMGKLZRRL/yQatHefeWFKYGKL8n:SlSWB9vsM3yZdL1HAIgGMdLZRN/y3HeA
                                                                                                                      MD5:BE82205480617CF07F76BA0DF06C95BC
                                                                                                                      SHA1:46D2D8D9FE4FB570C2A09BC809B02C8960F9601F
                                                                                                                      SHA-256:FC93B7516933EDFDC211AC0822EE88BF7ACAD1C58A0643B15294F82EB0F14414
                                                                                                                      SHA-512:F490A70053A6011D80FB0A4E96D2871BFEEB168690E21C4EC31F2F5C0E24A67C706528C81322A1D48E71242F0FFA277550192925FDE5B1F34BFCB308290E11FC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Nicosia)]} {.. LoadTimeZoneFile Asia/Nicosia..}..set TZData(:Europe/Nicosia) $TZData(:Asia/Nicosia)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Oslo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):179
                                                                                                                      Entropy (8bit):4.910647918749938
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV/y+YF3vXHAIgoq8yFRRL/yQasWJAQahyuv:SlSWB9vsM3ymhVoPHAIgoh6N/yI7Fv
                                                                                                                      MD5:242748F361AD524CD8E288BEE8611E19
                                                                                                                      SHA1:A636A544BB54851185E2BE83DAC69C813B824827
                                                                                                                      SHA-256:C84E9C0D22059573079211CBF487072CAB95C14B5ECEFB596CF1F594ABD3458C
                                                                                                                      SHA-512:404B272D0C6B70332052601EA65C0F7AE71C12F62D19FD3010BBA6FB25E4F2F95BB9E5F295D8494CBADB1AE9C7F833C42382AE7488317EA6F0C20E60B63BEFE8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Berlin)]} {.. LoadTimeZoneFile Europe/Berlin..}..set TZData(:Europe/Oslo) $TZData(:Europe/Berlin)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Paris

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9152
                                                                                                                      Entropy (8bit):3.8506895725632746
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:fySTO1C+4qoMYOKDBb0S274elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdi:fdp+3Ss41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:9CAF8C5C5AF630E7F782C0480DD786E7
                                                                                                                      SHA1:9FBEF9EEDD8BAFB48B17E3AC388CFEF8DCD10CB0
                                                                                                                      SHA-256:AE61491C4A587F56426A9F2118E31060276F2B0231E750C461781577551CA196
                                                                                                                      SHA-512:F809744BB597184A2815758A27B6A07C515C65DB96CFFB3625FD059DEBBF05EE903E999483B3459C7C8D3991824746F8530CD1378F8A63B1F54F60CFACE9F89B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Paris) {.. {-9223372036854775808 561 0 LMT}.. {-2486592561 561 0 PMT}.. {-1855958961 0 0 WET}.. {-1689814800 3600 1 WEST}.. {-1680397200 0 0 WET}.. {-1665363600 3600 1 WEST}.. {-1648342800 0 0 WET}.. {-1635123600 3600 1 WEST}.. {-1616893200 0 0 WET}.. {-1604278800 3600 1 WEST}.. {-1585443600 0 0 WET}.. {-1574038800 3600 1 WEST}.. {-1552266000 0 0 WET}.. {-1539997200 3600 1 WEST}.. {-1520557200 0 0 WET}.. {-1507510800 3600 1 WEST}.. {-1490576400 0 0 WET}.. {-1470618000 3600 1 WEST}.. {-1459126800 0 0 WET}.. {-1444006800 3600 1 WEST}.. {-1427677200 0 0 WET}.. {-1411952400 3600 1 WEST}.. {-1396227600 0 0 WET}.. {-1379293200 3600 1 WEST}.. {-1364778000 0 0 WET}.. {-1348448400 3600 1 WEST}.. {-1333328400 0 0 WET}.. {-1316394000 3600 1 WEST}.. {-1301274000 0 0 WET}.. {-1284339600 3600 1 WEST}.. {-1269824400 0 0 WET}.. {-1253494800 3

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Podgorica

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.910162937111088
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV/sUE2tovXHAIgoq8sUE2oAovRL/yQazKIGl1/yQ0:SlSWB9vsM3ymhrE2tSHAIgohrE2LovNK
                                                                                                                      MD5:52C36955D6BD1D9FE9CB64822D04B6DB
                                                                                                                      SHA1:D5FF82EC486409E6FB314AD5ACE608577C9632CF
                                                                                                                      SHA-256:B87630FF459DE07EB16CD0C2452660772E3FFC4EEB8419EA77A013B6F63A5900
                                                                                                                      SHA-512:ABA49D3F05A41A4982600E4DA5C225D8994251F447401EE6FE8478E008BCD5D41C057034185B5CFF805634D571F3CC98EFE98093ABC8E6271351E11A4DA1E7AD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Belgrade)]} {.. LoadTimeZoneFile Europe/Belgrade..}..set TZData(:Europe/Podgorica) $TZData(:Europe/Belgrade)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Prague

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8038
                                                                                                                      Entropy (8bit):3.8240363895915914
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:Kr9+neXAS274elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCsyZhltlh:KnASs41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:828134FA1263FEFA2B06A8B2F075F564
                                                                                                                      SHA1:4B332DE6E0855F8B9517F7098A3FB439671FC349
                                                                                                                      SHA-256:5D3AFED5C1B07C6C6635D6BDEB28A0FB4D11A61F25F26C91227B2254BE5F4AA0
                                                                                                                      SHA-512:9AB1462CDBD7F13F0CECDCCC2D91A85D8C0576B71508F935D26638C25ED023CF8FF4BA4FFDA402B308E6142B135D1B9D88700A519DBE2381E8E945329A5354F7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Prague) {.. {-9223372036854775808 3464 0 LMT}.. {-3786829064 3464 0 PMT}.. {-2469401864 3600 0 CET}.. {-1693706400 7200 1 CEST}.. {-1680483600 3600 0 CET}.. {-1663455600 7200 1 CEST}.. {-1650150000 3600 0 CET}.. {-1632006000 7200 1 CEST}.. {-1618700400 3600 0 CET}.. {-938905200 7200 1 CEST}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-796777200 3600 0 CET}.. {-781052400 7200 1 CEST}.. {-777862800 7200 0 CEST}.. {-765327600 3600 0 CET}.. {-746578800 7200 1 CEST}.. {-733359600 3600 0 CET}.. {-728517600 0 1 GMT}.. {-721260000 0 0 CET}.. {-716425200 7200 1 CEST}.. {-701910000 3600 0 CET}.. {-684975600 7200 1 CEST}.. {-670460400 3600 0 CET}.. {-654217200 7200 1 CEST}.. {-639010800 3600 0 CET}.. {283993200 3600 0 CET}.. {291776400 7200 1 CEST}.. {307501200 3600 0 CET}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Riga

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7658
                                                                                                                      Entropy (8bit):3.7750218768791806
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:eq+cEpkjXkSV385aNlKkUpvBeRF+iDlKSdkwSMTHkB2vwz59F06Kgr/y/rYjlBK0:ePWjUS7ivBeRF+W35Syrwl9h5j
                                                                                                                      MD5:0D3C919F60081388524BD5DB22E6904B
                                                                                                                      SHA1:6691EAB901C8B57D2F2693120A45A67799D05FCB
                                                                                                                      SHA-256:8B64A42BAFD90F9255CACFDBAC603D638DD7C18DC27249F9C9B515E1DA634424
                                                                                                                      SHA-512:62A2820B8C1C5468AC1F1BB626F9AAAD0BA1DEC5B73740F00FE4DB8CFA3F2BCF9947968E693824FC8770BA20AB962F93F7E5E345AE8A85F99CDB18E2B510308E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Riga) {.. {-9223372036854775808 5794 0 LMT}.. {-2840146594 5794 0 RMT}.. {-1632008194 9394 1 LST}.. {-1618702594 5794 0 RMT}.. {-1601681794 9394 1 LST}.. {-1597275394 5794 0 RMT}.. {-1377308194 7200 0 EET}.. {-928029600 10800 0 MSK}.. {-899521200 3600 0 CET}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-796777200 3600 0 CET}.. {-795834000 10800 0 MSD}.. {354920400 14400 1 MSD}.. {370728000 10800 0 MSK}.. {386456400 14400 1 MSD}.. {402264000 10800 0 MSK}.. {417992400 14400 1 MSD}.. {433800000 10800 0 MSK}.. {449614800 14400 1 MSD}.. {465346800 10800 0 MSK}.. {481071600 14400 1 MSD}.. {496796400 10800 0 MSK}.. {512521200 14400 1 MSD}.. {528246000 10800 0 MSK}.. {543970800 14400 1 MSD}.. {559695600 10800 0 MSK}.. {575420400 14400 1 MSD}.. {591145200 10800 0 MSK}.. {6

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Rome

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8813
                                                                                                                      Entropy (8bit):3.8168470239811736
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:hhGvC2GmkNXEq74elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCsyZhn:hUsF41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:C4F49446D3696301EDB339691DCB2FDB
                                                                                                                      SHA1:537963A77B9BE9BE6B997A812A6E6DD120F6F247
                                                                                                                      SHA-256:DCD2D9144507311E573568598E1FFD0E0574FB677AA0DAFC5641D80A19EB6E58
                                                                                                                      SHA-512:1F0A9A549FA0995C51E90AC392671E3F09744B268F1EE6A27CA7E3C41C2B02A4BA0F98369BE40BA482FBA1FED8F1EE712F0B3217AD86164D1AD498E369C24D76
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Rome) {.. {-9223372036854775808 2996 0 LMT}.. {-3252098996 2996 0 RMT}.. {-2403565200 3600 0 CET}.. {-1690765200 7200 1 CEST}.. {-1680487200 3600 0 CET}.. {-1664758800 7200 1 CEST}.. {-1648951200 3600 0 CET}.. {-1635123600 7200 1 CEST}.. {-1616896800 3600 0 CET}.. {-1604278800 7200 1 CEST}.. {-1585533600 3600 0 CET}.. {-1571014800 7200 1 CEST}.. {-1555293600 3600 0 CET}.. {-932432400 7200 1 CEST}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-830307600 7200 0 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-807152400 7200 0 CEST}.. {-798073200 3600 0 CET}.. {-781052400 7200 1 CEST}.. {-766717200 3600 0 CET}.. {-750898800 7200 1 CEST}.. {-733359600 3600 0 CET}.. {-719456400 7200 1 CEST}.. {-701917200 3600 0 CET}.. {-689209200 7200 1 CEST}.. {-670460400 3600 0 CET}.. {-114051600 7200 1 CEST}.. {-103168800 36

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Samara

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2118
                                                                                                                      Entropy (8bit):3.664269700453612
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:7PvCAs6kKR6aQmF1cSNWrI+AjQnTRYZ/YF0LUdt/LkajuZbIJltiabs2Tb:7HCAs6kC6aZF1cSN4I+AjQTRYZ/YF0Lw
                                                                                                                      MD5:965D987F6576F66A08871697144D4CDB
                                                                                                                      SHA1:AF7226DF81C2B3C3A5832F59FC708A6BCBF389CA
                                                                                                                      SHA-256:8F395352AA05D35E7D13380E73659A0D5B56FFC17E3F4E40E4F678A902F0E49B
                                                                                                                      SHA-512:B82E0CFA5EDA0FCDF03609AE439255F8937A7E9EFA0AFE15EA8877316782AFC74514BCD2B4F06F1B5F0F3C5A64A933D73CB50D5AED2BB1491BD6CACBB77B10E8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Samara) {.. {-9223372036854775808 12020 0 LMT}.. {-1593820800 10800 0 +03}.. {-1247540400 14400 0 +04}.. {-1102305600 14400 0 +05}.. {354916800 18000 1 +05}.. {370724400 14400 0 +04}.. {386452800 18000 1 +05}.. {402260400 14400 0 +04}.. {417988800 18000 1 +05}.. {433796400 14400 0 +04}.. {449611200 18000 1 +05}.. {465343200 14400 0 +04}.. {481068000 18000 1 +05}.. {496792800 14400 0 +04}.. {512517600 18000 1 +05}.. {528242400 14400 0 +04}.. {543967200 18000 1 +05}.. {559692000 14400 0 +04}.. {575416800 18000 1 +05}.. {591141600 14400 0 +04}.. {606866400 10800 0 +04}.. {606870000 14400 1 +04}.. {622594800 10800 0 +03}.. {638319600 14400 1 +04}.. {654649200 10800 0 +03}.. {670374000 7200 0 +03}.. {670377600 10800 1 +03}.. {686102400 10800 0 +03}.. {687916800 14400 0 +04}.. {701820000 18000 1 +05}.. {717544800 14400 0 +04}.. {733

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\San_Marino

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):179
                                                                                                                      Entropy (8bit):4.955758257767983
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVvjF3vXHAIgoqspvVHRL/yQawELDX7x/yQaxE:SlSWB9vsM3ymx5PHAIgoxvN/yt/yrE
                                                                                                                      MD5:D253DA6880630A31D39DB0CFA4933ABD
                                                                                                                      SHA1:E5798DAAE574729685FE489F296B964BC1CCF2E4
                                                                                                                      SHA-256:B6856A0E38C2404F7D5FA1821559503F8AE70923A562F0D993124D131515F395
                                                                                                                      SHA-512:CFB6005F3E8D1C585AF36EB7A8C9F49760EF6F446C97E7804EB61EFD0804424C4FB6AE81B71C5A867274EF89A17DAC0D2A0FF882A0F6AEA1D5FFD51593726C5F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Rome)]} {.. LoadTimeZoneFile Europe/Rome..}..set TZData(:Europe/San_Marino) $TZData(:Europe/Rome)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Sarajevo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.937834327554967
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV/sUE2tovXHAIgoq8sUE2oAovRL/yQawEX3GEaQa5:SlSWB9vsM3ymhrE2tSHAIgohrE2LovNZ
                                                                                                                      MD5:F7C7DAE9C5D371EF9EE1F490246ED3CC
                                                                                                                      SHA1:40C388FE2A55078C8E0524A4385B3F8846960E24
                                                                                                                      SHA-256:BC00D953C2F3E55E40EDA13838AB66B9E9D0BDAD620E4EB917637761ABB06FB1
                                                                                                                      SHA-512:EB22C59F4D58D96797A718FC59B010795F587626E456D44A3E6398E0FBF4ECD97BCDC151BC1359151798B5AF2964FE5708233F8ECD0D344C3E27629F2645687F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Belgrade)]} {.. LoadTimeZoneFile Europe/Belgrade..}..set TZData(:Europe/Sarajevo) $TZData(:Europe/Belgrade)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Saratov

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2061
                                                                                                                      Entropy (8bit):3.6638125261109824
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:yFvCAs6kKR6aQmF1cSNWJjXgV/Ap40FjDQ:yhCAs6kC6aZF1cSNcjXgV/ApDFjDQ
                                                                                                                      MD5:CC4D7C478790588D232568CAB12D8E67
                                                                                                                      SHA1:07A7CFCFFFF91D124EDFC99F5053BAFC79FBB12B
                                                                                                                      SHA-256:AB90363DEE5077C39EC55FE8E519593FF08223E5A8E593F6CCE01FB5B8B35BAE
                                                                                                                      SHA-512:23944D20624C942CFDE58F1019160D64401BD0AFB8C3EC49F904038482FAA6741812548C860A2DAE050B8D17A7E08ED9C6EBE7FF19393CFA46D78B1D21B1CACA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Saratov) {.. {-9223372036854775808 11058 0 LMT}.. {-1593820800 10800 0 +03}.. {-1247540400 14400 0 +05}.. {354916800 18000 1 +05}.. {370724400 14400 0 +04}.. {386452800 18000 1 +05}.. {402260400 14400 0 +04}.. {417988800 18000 1 +05}.. {433796400 14400 0 +04}.. {449611200 18000 1 +05}.. {465343200 14400 0 +04}.. {481068000 18000 1 +05}.. {496792800 14400 0 +04}.. {512517600 18000 1 +05}.. {528242400 14400 0 +04}.. {543967200 18000 1 +05}.. {559692000 14400 0 +04}.. {575416800 10800 0 +04}.. {575420400 14400 1 +04}.. {591145200 10800 0 +03}.. {606870000 14400 1 +04}.. {622594800 10800 0 +03}.. {638319600 14400 1 +04}.. {654649200 10800 0 +03}.. {670374000 14400 0 +04}.. {701820000 10800 0 +04}.. {701823600 14400 1 +04}.. {717548400 10800 0 +03}.. {733273200 14400 1 +04}.. {748998000 10800 0 +03}.. {764722800 14400 1 +04}.. {780

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Simferopol

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2389
                                                                                                                      Entropy (8bit):3.9491446081772748
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:wM2wE0xhuHJkYaVV0XOnbdSisa0ewEKGfUslIYtq8X:UwEAEpkzVFgaNl7
                                                                                                                      MD5:03E05E60E064198BF6562B2E6E8DA8D2
                                                                                                                      SHA1:51461207B671536CD4A7587BA283DE2D0017AA4A
                                                                                                                      SHA-256:D51CD3DE50C50BCA1624EFC952ADD15D418A09EC213760DF5BC3097E35C5A7A0
                                                                                                                      SHA-512:73B7773DABE19F20DD211E178B822FD35620DC4AC8B9D20259971B1157ED7A60A5A41026258FAA8B15016268D241ED804AC1307CACDA00D6FE657407D254B02C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Simferopol) {.. {-9223372036854775808 8184 0 LMT}.. {-2840148984 8160 0 SMT}.. {-1441160160 7200 0 EET}.. {-1247536800 10800 0 MSK}.. {-888894000 3600 0 CET}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-811645200 10800 0 MSD}.. {354920400 14400 1 MSD}.. {370728000 10800 0 MSK}.. {386456400 14400 1 MSD}.. {402264000 10800 0 MSK}.. {417992400 14400 1 MSD}.. {433800000 10800 0 MSK}.. {449614800 14400 1 MSD}.. {465346800 10800 0 MSK}.. {481071600 14400 1 MSD}.. {496796400 10800 0 MSK}.. {512521200 14400 1 MSD}.. {528246000 10800 0 MSK}.. {543970800 14400 1 MSD}.. {559695600 10800 0 MSK}.. {575420400 14400 1 MSD}.. {591145200 10800 0 MSK}.. {606870000 14400 1 MSD}.. {622594800 10800 0 MSK}.. {631141200 10800 0 MSK}.. {646786800 7200 0 EET}.. {701042400 7200 0 EET}.. {

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Skopje

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):187
                                                                                                                      Entropy (8bit):4.953089768975736
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV/sUE2tovXHAIgoq8sUE2oAovRL/yQawOgpr8Qahr:SlSWB9vsM3ymhrE2tSHAIgohrE2LovNO
                                                                                                                      MD5:0BF8ADBB63F5D6187C75FF1B0BAC761E
                                                                                                                      SHA1:7DE15E767D34812F784CE6E85438A592E2CBA418
                                                                                                                      SHA-256:52F20858433261B15797B64F0A09CEE95D552EF93B5DAA7C141BFAB6D718C345
                                                                                                                      SHA-512:27D395635427C8FA1A4E0063A32F482701D2CC7C7724B4A06E661D4A419D23E219672888D37367FE5E70B6872914EB9EE034AE359DCB6A4C4CE05CA34C3589A9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Belgrade)]} {.. LoadTimeZoneFile Europe/Belgrade..}..set TZData(:Europe/Skopje) $TZData(:Europe/Belgrade)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Sofia

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7654
                                                                                                                      Entropy (8bit):3.727428614069594
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:8lmG4+K7Gjz5CXNUatpaNlKkUpvBeRF+iDlKSdkwSMTHkB2vwz59F06Kgr/y/rYf:8lmGWwkdUasivBeRF+W35Syrwl9h5j
                                                                                                                      MD5:91357DFC23ADB0CE80C463E4B6D896BE
                                                                                                                      SHA1:273F51BE4C67A9AC1182F86AC060E963684151D5
                                                                                                                      SHA-256:6415F279CB143EA598CF8272263AC5B502827B10CEEB242B39E6EFCC23A2EE12
                                                                                                                      SHA-512:8EA7E2D4C2239879A4D6CCE302C38A6D2A9093A2CADEF4F4294E60D373AB9A2C468BA6E3D54DEC7F73D954CE5226EF2B022F8BDEF29B3B4AAB3838B05C72EA29
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Sofia) {.. {-9223372036854775808 5596 0 LMT}.. {-2840146396 7016 0 IMT}.. {-2369527016 7200 0 EET}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-796777200 3600 0 CET}.. {-788922000 3600 0 CET}.. {-781048800 7200 0 EET}.. {291762000 10800 0 EEST}.. {307576800 7200 0 EET}.. {323816400 10800 1 EEST}.. {339026400 7200 0 EET}.. {355266000 10800 1 EEST}.. {370393200 7200 0 EET}.. {386715600 10800 1 EEST}.. {401846400 7200 0 EET}.. {417571200 10800 1 EEST}.. {433296000 7200 0 EET}.. {449020800 10800 1 EEST}.. {465350400 7200 0 EET}.. {481075200 10800 1 EEST}.. {496800000 7200 0 EET}.. {512524800 10800 1 EEST}.. {528249600 7200 0 EET}.. {543974400 10800 1 EEST}.. {559699200 7200 0 EET}.. {575424000 10800 1 EEST}.. {591148800 7200 0 EET}.. {606873600 10800 1 EEST}.. {62259

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Stockholm

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):184
                                                                                                                      Entropy (8bit):4.956798438511978
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV/y+YF3vXHAIgoq8yFRRL/yQawRMNSTyQahyuv:SlSWB9vsM3ymhVoPHAIgoh6N/yqMNSTm
                                                                                                                      MD5:ACFB8E2D1D4BA0D2D46410F2F2823B21
                                                                                                                      SHA1:4AC3A19E94DE606DFF7D93BC6C7F113F3D2D083A
                                                                                                                      SHA-256:64615AEA9EF14A2609D2C804901281C83FDDC0A8BCA9B377D6CAD62D81801C66
                                                                                                                      SHA-512:2E23AC0DE7D3D0CF2BA4FE3EE31E15EB614A7442097578209D38CE2FF2E3DF006881463866FE67DD4DDEAB179E5CD2946E8A9E8F7401F1B953E9AB216EC753F0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Berlin)]} {.. LoadTimeZoneFile Europe/Berlin..}..set TZData(:Europe/Stockholm) $TZData(:Europe/Berlin)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Tallinn

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7549
                                                                                                                      Entropy (8bit):3.76585669030767
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:dUusEpkjXkSV3AMaNlKkUpvBeRF+iDlKSdkwSMTHkB2vwz59F06Kgr/y/rYjlBK0:O0WjUSWivBeRF+W35Syrwl9h5j
                                                                                                                      MD5:54EF0224F5E28FA78F212EC97D4AE561
                                                                                                                      SHA1:FA7C9A951ED943F1E1E609D2253582016BC26B57
                                                                                                                      SHA-256:6F3594CCDA78B02B2EE14C8FAE29E668E47193AF2DFCF5AF1ECD210F13BCE9CE
                                                                                                                      SHA-512:2D1CA2BB1945AE5E3F56AF8FA7F950CE7169F215C783E683634581C5EC01B54159E47A0E9551897077BBEAB06158906029A4E4B0051A263D9E5D903EA9DA1692
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Tallinn) {.. {-9223372036854775808 5940 0 LMT}.. {-2840146740 5940 0 TMT}.. {-1638322740 3600 0 CET}.. {-1632006000 7200 1 CEST}.. {-1618700400 3600 0 CET}.. {-1593824400 5940 0 TMT}.. {-1535938740 7200 0 EET}.. {-927943200 10800 0 MSK}.. {-892954800 3600 0 CET}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-797648400 10800 0 MSD}.. {354920400 14400 1 MSD}.. {370728000 10800 0 MSK}.. {386456400 14400 1 MSD}.. {402264000 10800 0 MSK}.. {417992400 14400 1 MSD}.. {433800000 10800 0 MSK}.. {449614800 14400 1 MSD}.. {465346800 10800 0 MSK}.. {481071600 14400 1 MSD}.. {496796400 10800 0 MSK}.. {512521200 14400 1 MSD}.. {528246000 10800 0 MSK}.. {543970800 14400 1 MSD}.. {559695600 10800 0 MSK}.. {575420400 14400 1 MSD}.. {591145200 10800 0 MSK}.. {606870000 10800 1 EEST}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Tirane

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7675
                                                                                                                      Entropy (8bit):3.809498345470167
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:n05NWKIHBJ9AE4elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCsyZhlt:0iKqxAE41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:1983B88075A92942209BB2B80E565F4E
                                                                                                                      SHA1:12A0401026C5C036144FD1D544173AAB39969F61
                                                                                                                      SHA-256:C62686BF598138FEFB72E8CC6632BA75A5FE147F2A30124EE3583BE1F732E38D
                                                                                                                      SHA-512:E95C38FA0A2B526C00B9DCF5CDF53059DECF64B085AA18BE000968DA626561944415D053CF7A5C32BC672085538920CFD67A3A3B627CFD5B1A4C9CEC49AA3F96
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Tirane) {.. {-9223372036854775808 4760 0 LMT}.. {-1767230360 3600 0 CET}.. {-932346000 7200 0 CEST}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-843519600 3600 0 CET}.. {136854000 7200 1 CEST}.. {149896800 3600 0 CET}.. {168130800 7200 1 CEST}.. {181432800 3600 0 CET}.. {199839600 7200 1 CEST}.. {213141600 3600 0 CET}.. {231894000 7200 1 CEST}.. {244591200 3600 0 CET}.. {263257200 7200 1 CEST}.. {276040800 3600 0 CET}.. {294706800 7200 1 CEST}.. {307490400 3600 0 CET}.. {326156400 7200 1 CEST}.. {339458400 3600 0 CET}.. {357087600 7200 1 CEST}.. {370389600 3600 0 CET}.. {389142000 7200 1 CEST}.. {402444000 3600 0 CET}.. {419468400 7200 1 CEST}.. {433807200 3600 0 CET}.. {449622000 7200 1 CEST}.. {457480800 7200 0 CEST}.. {465354000 3600 0 CET}.. {481078800 7200 1 CEST}.. {496803600 3600 0 CET}.. {512528400 7200 1 C

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Tiraspol

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.906212162381389
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV+NM/LWXHAIgoq9NM/HARL/yQa3MPgJM1p8QagNMj:SlSWB9vsM3ymI6CHAIgoI6HAN/ytM4MO
                                                                                                                      MD5:E0C99DB7673EEE440BA1848046455BA1
                                                                                                                      SHA1:1BCCC1BE46306DEF8A9CA249DE8FA11FC57CC04D
                                                                                                                      SHA-256:FDD53FDB5F754BBBA8FF98F0B1555FE0BAEB7852843220A7CF93A190B641A9AD
                                                                                                                      SHA-512:CD56B540AE9084DEAA9D0A1DBBAF89733C465424C22CE74696B9AE90FD4FEFAB265CF23C5B13A7F04597D75FD0147BD593E0552B56D87372170CB4CA1BFC8259
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Chisinau)]} {.. LoadTimeZoneFile Europe/Chisinau..}..set TZData(:Europe/Tiraspol) $TZData(:Europe/Chisinau)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Ulyanovsk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2119
                                                                                                                      Entropy (8bit):3.680951255407528
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:kFvCAs6kKR6aQmF1cSNWrI+AjQndgV/Ap40FjDOP:khCAs6kC6aZF1cSN4I+AjQdgV/ApDFj4
                                                                                                                      MD5:83C86E437B5FBA1DC9CC5235396AC381
                                                                                                                      SHA1:5493A59C3A5A1B55ACD493E67F9E29D2A415A8DB
                                                                                                                      SHA-256:9FA9D09509B4F8F5A9C8E422DBA02605070C3EBDAEB7C1DF8527C8EEF5E3632D
                                                                                                                      SHA-512:86222489C65C87646939DECF91C2EC336EB46F64B644526A3FA8A4854B9D11819F6FD253107AB8A3DE911E254C88092D25137442164A6E437CDAF258A7CBB66C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Ulyanovsk) {.. {-9223372036854775808 11616 0 LMT}.. {-1593820800 10800 0 +03}.. {-1247540400 14400 0 +05}.. {354916800 18000 1 +05}.. {370724400 14400 0 +04}.. {386452800 18000 1 +05}.. {402260400 14400 0 +04}.. {417988800 18000 1 +05}.. {433796400 14400 0 +04}.. {449611200 18000 1 +05}.. {465343200 14400 0 +04}.. {481068000 18000 1 +05}.. {496792800 14400 0 +04}.. {512517600 18000 1 +05}.. {528242400 14400 0 +04}.. {543967200 18000 1 +05}.. {559692000 14400 0 +04}.. {575416800 18000 1 +05}.. {591141600 14400 0 +04}.. {606866400 10800 0 +04}.. {606870000 14400 1 +04}.. {622594800 10800 0 +03}.. {638319600 14400 1 +04}.. {654649200 10800 0 +03}.. {670374000 7200 0 +03}.. {670377600 10800 1 +03}.. {686102400 7200 0 +02}.. {695779200 10800 0 +04}.. {701823600 14400 1 +04}.. {717548400 10800 0 +03}.. {733273200 14400 1 +04}.. {748

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Uzhgorod

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):177
                                                                                                                      Entropy (8bit):5.051734481833866
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV2cvXHAIgoq1csFARL/yQa2rUQaocqn:SlSWB9vsM3ym5HAIgoiAN/yFC
                                                                                                                      MD5:17A0CC51331756920B13FFA3FF556751
                                                                                                                      SHA1:C575FEF4F053393C57B34C7C7B0C1E9605413792
                                                                                                                      SHA-256:F8CAF5DBE12F1647B28E7CCDDB2E09E36788A766690D12E770A8ABD82E708644
                                                                                                                      SHA-512:E73F0FE5BE4DD91948A88DC895E148D81267576BA3BCFEA777E25C01EAE9C06845DBFFB651526045B70B7A3CCDB195DFFF60486C01E0A115DFB856873970008E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Kyiv)]} {.. LoadTimeZoneFile Europe/Kyiv..}..set TZData(:Europe/Uzhgorod) $TZData(:Europe/Kyiv)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Vaduz

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):180
                                                                                                                      Entropy (8bit):4.953146873643623
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVnCMPfXHAIgoqkCM4ARL/yQa1NEHp8Qa5CMS:SlSWB9vsM3ym5XPHAIgo5gAN/yvNEJ8G
                                                                                                                      MD5:A0BAEC8B6AF1589ECBE52667DDB2A153
                                                                                                                      SHA1:37093F4F885CBFA90A1F136D082E8B7546244ACC
                                                                                                                      SHA-256:06B235BF047FC2303102BC3DC609A5754A6103321D28440B74EEC1C9E3D24642
                                                                                                                      SHA-512:DBEC235AFB413FA8D116FA1AFFE73706762E7458038B6D68E0BFD71C339510D766825BA97055A06DEE14D5880EAE6CD035BFE0C935C0DF44B0107A356D293A78
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Zurich)]} {.. LoadTimeZoneFile Europe/Zurich..}..set TZData(:Europe/Vaduz) $TZData(:Europe/Zurich)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Vatican

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):176
                                                                                                                      Entropy (8bit):4.914414313741477
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVvjF3vXHAIgoqspvVHRL/yQa1xLM1p8QaxE:SlSWB9vsM3ymx5PHAIgoxvN/yvN+8rE
                                                                                                                      MD5:2404265F8DE1F7D7745893DD4752BA1C
                                                                                                                      SHA1:C07E7F72DBDC7F5F746385523EA733C2714F5DA2
                                                                                                                      SHA-256:C203E94465BD1D91018FC7670437226EF9A4BB41D59DDE49095363865CA33D00
                                                                                                                      SHA-512:5C20834542B74041AAB1DBE35686781B32EEB5814B1A35A942E87D1FC3B6D8F9264CB90433C44A480EA86DDEA65D8C152F41CE3E983C1DE5FA74D6FB5208F701
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Rome)]} {.. LoadTimeZoneFile Europe/Rome..}..set TZData(:Europe/Vatican) $TZData(:Europe/Rome)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Vienna

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7930
                                                                                                                      Entropy (8bit):3.8193566380830273
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:8F6zq+gH74elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCsyZhltlUxo:8ozE41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:6A3A8055DD67174E853C7A208BABAC9B
                                                                                                                      SHA1:64445543DE9D6C01FA858442976E249E37BE23EF
                                                                                                                      SHA-256:A8165313C9B51DAEF130401439CBA60DAA9887FC5EAA61A5AFD4F7BAD1AD934F
                                                                                                                      SHA-512:4407B9E8709A8DD05337A10030895AA9876EAF64EF5347952249EE2A541E304331B46D38532FD7CDFF9E633BF8C9884282F0A5ED259EBA1D99DC0914AF1A50C6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Vienna) {.. {-9223372036854775808 3921 0 LMT}.. {-2422055121 3600 0 CET}.. {-1693706400 7200 1 CEST}.. {-1680483600 3600 0 CET}.. {-1663455600 7200 1 CEST}.. {-1650150000 3600 0 CET}.. {-1632006000 7200 1 CEST}.. {-1618700400 3600 0 CET}.. {-1577926800 3600 0 CET}.. {-1569711600 7200 1 CEST}.. {-1555801200 3600 0 CET}.. {-938905200 7200 0 CEST}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-796777200 3600 0 CET}.. {-781052400 7200 1 CEST}.. {-780188400 3600 0 CET}.. {-757386000 3600 0 CET}.. {-748479600 7200 1 CEST}.. {-733273200 3600 0 CET}.. {-717634800 7200 1 CEST}.. {-701910000 3600 0 CET}.. {-684975600 7200 1 CEST}.. {-670460400 3600 0 CET}.. {323823600 7200 1 CEST}.. {338940000 3600 0 CET}.. {347151600 3600 0 CET}.. {354675600 7200 1 CEST}.. {370400400 3600 0 CE

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Vilnius

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7485
                                                                                                                      Entropy (8bit):3.7711709848169592
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:FAhEpkwCXkSV3A/PplKkUpvBeRF+iDlKSdkwSMTHkB2vwz59F06Kgr/y/rYjlBK0:FfWHUSKivBeRF+W35Syrwl9h5j
                                                                                                                      MD5:1AB5FCEACC4E09074BA9F72F0B7747D5
                                                                                                                      SHA1:E0134E61EC0ADC60BF6DB4544EA7B7FFA4EC7857
                                                                                                                      SHA-256:B762DB4A068DC79FA57691E070D7026086E5A6D2FC273D5C1872E7C8E3711533
                                                                                                                      SHA-512:07565071D05CF972DD64F6060599EB68A00BF264172873BA310168AD07CE0CFCF90D0019B775433EC910DA748B89F0C614E7FD4E821993DA53C7E33F194C6A97
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Vilnius) {.. {-9223372036854775808 6076 0 LMT}.. {-2840146876 5040 0 WMT}.. {-1672536240 5736 0 KMT}.. {-1585100136 3600 0 CET}.. {-1561251600 7200 0 EET}.. {-1553565600 3600 0 CET}.. {-928198800 10800 0 MSK}.. {-900126000 3600 0 CET}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-802141200 10800 0 MSD}.. {354920400 14400 1 MSD}.. {370728000 10800 0 MSK}.. {386456400 14400 1 MSD}.. {402264000 10800 0 MSK}.. {417992400 14400 1 MSD}.. {433800000 10800 0 MSK}.. {449614800 14400 1 MSD}.. {465346800 10800 0 MSK}.. {481071600 14400 1 MSD}.. {496796400 10800 0 MSK}.. {512521200 14400 1 MSD}.. {528246000 10800 0 MSK}.. {543970800 14400 1 MSD}.. {559695600 10800 0 MSK}.. {575420400 14400 1 MSD}.. {591145200 10800 0 MSK}.. {606870000 7200 0 EEMMTT}.. {606873600 10800 1 EEST}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Volgograd

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2123
                                                                                                                      Entropy (8bit):3.667144931158014
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:menvCAs6kKR6aQmF1cSNWJjXgV/Ap40FjDqR:mevCAs6kC6aZF1cSNcjXgV/ApDFjDqR
                                                                                                                      MD5:53E5BA5747B3255BB049F6FF651CEE25
                                                                                                                      SHA1:A69E2BFDB89AC8756E1CD2EAA9109ACD924A0850
                                                                                                                      SHA-256:22968D40DAC2B669E6D2BC43ED6B16C8A9CA3E1F9DACBF8B246299C3C24CC397
                                                                                                                      SHA-512:3269D20DF9C9DDFF8252F33ED563B118771FC71049542DA7C6678E0B5B75FFEA00845FA6F3BC26EDABB4BB7CE449B0B7E00B72473D8D95F126AB3893A9A969B4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Volgograd) {.. {-9223372036854775808 10660 0 LMT}.. {-1577761060 10800 0 +03}.. {-1247540400 14400 0 +04}.. {-256881600 14400 0 +05}.. {354916800 18000 1 +05}.. {370724400 14400 0 +04}.. {386452800 18000 1 +05}.. {402260400 14400 0 +04}.. {417988800 18000 1 +05}.. {433796400 14400 0 +04}.. {449611200 18000 1 +05}.. {465343200 14400 0 +04}.. {481068000 18000 1 +05}.. {496792800 14400 0 +04}.. {512517600 18000 1 +05}.. {528242400 14400 0 +04}.. {543967200 18000 1 +05}.. {559692000 14400 0 +04}.. {575416800 10800 0 +04}.. {575420400 14400 1 +04}.. {591145200 10800 0 +03}.. {606870000 14400 1 +04}.. {622594800 10800 0 +03}.. {638319600 14400 1 +04}.. {654649200 10800 0 +03}.. {670374000 14400 0 +04}.. {701820000 10800 0 +04}.. {701823600 14400 1 +04}.. {717548400 10800 0 +03}.. {733273200 14400 1 +04}.. {748998000 10800 0 +03}.. {

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Warsaw

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8662
                                                                                                                      Entropy (8bit):3.8187545871488995
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:ELn9M9Nivtctwwoy4qelPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCso:E6Nivtctgq1sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:992C1D268E336AF1FB8200966C111644
                                                                                                                      SHA1:C893B82224C8EF282DB2E16A5BBCC3A21C49B6FE
                                                                                                                      SHA-256:F9DC10EC2AE2CC810A6C08837059B34BE651900BA4E1CEDB93C209972CCFB5A2
                                                                                                                      SHA-512:EC4E0D8684D57FA66144F11D8E8C80E5272D4A7304300FEBE20E236476C1B8B33BBC5E479BF96D9ED12900FE6D41DD1DC0D11CBE02B89E0C4C7A153B4BFBCB1F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Warsaw) {.. {-9223372036854775808 5040 0 LMT}.. {-2840145840 5040 0 WMT}.. {-1717032240 3600 0 CET}.. {-1693706400 7200 1 CEST}.. {-1680483600 3600 0 CET}.. {-1663455600 7200 1 CEST}.. {-1650150000 3600 0 CET}.. {-1632006000 7200 1 CEST}.. {-1618696800 7200 0 EET}.. {-1600473600 10800 1 EEST}.. {-1587168000 7200 0 EET}.. {-931734000 7200 0 CEST}.. {-857257200 3600 0 CET}.. {-844556400 7200 1 CEST}.. {-828226800 3600 0 CET}.. {-812502000 7200 1 CEST}.. {-796870800 7200 0 CEST}.. {-796608000 3600 0 CET}.. {-778726800 7200 1 CEST}.. {-762660000 3600 0 CET}.. {-748486800 7200 1 CEST}.. {-733273200 3600 0 CET}.. {-715215600 7200 1 CEST}.. {-701910000 3600 0 CET}.. {-684975600 7200 1 CEST}.. {-670460400 3600 0 CET}.. {-654130800 7200 1 CEST}.. {-639010800 3600 0 CET}.. {-397094400 7200 1 CEST}.. {-386812800 3600 0 CET}.. {-371088000 72

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Zagreb

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):187
                                                                                                                      Entropy (8bit):4.899266605519742
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV/sUE2tovXHAIgoq8sUE2oAovRL/yQa5rXv1/h8Q0:SlSWB9vsM3ymhrE2tSHAIgohrE2LovNB
                                                                                                                      MD5:B07D9D3A5B0D11A578F77995A5FBE12B
                                                                                                                      SHA1:1C4E186F2D53C0A1E6A82A6D33B172E403A41D6D
                                                                                                                      SHA-256:A49B3894EB84F003EB357647D6A40CEAF6213523196CC1EC24EEFD7D9D6D3C3E
                                                                                                                      SHA-512:43520AE325980B236C47C866620D1DA200AC0CD794E8EB642D2936D4B0ECEFE2DA0A93C9559D08581B3CCE2BC75251A4D5B967D376B16EB0C042B0ADCE1DCD01
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Belgrade)]} {.. LoadTimeZoneFile Europe/Belgrade..}..set TZData(:Europe/Zagreb) $TZData(:Europe/Belgrade)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Zaporozhye

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):179
                                                                                                                      Entropy (8bit):4.999265802825238
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV2cvXHAIgoq1csFARL/yQa58KXkcAEfh8Qaocqn:SlSWB9vsM3ym5HAIgoiAN/yjzVbh8C
                                                                                                                      MD5:5B150E25521FE5DD8B83DD9B1B8F3A7A
                                                                                                                      SHA1:0BB6F73F2C4B2464F3B1E62138843389AF1A07BC
                                                                                                                      SHA-256:EF928AC09B9A366FD015F488B6A19FEFD72DE1BAF34E5CADFB8334946BCF19FE
                                                                                                                      SHA-512:4A85A4E929EC6FE66AE60899FA55A75156D075CB2FE41C19337A128F5FA7363B9208AC2DC1BF4E44B76D5F115143D73F6D923E255EA78538D1BE4E45DEBA2049
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Kyiv)]} {.. LoadTimeZoneFile Europe/Kyiv..}..set TZData(:Europe/Zaporozhye) $TZData(:Europe/Kyiv)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Europe\Zurich

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7305
                                                                                                                      Entropy (8bit):3.8199799674700277
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:94hH74elPiIEtzsFpMbFNBwA3ybuNTjrjBDmE0DmiTcoYdNOMCsyZhltlUxOrnW+:9Y41sFpM5vwA6Efv03TBZLl
                                                                                                                      MD5:EBD66FAEA63E1B90122CC1EB21634ECE
                                                                                                                      SHA1:C6487BB8AB2A6A72B2170B220F383ADB6B9AC91C
                                                                                                                      SHA-256:95AFA61E439CA38551306D8FDB11C2788D935C42768D0407C9E4337F105A3E93
                                                                                                                      SHA-512:25A8D0ED9BBE6BF23A1A76CC6D5378CF4D50544AA22DA97DDCD0673D7A5CCFEFFD81B660A1AEFB254B8BBEA55F6EF734BBBD3F0CB903E0721BE107667CA1E328
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Europe/Zurich) {.. {-9223372036854775808 2048 0 LMT}.. {-3675198848 1786 0 BMT}.. {-2385246586 3600 0 CET}.. {-904435200 7200 1 CEST}.. {-891129600 3600 0 CET}.. {-872985600 7200 1 CEST}.. {-859680000 3600 0 CET}.. {347151600 3600 0 CET}.. {354675600 7200 1 CEST}.. {370400400 3600 0 CET}.. {386125200 7200 1 CEST}.. {401850000 3600 0 CET}.. {417574800 7200 1 CEST}.. {433299600 3600 0 CET}.. {449024400 7200 1 CEST}.. {465354000 3600 0 CET}.. {481078800 7200 1 CEST}.. {496803600 3600 0 CET}.. {512528400 7200 1 CEST}.. {528253200 3600 0 CET}.. {543978000 7200 1 CEST}.. {559702800 3600 0 CET}.. {575427600 7200 1 CEST}.. {591152400 3600 0 CET}.. {606877200 7200 1 CEST}.. {622602000 3600 0 CET}.. {638326800 7200 1 CEST}.. {654656400 3600 0 CET}.. {670381200 7200 1 CEST}.. {686106000 3600 0 CET}.. {701830800 7200 1 CEST}.. {717555600 3600 0

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\GB

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):170
                                                                                                                      Entropy (8bit):4.8978035005721265
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVxKL823vXHAIgoqyKL8H6RL/wox6QavKL81n:SlSWB9vsM3ymvKA2PHAIgovKAH6N/wRj
                                                                                                                      MD5:68667037110E713DB3F51922DDE929FE
                                                                                                                      SHA1:2EB02BE3FD35F105B59847892A78F1AA21754541
                                                                                                                      SHA-256:E20D829C605A7C5B2A96B83C3480DF28C964A13381A8BD2C72C2A37295131FA7
                                                                                                                      SHA-512:3A8CC2EC9E3053283F996CA2C4B422061D47F1D16CA07985CBA2C838DF322C23CC9DD28033646F22EAE0E401781480B9D3AF82A539444166A4DD9B7BCCAE45FE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/London)]} {.. LoadTimeZoneFile Europe/London..}..set TZData(:GB) $TZData(:Europe/London)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\GB-Eire

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):175
                                                                                                                      Entropy (8bit):4.90874180513438
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVxKL823vXHAIgoqyKL8H6RL/w4b/h8QavKL81n:SlSWB9vsM3ymvKA2PHAIgovKAH6N/w4E
                                                                                                                      MD5:625520BAAB774520AC54BFB9EDCF9FCA
                                                                                                                      SHA1:C72F0FD45F448901C6B2E24243175729591B9A54
                                                                                                                      SHA-256:C9334480D0A970254B6BA6FF22E958DC8DD8BF06288229461A551C7C094C3F1D
                                                                                                                      SHA-512:1B672218FF9C86168E065A98C3B5F67DAB710D1C2A319E9D6599B397C4B4C00D3721B76C735C8AB04BCB618C1832B07F6CCDAF4266CC0D12A461A3A862D1AEB2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/London)]} {.. LoadTimeZoneFile Europe/London..}..set TZData(:GB-Eire) $TZData(:Europe/London)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\GMT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):153
                                                                                                                      Entropy (8bit):4.867609984313873
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqSsM4DovXHAIgexovYovHRL/wZ8RDMovn:SlSWB9vsM3yFXHAIgnvVHN/wZ8RQy
                                                                                                                      MD5:A01FE6FC260711F0E11C85DC3DE3550A
                                                                                                                      SHA1:988311B71498591425C63669DC3F802F270B2C44
                                                                                                                      SHA-256:747C15CDC239855D5380B7A7F47112F2A26C61B0BF300EEB9711E6521550D189
                                                                                                                      SHA-512:BE4678DCBAE5DBC72865665413206C1909F28BA54F4943257870EFFBA6525457866DED7A985E89F2689C810B314DE4AA2FA3A0A1826A664727F5F7113AA56595
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/GMT)]} {.. LoadTimeZoneFile Etc/GMT..}..set TZData(:GMT) $TZData(:Etc/GMT)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\GMT+0

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):155
                                                                                                                      Entropy (8bit):4.917182390229381
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqSsM4DovXHAIgexovYovHRL/we7/8RDMovn:SlSWB9vsM3yFXHAIgnvVHN/wI8RQy
                                                                                                                      MD5:3327B1BF3118AC6AFC02C31DF5B67CD9
                                                                                                                      SHA1:3932577E66801AD31519B0BB56CCE7B9E36221A9
                                                                                                                      SHA-256:BE48462CCFBB3AEE19597F082A17C2C5D2FD8BB1C9122245EFAB0A51F8F413B0
                                                                                                                      SHA-512:53866FD513B039E8203E51FF3434D5736D3A4C4E0A46874D1C99A17115181AF749F0D079C2E14C5B0538D3DFA52B1645C977CD6599DA3EDA57CC7F84EEAB2D06
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/GMT)]} {.. LoadTimeZoneFile Etc/GMT..}..set TZData(:GMT+0) $TZData(:Etc/GMT)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\GMT-0

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):155
                                                                                                                      Entropy (8bit):4.904279164422928
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqSsM4DovXHAIgexovYovHRL/w4Hp8RDMovn:SlSWB9vsM3yFXHAIgnvVHN/w4J8RQy
                                                                                                                      MD5:0CFFC5655F031D954BD623CC4C74DC9C
                                                                                                                      SHA1:CE5E7AD67252F52D7E70719725FF5BE393DD6EF0
                                                                                                                      SHA-256:944C86F516141DDC3AEC1AE4A963E9769879C48ED12DADDF4ED63A01313ACD00
                                                                                                                      SHA-512:C7352D1394E8B8AC90CD19EE753D5277259BE5512ADDCAED2A2DEF144762CF20BE7A9FA09AAA1829EE401DD195C2AED8C967A7FF46739236E042AF4298EC84A2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/GMT)]} {.. LoadTimeZoneFile Etc/GMT..}..set TZData(:GMT-0) $TZData(:Etc/GMT)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\GMT0

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):154
                                                                                                                      Entropy (8bit):4.892526720357546
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqSsM4DovXHAIgexovYovHRL/wPHp8RDMovn:SlSWB9vsM3yFXHAIgnvVHN/wvp8RQy
                                                                                                                      MD5:565B41A5DB28F9FE7D220E9BA39062A4
                                                                                                                      SHA1:5183689210F07C8A71F880DCE8E5C2CB62CEB17D
                                                                                                                      SHA-256:54850A5F488205DB01FBB46E2DA9FFF951C4571029EA64D35932DDEA5346DAAF
                                                                                                                      SHA-512:BD6E5141F06B03D62DCF725E9E48D6AA8ECD6E8E47A4015B25DC3F672392065FFFD80D688C6695324DC105EA528025CF447FA77E6D17E15D438E61DC51879CB7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/GMT)]} {.. LoadTimeZoneFile Etc/GMT..}..set TZData(:GMT0) $TZData(:Etc/GMT)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Greenwich

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):159
                                                                                                                      Entropy (8bit):4.917976058206477
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqSsM4DovXHAIgexovYovHRL/wE+FB5yRDMovn:SlSWB9vsM3yFXHAIgnvVHN/wE6BURQy
                                                                                                                      MD5:443FA76F107ED438F9571A044B848C6A
                                                                                                                      SHA1:1CF508429DFC40643B1FAB336A249A3A287D8C7C
                                                                                                                      SHA-256:9E7A8DAA26CE36E8F7D7F13460915C063EE98E2A4DB276AD9D15CA5C7C06815F
                                                                                                                      SHA-512:6C0C5FF513A742FBDA349AC3A2581D456701B5348A54ECF38E496DAA1EFC74D937982B6F69F1761CC2FC4B88D9A971EFA2B16096E71EAF002EC5CE4130B533DE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/GMT)]} {.. LoadTimeZoneFile Etc/GMT..}..set TZData(:Greenwich) $TZData(:Etc/GMT)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\HST

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):111
                                                                                                                      Entropy (8bit):4.90682088010982
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x//LhdNMXGm2OH1V90v:SlSWB9eg/jJDm2OH1VGv
                                                                                                                      MD5:79C82A5F8B034E71D0582371E3218DBB
                                                                                                                      SHA1:1476CE8EA223095094B6D25D171E6319C96669F4
                                                                                                                      SHA-256:8D710699AF319E0DDB83E9F3A32D07AE8082EA2F7EABBD345EFFFFB0F563062E
                                                                                                                      SHA-512:ADEE55581D1A158929F09A63B03883ABE9193337DDF225C61AFDBB8A2C7D0BD248ADC4714E0EEFD334826C54C1AFFC8B1E6C2B0D6EF830C3CCA50CC79834F473
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:HST) {.. {-9223372036854775808 -36000 0 HST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Hongkong

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):179
                                                                                                                      Entropy (8bit):4.913328649996328
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8Li0vXHAIgN2qfvRL//XF1p4WFKQyvn:SlSWB9vsM3yW2HAIgAOvN///p4wKlvn
                                                                                                                      MD5:6A307B229C302B1BAE783C8143809269
                                                                                                                      SHA1:EA169AF81AD12380A69FB6B7A12479BA8B82878B
                                                                                                                      SHA-256:359C9C02A9FA3DE10BA48FA0AB47D8D7AFF3B47F950CFAF5EB68F842EA52AB21
                                                                                                                      SHA-512:505445FD0B3E140384EDC27993923BBF9ACD23A244B0F14D58804BFAA946D0BC4C0D301FBCCB492BAFDA42C8A92F4163FB96F4D75DD7374858D1C66183BEC24B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Hong_Kong)]} {.. LoadTimeZoneFile Asia/Hong_Kong..}..set TZData(:Hongkong) $TZData(:Asia/Hong_Kong)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Iceland

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):178
                                                                                                                      Entropy (8bit):4.853280551555672
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqss1kovXHAIgNGE4pHRL/+GAKyx/2DcsS:SlSWB9vsM3y7s3HAIgNT4pHN/+XZx+D4
                                                                                                                      MD5:710D3A32EA8EAD11B45D4911DA8F2676
                                                                                                                      SHA1:146D2A6D48940E58567EFA3BCA134D195E4649E6
                                                                                                                      SHA-256:8A531293F672D8FE38996989FC4EEB22B5EFE6E046E2F58E94D01DA9CE56EF68
                                                                                                                      SHA-512:70432973549C1A83036E0658AEE81C883F19D0D631E35F4C70F2EC69C9384E99340004618EF8B414D8EA9090C6C3120CF46A5D9ABDE4113917995B2844337988
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Abidjan)]} {.. LoadTimeZoneFile Africa/Abidjan..}..set TZData(:Iceland) $TZData(:Africa/Abidjan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Indian\Antananarivo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.807410166086502
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsVVMMvfXHAIgNGExVMeWARL/+L6EL/liEi2eDcVVMB:SlSWB9vsM3y7VTHAIgNTxcAN/+LzM2eV
                                                                                                                      MD5:0F20CBF1F7600D05F85D4D90FDAB2465
                                                                                                                      SHA1:2F3C9479C4F4CD7999B19C07359B89A5FB1B9839
                                                                                                                      SHA-256:1B1177CE4D59D7CBCAE9B0421EB00AD341ECB299BD15773D4ED077F0F2CE7B38
                                                                                                                      SHA-512:657341FC2CCD6A4F7B405ABC8E24C651F6FFEFD68EBD6E2086ADF44834DCBF21D1B9D414436E42C8DCE46FFB88116B98C1D073782E214B3996D49EC00DFF4383
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Nairobi)]} {.. LoadTimeZoneFile Africa/Nairobi..}..set TZData(:Indian/Antananarivo) $TZData(:Africa/Nairobi)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Indian\Chagos

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):180
                                                                                                                      Entropy (8bit):4.853088038233057
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/+L6EL9WJx3vFNMXGm2OHi/FvoHscfJ7XH0VQVFV6VVFSTVV:SlSWB9eg/+LxWJxPDm2OHqFvoH9+VQV3
                                                                                                                      MD5:06143C3DFD86B3FE4F2A3060C0E05BB6
                                                                                                                      SHA1:88E0E30CEE4AB8117860A35AD03B16AF48988789
                                                                                                                      SHA-256:11044AD7CB0848CC734D2A67128AA6AC07CB89268399AA0A71A99024DE4B8879
                                                                                                                      SHA-512:79195D3D0D475BEA982F40683D4BA14AC33B3FA91311F513DCED955C9297C2B0F12D94CCA930FAE0FB7F95DB34CD4E74B5AF0233E792122646592B7EFF0F3163
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Indian/Chagos) {.. {-9223372036854775808 17380 0 LMT}.. {-1988167780 18000 0 +05}.. {820436400 21600 0 +06}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Indian\Christmas

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):181
                                                                                                                      Entropy (8bit):4.910217468889087
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8VLYO5YFfXHAIgN8ELYOJARL/+L6EL9FBIEWoxp4Wx:SlSWB9vsM3y1LePHAIgKELtAN/+LxpWg
                                                                                                                      MD5:39CB9E58C0086B80FB12AC10A6D371E2
                                                                                                                      SHA1:2A9A5CCA411779615A62D9E82023B6A066CB3CF3
                                                                                                                      SHA-256:78A208B73426A1B6D7CF2FE89A0EF3F01721F877D569BC43F2E5B6625A947299
                                                                                                                      SHA-512:BB6C8CF2B6AF9F93A7F7382A453261FA43E6E42E9ED1223F25A70DAD2ABBBF2F5777288553F4BC0155944754655D2C3F81BD81E5B1F611C4B2CCDB729B67AAC5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Bangkok)]} {.. LoadTimeZoneFile Asia/Bangkok..}..set TZData(:Indian/Christmas) $TZData(:Asia/Bangkok)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Indian\Cocos

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):174
                                                                                                                      Entropy (8bit):4.818886812441817
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8nv3vXHAIgNnDA6RL/+L6EL9dEh4WFKsyn:SlSWB9vsM3yHvPHAIg15N/+Lxah4wKsy
                                                                                                                      MD5:9462E9CFC88C3DA3CCCDA18C92E49A97
                                                                                                                      SHA1:B50C82C6C7361BD6F028F82E2FEAF8486D798137
                                                                                                                      SHA-256:EB301EE97A9FDE8ACE0243941C0FAC9ED0E3ACFD6497ABE408F08E95FAE3B732
                                                                                                                      SHA-512:A48EBDA0A93C3505BC6149863F4A7B1043F856A8EB516CF42C050A95E81CD152BC1C0313B3DD115D53DABA95413AF34902D7D11C984DE5A03FC5FFADAF8EA89F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Yangon)]} {.. LoadTimeZoneFile Asia/Yangon..}..set TZData(:Indian/Cocos) $TZData(:Asia/Yangon)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Indian\Comoro

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):184
                                                                                                                      Entropy (8bit):4.825881690094318
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsVVMMvfXHAIgNGExVMeWARL/+L6EL9TKlBx+DcVVMB:SlSWB9vsM3y7VTHAIgNTxcAN/+LxGV+V
                                                                                                                      MD5:7EBDFA311C7852AFADF880395071DE48
                                                                                                                      SHA1:F6EC21FDFB75EC1BE45B1C4170147CBA3E870E7B
                                                                                                                      SHA-256:53FA58E32DC2E4ABB574B2F78011815EEB7F89F453CC63C6B6C1460ABBB4CA5C
                                                                                                                      SHA-512:DFBCD4EA4AFFA1D1CAE7308168874527FD36B5CAE76153AADA9C5E5F628258AB26654A16C8A5F8906FC5918398FD880B15B6DD4E3EF6AD3BE63D4A2455701FA8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Nairobi)]} {.. LoadTimeZoneFile Africa/Nairobi..}..set TZData(:Indian/Comoro) $TZData(:Africa/Nairobi)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Indian\Kerguelen

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.822075418239496
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqKGE4YF3vXHAIgnGED9HRL/+L6EL12h6hwL6ELzEov:SlSWB9vsM3ypGEVFPHAIgnGEtN/+L5Ry
                                                                                                                      MD5:9AB222C67E079B55DDF3ACAE67BD0261
                                                                                                                      SHA1:F9E6C34A00F9F1B152CEA729F087BD24993CA2E8
                                                                                                                      SHA-256:138C7FFBFC520372658CA0CD1B42C4E5A240E9D9B98A277B02481DE5701222FC
                                                                                                                      SHA-512:5F3EFF78506056F981DB0446436B39953D90265227890176D8287E2149B176B9DCCA14E795083B1EBC202D02AA88D584A9BB49868F30895EF17E92AA98ACB7C7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Indian/Maldives)]} {.. LoadTimeZoneFile Indian/Maldives..}..set TZData(:Indian/Kerguelen) $TZData(:Indian/Maldives)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Indian\Mahe

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):170
                                                                                                                      Entropy (8bit):4.84472938642971
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8DeXHAIgN6S7ARL/+L6ELzJM1h4WFKQ3n:SlSWB9vsM3yj+HAIgMS7AN/+L/Yh4wKC
                                                                                                                      MD5:C866B2A879786B7D9341FA904FC7D01A
                                                                                                                      SHA1:DAF7B405E6DAA0C88C6F3A26AAA172E38CE5CAF3
                                                                                                                      SHA-256:613C5C05A8867E4B59A97A3D8C7235DDC0CA23239F2D57A5BFD42E4AB94FD510
                                                                                                                      SHA-512:BB01A464366F1F93591F48C42F300421AF774E50E5B5232AB0C755482E3306EDDB54A9BCF6E9D325EAE63AAC6D3857F4D754FC28A34F90AC728B7158B61E2C57
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Dubai)]} {.. LoadTimeZoneFile Asia/Dubai..}..set TZData(:Indian/Mahe) $TZData(:Asia/Dubai)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Indian\Maldives

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):183
                                                                                                                      Entropy (8bit):4.883092265054605
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/+L6ELzE5FNMXGm2OHnz8eoHvZT5lxV/uUQwGN0VQVFv:SlSWB9eg/+L/EJDm2OHnz8eoHvZT5rdI
                                                                                                                      MD5:4DF975C040D78FA8F9C92E5565D63A73
                                                                                                                      SHA1:48488F076871530D32278084F1C9CB90CB1E6AB4
                                                                                                                      SHA-256:9FAC69DC609CC6074ECD67E0BE8AE62E33D8D9C7F055A3E0DEE1430C7FFC54F6
                                                                                                                      SHA-512:880B920FB51F48731BA8C741B9583038A3276221C55F1CE0B464D2797D71EF9D22B4E166841BAB0544B7091CE683697BFCA5A4235FF1E6264B0619DBDD4BB619
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Indian/Maldives) {.. {-9223372036854775808 17640 0 LMT}.. {-2840158440 17640 0 MMT}.. {-315636840 18000 0 +05}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Indian\Mauritius

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):272
                                                                                                                      Entropy (8bit):4.5144164346164715
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/+L/GDm2OHlNnoH9SvulvSNFF+c0FSFFMVhvSNFFVBjvVFSFFVGlvSN:MB86+L/CmdHlNnCy6qB0FScZq9BjVFSL
                                                                                                                      MD5:05362B6A17C5F4F4E8CBE5A676D5D0DE
                                                                                                                      SHA1:84675D5E8D1425A5E9DB07D1BC1E6A5921B5AC91
                                                                                                                      SHA-256:A2B1B93CBEECBD900ED71E61A4932509EB52688E97A6015DAD067066D0D42072
                                                                                                                      SHA-512:351D2BC5F5888D8E842BF160D11D57E059811186D63B0413061768C7FE348CECB700748A0C0125F0ABCBB039FC74FF7BEEFDD42088BA1E28C785E545ED2CDF24
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Indian/Mauritius) {.. {-9223372036854775808 13800 0 LMT}.. {-1988164200 14400 0 +04}.. {403041600 18000 1 +04}.. {417034800 14400 0 +04}.. {1224972000 18000 1 +04}.. {1238274000 14400 0 +04}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Indian\Mayotte

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.828945679595274
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsVVMMvfXHAIgNGExVMeWARL/+L6ELzO1h4DcVVMMyn:SlSWB9vsM3y7VTHAIgNTxcAN/+L/O1hm
                                                                                                                      MD5:8ABBEC0E138C1A68CB5D096E822DE75E
                                                                                                                      SHA1:E9C5CE1A249F6DC0F6EDBB3F5B00F3106E3BD6CA
                                                                                                                      SHA-256:845C45FD7B6F0604B03A3C72DB117878B568FB537BCA078304727964157B96AB
                                                                                                                      SHA-512:15790CCA70140D3139F3E2A202DC8F12E68466A367C68458D6A78CDDC7822FB5EDB87D630926B51F3DE48D95DE7CA3FCB946CD7B762FE5B15866DAA9DBA40B46
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Nairobi)]} {.. LoadTimeZoneFile Africa/Nairobi..}..set TZData(:Indian/Mayotte) $TZData(:Africa/Nairobi)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Indian\Reunion

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):173
                                                                                                                      Entropy (8bit):4.825214661273383
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8DeXHAIgN6S7ARL/+L6ELsAceh4WFKQ3n:SlSWB9vsM3yj+HAIgMS7AN/+Lj4wKQ3
                                                                                                                      MD5:7B22FE05231A5721C939B6018F8A2814
                                                                                                                      SHA1:E272C25E79ABE705B2DB106D70DEAB3245EA9D35
                                                                                                                      SHA-256:5560B0D4A2D8A13D9FE9787FFFE31200D405A8C875F046C8FDDF850AF98662B6
                                                                                                                      SHA-512:26244855D029151B84A4D57E2FA69632B4F19F8C00B2E500A394D76A29857BE2A412344794BA0DFF50A2863FF17889210A151D0E231A67E55091F4909EC4AE79
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Dubai)]} {.. LoadTimeZoneFile Asia/Dubai..}..set TZData(:Indian/Reunion) $TZData(:Asia/Dubai)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Iran

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):166
                                                                                                                      Entropy (8bit):4.809541513808179
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8g5YFeovXHAIgNqjyVHRL/+XiMr4WFKBpv:SlSWB9vsM3yA5oPHAIgcjeHN/+Xvr4wY
                                                                                                                      MD5:A90C26358FEF60E49044E3BE02866FAC
                                                                                                                      SHA1:137AC8CCA23F39E7A16C4050EA9A3A8731E9AAD7
                                                                                                                      SHA-256:FE7F4453CB5F6B81B23C1C795356B91FE319F0762BE7868FAFE361DB1F9C2A2B
                                                                                                                      SHA-512:D6C74CACF69D29E14CB46E5DD885234AC50EE2E258E0C5E3AC76465061622F064F974D33E91A6A020B9D618D90799DDA6EB1EA53022EDB6E26A9CB6ADFE0AA30
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Tehran)]} {.. LoadTimeZoneFile Asia/Tehran..}..set TZData(:Iran) $TZData(:Asia/Tehran)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Israel

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):177
                                                                                                                      Entropy (8bit):4.8290104377288925
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq85zFFfXHAIgN0AzFFVHRL/+WXnMr4WFKYzFgn:SlSWB9vsM3yZbPHAIgCAXRN/+zr4wKY+
                                                                                                                      MD5:6BCC43951637D86ED54585BE0819E39C
                                                                                                                      SHA1:6F04F306B3AB2A6419377294238B3164F86EF4A3
                                                                                                                      SHA-256:805105F5F17B78929F8476BAE83ED972128633FF6F74B7748B063E3C810C27A6
                                                                                                                      SHA-512:ABB9F4308BF4BD5C62C215A7ECD95042CBFB3005AF1E75F640962B022574C930DD5A12CD0CE0AF8A3D7E38B999E37C3A45A55091683F6A87E9D0CDA9EE417293
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Jerusalem)]} {.. LoadTimeZoneFile Asia/Jerusalem..}..set TZData(:Israel) $TZData(:Asia/Jerusalem)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Jamaica

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):181
                                                                                                                      Entropy (8bit):4.722012123002917
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx00EIECWXHAIg200EIE/vHRL/9S//2IAcGE0EIESvn:SlSWB9vsM3y795VHAIgp95HN/029095c
                                                                                                                      MD5:1F020341AD51AA82794B8018F214DE0D
                                                                                                                      SHA1:4414E56C1277B4D31FE557F8652D522C0594F4B2
                                                                                                                      SHA-256:F01B00D52BD7B2694BF5CB55A17028C30A41BD22A774CA54740E8B1DDE4FCB2E
                                                                                                                      SHA-512:CC41848A851D4992AE9F27C38669CB87CE2FD05A33AB6989EA21AFCB1A2707DE0CB4D62BCC45E536DD944859991D7564847205F47509A42D41932370496A77D7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Jamaica)]} {.. LoadTimeZoneFile America/Jamaica..}..set TZData(:Jamaica) $TZData(:America/Jamaica)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Japan

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):164
                                                                                                                      Entropy (8bit):4.8422204749795545
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8aofXHAIgNqsRL/9hM7/4WFK9vn:SlSWB9vsM3ypPHAIgcsN/4r4wKNn
                                                                                                                      MD5:9554A65BFFCFFCFB2C1588569BB4638E
                                                                                                                      SHA1:B377ECB04586396D37093856AEF8BBDC93192F66
                                                                                                                      SHA-256:98DBD07AE3B9251B9091F4D265336CE98BDFB492AF863C1F3FF25248A2CADF35
                                                                                                                      SHA-512:E2E761B8B1995B68721BC714A546E0F45EEC025FAF81DE579FF0D73D37783D0E031B9E78BA2FAC6B097E3673C47AFB8761FBC58E42E33018FD44B77F2871E0C6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Tokyo)]} {.. LoadTimeZoneFile Asia/Tokyo..}..set TZData(:Japan) $TZData(:Asia/Tokyo)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Kwajalein

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.810216093939366
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQG1/EOM23vXHAIgObT1/EOMH6RL/8/FMKpUDH1/Ex:SlSWB9vsM3yc1EiPHAIgOb1E+N/8xMEx
                                                                                                                      MD5:05C0C40F2AA456F580EAAFC4F7E49B56
                                                                                                                      SHA1:5796A9122693B2D6010BC5E617A6091F46330B0C
                                                                                                                      SHA-256:85E95363ACF468043CD5146927A97B2D9E3B141EDA0A7993DADA9382D1D6DD54
                                                                                                                      SHA-512:2155F8E3EB73312F0AFD5CDDF4B19EBB67A15658101870C2CEDF96955470DBC7B30F34E143D9C14CBFA7A138F63324009581BD0B807AE295C68588CA0470D7AD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Kwajalein)]} {.. LoadTimeZoneFile Pacific/Kwajalein..}..set TZData(:Kwajalein) $TZData(:Pacific/Kwajalein)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Libya

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):176
                                                                                                                      Entropy (8bit):4.829980800076139
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqsbKJqYkyXHAIgNGEnKJp0ARL/7beDcbKJ6v:SlSWB9vsM3y7JSHAIgNTxAN/PeDE
                                                                                                                      MD5:4D44D88336212E162CCEFADE6321EDBC
                                                                                                                      SHA1:B9EE7AFE26DC61AA9EA37EB99A3C10DD176E8063
                                                                                                                      SHA-256:F776839C1999056E6A0D2ECFDF9054FC309454AFDFF8E8BC803F33EC423B7361
                                                                                                                      SHA-512:FDDCBD194DE07B51DEBBDEF4FD96762EE3507117443FB9F7975FB56E0AE97B0D1F8657FE26B092021FB12B5A5D3EFFAB9E0A54B1C2AFCEC1029855442A0A95AB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Africa/Tripoli)]} {.. LoadTimeZoneFile Africa/Tripoli..}..set TZData(:Libya) $TZData(:Africa/Tripoli)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\MET

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7736
                                                                                                                      Entropy (8bit):3.799706947156251
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:aJCP8D3pCS2JWk55EyqJNSPTub3NDOyFyJYVtLbTxdqs0xcQVq+O7JSAmwQZjltB:FSyWBSPTujlOyqc3JuzVNvTN
                                                                                                                      MD5:02B993B4A6956014A2DB844E8A5498C0
                                                                                                                      SHA1:378333547254AC43BEB4FA2CBC24B8DE241B3078
                                                                                                                      SHA-256:DF45F5414F1636B1856C7534BB5F3D4387C32D56283A68BB47D8C48C1DDAD5BC
                                                                                                                      SHA-512:CC3ABCC1FB5ABD10A685F140931DE38D6875142D3595F8D9A581F5B31A7F354FA4CCC9727B69F58E0D2F773EA0F76D9ACFDF7ACBAFC6BAA6E93A46EAE8F18672
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:MET) {.. {-9223372036854775808 3600 0 MET}.. {-1693706400 7200 1 MEST}.. {-1680483600 3600 0 MET}.. {-1663455600 7200 1 MEST}.. {-1650150000 3600 0 MET}.. {-1632006000 7200 1 MEST}.. {-1618700400 3600 0 MET}.. {-938905200 7200 1 MEST}.. {-857257200 3600 0 MET}.. {-844556400 7200 1 MEST}.. {-828226800 3600 0 MET}.. {-812502000 7200 1 MEST}.. {-796777200 3600 0 MET}.. {-781052400 7200 1 MEST}.. {-766623600 3600 0 MET}.. {228877200 7200 1 MEST}.. {243997200 3600 0 MET}.. {260326800 7200 1 MEST}.. {276051600 3600 0 MET}.. {291776400 7200 1 MEST}.. {307501200 3600 0 MET}.. {323830800 7200 1 MEST}.. {338950800 3600 0 MET}.. {354675600 7200 1 MEST}.. {370400400 3600 0 MET}.. {386125200 7200 1 MEST}.. {401850000 3600 0 MET}.. {417574800 7200 1 MEST}.. {433299600 3600 0 MET}.. {449024400 7200 1 MEST}.. {465354000 3600 0 MET}.. {481078800 7200

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\MST

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):111
                                                                                                                      Entropy (8bit):4.902637155364683
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/6xtNMXGm2OHrXV4foAov:SlSWB9eg/6lDm2OHrCAAov
                                                                                                                      MD5:36119516E87814F3C219193069CD6A90
                                                                                                                      SHA1:BDB25531B30E6FC454100F37177EC9D4A0FB4E39
                                                                                                                      SHA-256:E57746D5DB479A8B30973F2BC16E2B8DFB6E2BFAECBFF0FB956F04526E4B935B
                                                                                                                      SHA-512:2730C5DABA0B2CCFD32A799C48EE07351659F51B9C2B91DCD145675AF276F2D0B5AA51ACF7D283C0DC236D3AFA3A75E58EB9F970B1831A6E36F02139CAF6A655
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:MST) {.. {-9223372036854775808 -25200 0 MST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\MST7MDT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8505
                                                                                                                      Entropy (8bit):3.8405400251137207
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:T1ktwmGaLV911sF7Lv/PCewtA8CzSPyDLbrcUia:TswDPlLv/PCenJzS6cy
                                                                                                                      MD5:87B3BCD4A793BA383889ECFDB44C846E
                                                                                                                      SHA1:3EA34B5E6E3078A9501653BA069D5E5E879D7FE4
                                                                                                                      SHA-256:A5DEB89D59613D9A54C1E146056A805B3DE9F2A2593AEC2B8A25F863328699C0
                                                                                                                      SHA-512:AA4DAC2614661EF18A2A60A5BD4D5BBBCCB5D721F90A25E9D11C5B6AF8C39FD475B3E23894719E2F8F74469F13D5492FF31DDD193D9E3172182FBCBCDD860A41
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:MST7MDT) {.. {-9223372036854775808 -25200 0 MST}.. {-1633273200 -21600 1 MDT}.. {-1615132800 -25200 0 MST}.. {-1601823600 -21600 1 MDT}.. {-1583683200 -25200 0 MST}.. {-880210800 -21600 1 MWT}.. {-769395600 -21600 1 MPT}.. {-765388800 -25200 0 MST}.. {-84380400 -21600 1 MDT}.. {-68659200 -25200 0 MST}.. {-52930800 -21600 1 MDT}.. {-37209600 -25200 0 MST}.. {-21481200 -21600 1 MDT}.. {-5760000 -25200 0 MST}.. {9968400 -21600 1 MDT}.. {25689600 -25200 0 MST}.. {41418000 -21600 1 MDT}.. {57744000 -25200 0 MST}.. {73472400 -21600 1 MDT}.. {89193600 -25200 0 MST}.. {104922000 -21600 1 MDT}.. {120643200 -25200 0 MST}.. {126694800 -21600 1 MDT}.. {152092800 -25200 0 MST}.. {162378000 -21600 1 MDT}.. {183542400 -25200 0 MST}.. {199270800 -21600 1 MDT}.. {215596800 -25200 0 MST}.. {230720400 -21600 1 MDT}.. {247046400 -25200 0 MST}.. {262774800

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Mexico\BajaNorte

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.884776849010803
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0qfSfXHAIg20qfORL/6AdMSKBbh4IAcGEqfBn:SlSWB9vsM3y7ekHAIgpeON/68K5h490m
                                                                                                                      MD5:3050A0100A2313C1D3AB4278B464F17A
                                                                                                                      SHA1:1A140447B3972900F13768659FD6979F68126E97
                                                                                                                      SHA-256:F8CA38A845CD01BF785EE222277DAD9325AB6BD17E44A362C450855AEB522814
                                                                                                                      SHA-512:C91C4BF2318C50D473E6051855C12F0E11CBAA8580B88115CDDE054D36476A1D8DDC5D17A7A123BD84148C20B96BD839511EAD573F5FD2C9A8556646B9CDE5E5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Tijuana)]} {.. LoadTimeZoneFile America/Tijuana..}..set TZData(:Mexico/BajaNorte) $TZData(:America/Tijuana)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Mexico\BajaSur

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):191
                                                                                                                      Entropy (8bit):4.8897674180962145
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0zjRJ+ovXHAIg20zjRJ8yHRL/6AdMPCoQIAcGEzjy:SlSWB9vsM3y7zjRJvHAIgpzjRJ8yHN/Z
                                                                                                                      MD5:FAFD9727A0E153AFCB726690D215DA76
                                                                                                                      SHA1:3CD3B2737FC781F38DE26E255968CBB88B773CBF
                                                                                                                      SHA-256:2E6E32A40487F0146B59150B66FF74901CA853B12D47922819AF23EEA5B4149C
                                                                                                                      SHA-512:76D110494D4EB76961C818B2A2CCB2303B31DA161664FA712C87B95B81DE7B8F3E50DC7B2836C6ECC6437AE9595668E62E4E706F1B343EFEA12C32210F113540
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Mazatlan)]} {.. LoadTimeZoneFile America/Mazatlan..}..set TZData(:Mexico/BajaSur) $TZData(:America/Mazatlan)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Mexico\General

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):200
                                                                                                                      Entropy (8bit):4.877941255622543
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y7zBDSHAIgpzBx6N/6BXl490zBf:MByMYzppzH6t6Bi90z1
                                                                                                                      MD5:29ACBFCD0FD521EC0C9523906B9E2252
                                                                                                                      SHA1:BBC1AD3F78CAA634A2F0BC38059975EF8E4A2CE9
                                                                                                                      SHA-256:2DFF1B83FECFAD5C27EC47B206696C29B91398F8185B5D406A66FA9E0AECA93F
                                                                                                                      SHA-512:802502010CFB6F1F4E60C22ECB0E6CA22750975E5838BE7E7DC9D12EA019CB6508F0F87465A113A98356CC9E145E32E6633AE2B45B93412A358C4AD13E923EFE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Mexico_City)]} {.. LoadTimeZoneFile America/Mexico_City..}..set TZData(:Mexico/General) $TZData(:America/Mexico_City)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\NZ

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):179
                                                                                                                      Entropy (8bit):4.888611285267583
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQG/u4WXHAIgObT/KvRRL/5E1nUDH/uov:SlSWB9vsM3ycqXHAIgObOvRN/iy
                                                                                                                      MD5:92548E239012515D756E002768CA876A
                                                                                                                      SHA1:6BDC73DBD7356C3F82C5C76E6E2D58656FA9E21D
                                                                                                                      SHA-256:E22D629D53C54960AD156C377DE0AE461C27F554990A3D1305724CA8F869BCE4
                                                                                                                      SHA-512:42AD074EE08E083EE91270F203707698A8B3308005C94514B8B2D950F4C6F0B37D7D32973EC9F6AB49A0875209076FB40341B31433A27E47B3CC0EA711ECE321
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Auckland)]} {.. LoadTimeZoneFile Pacific/Auckland..}..set TZData(:NZ) $TZData(:Pacific/Auckland)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\NZ-CHAT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):181
                                                                                                                      Entropy (8bit):4.881663364410736
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQG9WQ+DyXHAIgObT9WQiovRL/5AmtBFB/pUDH9WQg:SlSWB9vsM3ycwQ+DSHAIgObwQTN/zzJ7
                                                                                                                      MD5:3811C133C6311E33FDAF93660E1EAED5
                                                                                                                      SHA1:64756FF877B2EB91BAED2889B3924DAB6784DF43
                                                                                                                      SHA-256:83F4CA3522B64F9B151EDEFAE53E0F28C2E6C4CE16D0982186B3344F2A268724
                                                                                                                      SHA-512:7724D6CD08E13E116CCDF073F86CE317C0D4A849C5FE81DF3127D435704507FBF554BFC6E7A50CCA3852F6001D8654B7FF90466878DB8C3298338BE16149FD32
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Chatham)]} {.. LoadTimeZoneFile Pacific/Chatham..}..set TZData(:NZ-CHAT) $TZData(:Pacific/Chatham)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Navajo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):177
                                                                                                                      Entropy (8bit):4.8545620422964015
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx06RGFfXHAIg206RORL/5vf1+IAcGE6RB:SlSWB9vsM3y7+SPHAIgp+ON/pd+90+B
                                                                                                                      MD5:5E9F3294F68873BF503F3DDDDF6713B0
                                                                                                                      SHA1:954CD6F123C043E64F5E49733327E2C78877BDFB
                                                                                                                      SHA-256:2CC8CE235F2EE3160E6AFD04A4E28AA0312494EBB6FED08D8CC81D414EC540EE
                                                                                                                      SHA-512:200FC489989CA57219D5B28FB135BE5BDAC67239F3D243C496545D86D68089E51856CEAC4D2E700C0E47BAE4D5FEAB18A367C554235615B2B860F4E5E1BB08C3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Denver)]} {.. LoadTimeZoneFile America/Denver..}..set TZData(:Navajo) $TZData(:America/Denver)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\PRC

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):171
                                                                                                                      Entropy (8bit):4.902914099699953
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8qvfXHAIgNtaYFARL/nL75h4WFKdy:SlSWB9vsM3yMPHAIgO8AN/H5h4wKU
                                                                                                                      MD5:87C439DC623BF5C7EB01ADA6E67FB63A
                                                                                                                      SHA1:1CC357558E09CDEA49F821826D2AEA9A6EF2C824
                                                                                                                      SHA-256:6A5BAA9CA54B2A2C6D21287443BE0B1064AA79B5C4C62939933F8A0AD842B73E
                                                                                                                      SHA-512:E628B8F1C967AABAEFBB68A33416F6FE47422970BA18414BB3396AC063E65A4DC892595D4071395194AF320633EE915A494E1F8D4216EE8194A034739D275C49
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Shanghai)]} {.. LoadTimeZoneFile Asia/Shanghai..}..set TZData(:PRC) $TZData(:Asia/Shanghai)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\PST8PDT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8505
                                                                                                                      Entropy (8bit):3.836877329152454
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:0KhTG0hjvZkR/bvtw+N6IkWq/WHQlb/RYRWVIKr7cRRL:0sG0U9bFzN6IkWq/WHQt/RY4yP
                                                                                                                      MD5:45E7E9E183A990F56E17C04FA48CE620
                                                                                                                      SHA1:A1F39E0ECEA3C64E761A9A3159E331FA51B625F9
                                                                                                                      SHA-256:D148708F1E70EEFA51E88E5823776CBE710535D4D6D6356E7753A44463A1C5AB
                                                                                                                      SHA-512:1D1F4BA90D07D7EE12DFD0E37DBFD5410A4EAFFBA8960B816FDD5963CD6B20938080A4248E7B249AAE02F068E817AB9A85735D226F7DA8DD2C5462A70B18E8EF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:PST8PDT) {.. {-9223372036854775808 -28800 0 PST}.. {-1633269600 -25200 1 PDT}.. {-1615129200 -28800 0 PST}.. {-1601820000 -25200 1 PDT}.. {-1583679600 -28800 0 PST}.. {-880207200 -25200 1 PWT}.. {-769395600 -25200 1 PPT}.. {-765385200 -28800 0 PST}.. {-84376800 -25200 1 PDT}.. {-68655600 -28800 0 PST}.. {-52927200 -25200 1 PDT}.. {-37206000 -28800 0 PST}.. {-21477600 -25200 1 PDT}.. {-5756400 -28800 0 PST}.. {9972000 -25200 1 PDT}.. {25693200 -28800 0 PST}.. {41421600 -25200 1 PDT}.. {57747600 -28800 0 PST}.. {73476000 -25200 1 PDT}.. {89197200 -28800 0 PST}.. {104925600 -25200 1 PDT}.. {120646800 -28800 0 PST}.. {126698400 -25200 1 PDT}.. {152096400 -28800 0 PST}.. {162381600 -25200 1 PDT}.. {183546000 -28800 0 PST}.. {199274400 -25200 1 PDT}.. {215600400 -28800 0 PST}.. {230724000 -25200 1 PDT}.. {247050000 -28800 0 PST}.. {262778400

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Apia

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):909
                                                                                                                      Entropy (8bit):4.042826306713664
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86HbmdH2oVCvcCfdf3NaDyTb6Dye78ubUt1NEUtszIVbUtoUtoUt3mbUt4qUt6:Yekv5fcfem+Cuy
                                                                                                                      MD5:E5B913965F72AB807BAE67BD20C0A699
                                                                                                                      SHA1:2161B73EC868C8D18C09970766D19A8583FF7981
                                                                                                                      SHA-256:983884249ACC11C3FE740D78E72B1A89BE9C8B077283549BF6BCD8C93FA71731
                                                                                                                      SHA-512:F8807C52DB852C48C62F25569C990C31D977BC7D0DF502CF2B92F9ED6BCB89A6DD8A6758FBD1185E0B5C34DE5450D5C748B71760AC93E72DC3976B3B31D1A605
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Apia) {.. {-9223372036854775808 45184 0 LMT}.. {-2445424384 -41216 0 LMT}.. {-1861878784 -41400 0 -1130}.. {-631110600 -39600 0 -11}.. {1285498800 -36000 1 -11}.. {1301752800 -39600 0 -11}.. {1316872800 -36000 1 -11}.. {1325239200 50400 0 +13}.. {1333202400 46800 0 +13}.. {1348927200 50400 1 +13}.. {1365256800 46800 0 +13}.. {1380376800 50400 1 +13}.. {1396706400 46800 0 +13}.. {1411826400 50400 1 +13}.. {1428156000 46800 0 +13}.. {1443276000 50400 1 +13}.. {1459605600 46800 0 +13}.. {1474725600 50400 1 +13}.. {1491055200 46800 0 +13}.. {1506175200 50400 1 +13}.. {1522504800 46800 0 +13}.. {1538229600 50400 1 +13}.. {1554559200 46800 0 +13}.. {1569679200 50400 1 +13}.. {1586008800 46800 0 +13}.. {1601128800 50400 1 +13}.. {1617458400 46800 0 +13}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Auckland

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8772
                                                                                                                      Entropy (8bit):3.900078030355782
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:pj4hKuZaqaaiFKgjGeGV3atL67G9kJGsU+mpe7Vy:Cla1KgjGeGcQMsa
                                                                                                                      MD5:8174D7205622711F58E0B515246FE89D
                                                                                                                      SHA1:9777B2633ACF5588268D5072F817E65C879358AC
                                                                                                                      SHA-256:201CFADB00FBCD3283249DAD73872ED75C5BEC07F5A5B157726638C20728B833
                                                                                                                      SHA-512:64121ED1EE70D5423710319E806B19261576AECC89A64CBEC44A29BF4AC9FEE21C6484CC3C4550CC92C315B3855BE265F696F8CD4D95027226D608B3ADD022F1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Auckland) {.. {-9223372036854775808 41944 0 LMT}.. {-3192435544 41400 0 NZMT}.. {-1330335000 45000 1 NZST}.. {-1320057000 41400 0 NZMT}.. {-1300699800 43200 1 NZST}.. {-1287396000 41400 0 NZMT}.. {-1269250200 43200 1 NZST}.. {-1255946400 41400 0 NZMT}.. {-1237800600 43200 1 NZST}.. {-1224496800 41400 0 NZMT}.. {-1206351000 43200 1 NZST}.. {-1192442400 41400 0 NZMT}.. {-1174901400 43200 1 NZST}.. {-1160992800 41400 0 NZMT}.. {-1143451800 43200 1 NZST}.. {-1125914400 41400 0 NZMT}.. {-1112607000 43200 1 NZST}.. {-1094464800 41400 0 NZMT}.. {-1081157400 43200 1 NZST}.. {-1063015200 41400 0 NZMT}.. {-1049707800 43200 1 NZST}.. {-1031565600 41400 0 NZMT}.. {-1018258200 43200 1 NZST}.. {-1000116000 41400 0 NZMT}.. {-986808600 43200 1 NZST}.. {-968061600 41400 0 NZMT}.. {-955359000 43200 1 NZST}.. {-936612000 41400 0 NZMT}.. {-923304600 4320

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Bougainville

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):280
                                                                                                                      Entropy (8bit):4.715653436088026
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/FtTfDm2OHHhp5oHvZiuo2HvDVeEU8vScH9syZEizy:MB86FtTLmdHf5CvZiIvJeJ8HH9F6izy
                                                                                                                      MD5:4E858B3754BD8864719A61839ACA64E6
                                                                                                                      SHA1:597025A8DAFD5AE75EBD162AC0E9DA71815816BA
                                                                                                                      SHA-256:2D3BFDED297214BA25CFD8C6F508D0C8B1A1CD7D46701A78EC5E510076185EB6
                                                                                                                      SHA-512:720F301B73C852EA8EEFA79DEF6B6762554E50222DE114FE87EB5178507F1895A9A39B3872A1A4B9DFF58D1CC6460BA4A82F2C165E3659E13036451F22E389C3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Bougainville) {.. {-9223372036854775808 37336 0 LMT}.. {-2840178136 35312 0 PMMT}.. {-2366790512 36000 0 +10}.. {-868010400 32400 0 +09}.. {-768906000 36000 0 +10}.. {1419696000 39600 0 +11}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Chatham

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8165
                                                                                                                      Entropy (8bit):3.6566720439018874
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:gpvlGCcn6AadFurBrioCdL49mq9X4a2t3I/KVE:gOCBdFurBr0soaz
                                                                                                                      MD5:8105A806A1762932897AB59C47BBE89E
                                                                                                                      SHA1:386E41A4A83FA84DBFCA994F679242D067CEED64
                                                                                                                      SHA-256:CA0EEF84DBC5964EF2265E9252237BE58BB8D75C34817CC2305CCCFAEC7E690C
                                                                                                                      SHA-512:8A609E7F4868BD455DA811E62142FECD792D0CA0DAAF7C10C4E4254C9EC44B8EB92D388D9224C8FD3CC3FB326A106D831B80F5E1264CCF3EABBCE177BB82E9D6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Chatham) {.. {-9223372036854775808 44028 0 LMT}.. {-3192437628 44100 0 +1215}.. {-757426500 45900 0 +1245}.. {152632800 49500 1 +1245}.. {162309600 45900 0 +1245}.. {183477600 49500 1 +1245}.. {194968800 45900 0 +1245}.. {215532000 49500 1 +1245}.. {226418400 45900 0 +1245}.. {246981600 49500 1 +1245}.. {257868000 45900 0 +1245}.. {278431200 49500 1 +1245}.. {289317600 45900 0 +1245}.. {309880800 49500 1 +1245}.. {320767200 45900 0 +1245}.. {341330400 49500 1 +1245}.. {352216800 45900 0 +1245}.. {372780000 49500 1 +1245}.. {384271200 45900 0 +1245}.. {404834400 49500 1 +1245}.. {415720800 45900 0 +1245}.. {436284000 49500 1 +1245}.. {447170400 45900 0 +1245}.. {467733600 49500 1 +1245}.. {478620000 45900 0 +1245}.. {499183200 49500 1 +1245}.. {510069600 45900 0 +1245}.. {530632800 49500 1 +1245}.. {541519200 45900 0 +1245}.. {56208

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Chuuk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):202
                                                                                                                      Entropy (8bit):4.943709180393636
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3yci/452HAIgObi/4oA6N/ZE/4pv:MByMdNXiU5tVv
                                                                                                                      MD5:7D9980F68F044EB9B7FA7ED2883645F2
                                                                                                                      SHA1:9444DA9D3139F51C6DFDA174C8C52A231215D71E
                                                                                                                      SHA-256:F324CA637180F50DB79FFA25204D974C6A7A6FAEFDA69FD1A280B9F366349A09
                                                                                                                      SHA-512:850577ABD3A3653076797D46AF481343CDF8103AC597EB68F575C5FF4931242C6ACEB054D14E0F6A9A90E5D22069F78027215A4E44FC900292445FDEAFB8F92D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Port_Moresby)]} {.. LoadTimeZoneFile Pacific/Port_Moresby..}..set TZData(:Pacific/Chuuk) $TZData(:Pacific/Port_Moresby)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Easter

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8203
                                                                                                                      Entropy (8bit):3.5469404823178463
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:QXn3AWkHkPp2YXaVU+POtUn4n6MSmSmiTpk9eL6Z5waKkhWILTc:QXn3AWJB2m+POtUnOSmSmS6ZaILg
                                                                                                                      MD5:002F3607DE2061A2E1A8EB8EBCB6E492
                                                                                                                      SHA1:6521B47847CFA76FE45AE5CC649109E4AD6C5262
                                                                                                                      SHA-256:D79A2A67606F25D6420F31129FAE966A54287DE96C661003CCE5F82B618014BC
                                                                                                                      SHA-512:03F3F262538FAF5A1B38832EFA62E3CC41A70BF54E73DE59BC99DCCA035AB002142F42BEDA5BFC2102CD556601E0A278908FDCC838A2211AC63C49A8483CE72B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Easter) {.. {-9223372036854775808 -26248 0 LMT}.. {-2524495352 -26248 0 EMT}.. {-1178124152 -25200 0 -07}.. {-36619200 -21600 1 -07}.. {-23922000 -25200 0 -07}.. {-3355200 -21600 1 -07}.. {7527600 -25200 0 -07}.. {24465600 -21600 1 -07}.. {37767600 -25200 0 -07}.. {55915200 -21600 1 -07}.. {69217200 -25200 0 -07}.. {87969600 -21600 1 -07}.. {100666800 -25200 0 -07}.. {118209600 -21600 1 -07}.. {132116400 -25200 0 -07}.. {150868800 -21600 1 -07}.. {163566000 -25200 0 -07}.. {182318400 -21600 1 -07}.. {195620400 -25200 0 -07}.. {213768000 -21600 1 -07}.. {227070000 -25200 0 -07}.. {245217600 -21600 1 -07}.. {258519600 -25200 0 -07}.. {277272000 -21600 1 -07}.. {289969200 -25200 0 -07}.. {308721600 -21600 1 -07}.. {321418800 -25200 0 -07}.. {340171200 -21600 1 -07}.. {353473200 -25200 0 -07}.. {371620800 -21600 1 -07}.. {384922800

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Efate

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):789
                                                                                                                      Entropy (8bit):4.0457106900970325
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86HmdH6mvCON3Xj/kw2eX/xtDedjX24ots0FX2ud5KRGkpFxy:uegazZBzCdXUFQzy
                                                                                                                      MD5:6841B8A2FB9BBF464AA00088CBDCEC80
                                                                                                                      SHA1:26CC5CCE00A765F8B6493ED24F50957AA7F0089B
                                                                                                                      SHA-256:332372E5EFB46123FBB66F9F32F91B59EBD88ADB956249DB3F14CAAB01CE2655
                                                                                                                      SHA-512:A6C67A0F7361E599369597E9A8A52FC7D5C96DE6B5A7C1BE1D02F5DF11051F448289786C7F0E82E71CDEB825215E64E072CF034C45D6E2F822D7201AB8B41B57
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Efate) {.. {-9223372036854775808 40396 0 LMT}.. {-1829387596 39600 0 +11}.. {125409600 43200 1 +11}.. {133876800 39600 0 +11}.. {433256400 43200 1 +11}.. {448977600 39600 0 +11}.. {464706000 43200 1 +11}.. {480427200 39600 0 +11}.. {496760400 43200 1 +11}.. {511876800 39600 0 +11}.. {528210000 43200 1 +11}.. {543931200 39600 0 +11}.. {559659600 43200 1 +11}.. {575380800 39600 0 +11}.. {591109200 43200 1 +11}.. {606830400 39600 0 +11}.. {622558800 43200 1 +11}.. {638280000 39600 0 +11}.. {654008400 43200 1 +11}.. {669729600 39600 0 +11}.. {686062800 43200 1 +11}.. {696340800 39600 0 +11}.. {719931600 43200 1 +11}.. {727790400 39600 0 +11}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Enderbury

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):188
                                                                                                                      Entropy (8bit):4.82787610497142
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQG11avXHAIgObT11ORL/nUDH7/UDH11B:SlSWB9vsM3yckHAIgObON/h
                                                                                                                      MD5:CD1AC50AADC3CF9C0E7A055D587E790D
                                                                                                                      SHA1:BEE0E16D3954DF33C697DEA469A130BD9875AB8B
                                                                                                                      SHA-256:790E6B48B261D6DEF7D183CC8F38FB8D8A6E3EFB8844281EFABB2DFD621E53B5
                                                                                                                      SHA-512:B6A93DFB4CBE2F35268AACA88FDCC4D19949A2E8DC9464D8341C38065C6FF48A3C49FE756FFCE777C8F806DE309C8AFC4CE4BC4ABD183C28808F995A0F89B091
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Kanton)]} {.. LoadTimeZoneFile Pacific/Kanton..}..set TZData(:Pacific/Enderbury) $TZData(:Pacific/Kanton)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Fakaofo

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.913439535905759
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/nUDH4ErKYofMXGm2OH18VkeoHvmUENBBy/aCPFVFv7Dy:SlSWB9eg/BE3ofDm2OH1VeoHvmH7y/Fy
                                                                                                                      MD5:6250F332356787613A2D1853EF6D1AC3
                                                                                                                      SHA1:0464B9EE8B691990022295D2DEFE1AAE4B247E63
                                                                                                                      SHA-256:336058DCA4802C79ED43F6177ADB73085D4FA0754B94051CAE2A19346B0C4904
                                                                                                                      SHA-512:B8FAB5E128D2EF3CB7050DA717D80247045BE09F7F6542AA154CB85F4A56884F195EE2776421890A3F86D133106DCA4672D7D9329E0DE6F4A7CF8F4030822988
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Fakaofo) {.. {-9223372036854775808 -41096 0 LMT}.. {-2177411704 -39600 0 -11}.. {1325242800 46800 0 +13}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Fiji

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):986
                                                                                                                      Entropy (8bit):3.950865906618592
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:CKeaEa+TkUqOL1X7dMUhSXUmxY8yiUKEMH0Mkxu:9pW15Mmk59NQMk0
                                                                                                                      MD5:E329ACBF859B35950B27F434D725B3F8
                                                                                                                      SHA1:9B46C4318CA0F03E016F8FF68FEE50EA93B22360
                                                                                                                      SHA-256:0FF7AF55C92806751473CBF7A55E860850719BA7255CD65FD630B99E05C7C177
                                                                                                                      SHA-512:84A7491E2C8A6866B40A3673C084ABF3F1E344CB0290C607A0BB06FF19D43EF0B9648CDA6489D10C410D39C700D8C62A8BA11EEF07AD36F5A9AD85C596205939
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Fiji) {.. {-9223372036854775808 42944 0 LMT}.. {-1709985344 43200 0 +12}.. {909842400 46800 1 +12}.. {920124000 43200 0 +12}.. {941896800 46800 1 +12}.. {951573600 43200 0 +12}.. {1259416800 46800 1 +12}.. {1269698400 43200 0 +12}.. {1287842400 46800 1 +12}.. {1299333600 43200 0 +12}.. {1319292000 46800 1 +12}.. {1327154400 43200 0 +12}.. {1350741600 46800 1 +12}.. {1358604000 43200 0 +12}.. {1382796000 46800 1 +12}.. {1390050000 43200 0 +12}.. {1414850400 46800 1 +12}.. {1421503200 43200 0 +12}.. {1446300000 46800 1 +12}.. {1452952800 43200 0 +12}.. {1478354400 46800 1 +12}.. {1484402400 43200 0 +12}.. {1509804000 46800 1 +12}.. {1515852000 43200 0 +12}.. {1541253600 46800 1 +12}.. {1547301600 43200 0 +12}.. {1573308000 46800 1 +12}.. {1578751200 43200 0 +12}.. {1608386400 46800 1 +12}.. {1610805600 43200 0 +12}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Funafuti

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):187
                                                                                                                      Entropy (8bit):4.770127787944403
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQGqhyXHAIgObTq0vFvRL/nUDH4QwyFPUDHqNn:SlSWB9vsM3ycmhSHAIgObmSN/BCLNn
                                                                                                                      MD5:BBB00369FA8DCC23A7824EDB964BF48D
                                                                                                                      SHA1:A97E42B3CC45860CC0DFC62F468B24A628B43973
                                                                                                                      SHA-256:AFFB0A5D9CBD5949F2FC5047820FA2A2798F7C303F7BC972EC49CCF27837B00E
                                                                                                                      SHA-512:2D4C8616308522C987437C39C74E250973C2AC7AA1499C60321F42E84CE52C28D1F6AE81E6390B116C92C7B208EA0F211EB3C5A86E6E4CEE0620014DE5359F4F
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Tarawa)]} {.. LoadTimeZoneFile Pacific/Tarawa..}..set TZData(:Pacific/Funafuti) $TZData(:Pacific/Tarawa)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Galapagos

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):247
                                                                                                                      Entropy (8bit):4.687336389955113
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/fEGDm2OHvQYeoHTie7KVQRncRvinrN5/uFifriX:MB86fhmdH0CTV7OcdrN5/uFiGX
                                                                                                                      MD5:0557D164DCD8DF5D99F7AF5A2AB1AD4F
                                                                                                                      SHA1:68AFD04303E5F541480425405D82E1827F78A8DF
                                                                                                                      SHA-256:192545659F971084ADC8489A2B96A6439FF391599DC962AA13375ACCFB3C09D9
                                                                                                                      SHA-512:1DA004E51F8E7A712EDE920CBB62E81F9F55450FB52B62F78F1CD4F8F4E342B4DAB2C28AA5161E8B24942A7A5BD55F978AFDA1C5E1949241E71D738079DEF9B8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Galapagos) {.. {-9223372036854775808 -21504 0 LMT}.. {-1230746496 -18000 0 -05}.. {504939600 -21600 0 -06}.. {722930400 -18000 1 -06}.. {728888400 -21600 0 -06}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Gambier

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):155
                                                                                                                      Entropy (8bit):4.976931060677737
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/nUDH5hBYfMXGm2OHKToxYoHsdNfis:SlSWB9eg/DDm2OHPxYoH4qs
                                                                                                                      MD5:45330CE0FA604304C6ACF8EF8CAF51EC
                                                                                                                      SHA1:20EEF9646996C2EC9B2641EBCCBE4766BF38B17B
                                                                                                                      SHA-256:190E02A0C00D165FA45C73AEF9C0D6C82B1720E7406E5610DD860AED10A021A5
                                                                                                                      SHA-512:51C7931B503405DA0B4078F6BE411895DD00E86AC7C5BE475030664D5302AD614293541DEE7FFC3D86A9DDB1BDA32BCAA746CF1D207DB063FBA2F9E9BE12836C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Gambier) {.. {-9223372036854775808 -32388 0 LMT}.. {-1806678012 -32400 0 -09}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Guadalcanal

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):157
                                                                                                                      Entropy (8bit):4.9796189407775255
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/nUDH5RyJTLJ5FNMXGm2OHddHvpoxYoHsdMWdHPVtyn:SlSWB9eg/LJHjXDm2OHdFGxYoHgHPLy
                                                                                                                      MD5:DF09960360D8CEDCA2A4DC19A177C4A6
                                                                                                                      SHA1:9F73F271B8C85B25FE6392B8BF7465C92EFFE621
                                                                                                                      SHA-256:161762334DFF48B1D58824911E1FF4171386EA18234DD3DD5B0798515593086A
                                                                                                                      SHA-512:1BE9E0F90DA529C99E317F399BFDB913A076651CF8801A1849247B26A350A76D8B5807AB139F3DBB97790DDFC332BDBEB57B364BF67FA2BB440AFEDC4130A648
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Guadalcanal) {.. {-9223372036854775808 38388 0 LMT}.. {-1806748788 39600 0 +11}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Guam

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):733
                                                                                                                      Entropy (8bit):4.244282318063802
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB862mdHanCTCtBCv1yWQkHHLTaWJ+x+87W0x+8+yWSi+JW7+sWU0dwaW1j+FaW2:FeaC2twvY3knLGs+I87p+8d9i+J7s70c
                                                                                                                      MD5:BA319E451BE323C852A8ABFC299DDA28
                                                                                                                      SHA1:FC9314C162FF1FE1ED5E2C5DF962A55D4D6D8115
                                                                                                                      SHA-256:42CB69ABC83415F63CA7D2A3E5314A41817AEE3206ECCC7172C50A74B1597DB0
                                                                                                                      SHA-512:3BF733B9ED2A57B01BE173A8421B2D5A45888A230461EA0BD8C5B4AC7DC010BB527346731196141C70AFECDF88DD47AFE48636243DFC395D88E58231BEDF7D2A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Guam) {.. {-9223372036854775808 -51660 0 LMT}.. {-3944626740 34740 0 LMT}.. {-2177487540 36000 0 GST}.. {-885549600 32400 0 +09}.. {-802256400 36000 0 GST}.. {-331891200 39600 1 GDT}.. {-281610000 36000 0 GST}.. {-73728000 39600 1 GDT}.. {-29415540 36000 0 GST}.. {-16704000 39600 1 GDT}.. {-10659600 36000 0 GST}.. {9907200 39600 1 GDT}.. {21394800 36000 0 GST}.. {41356800 39600 1 GDT}.. {52844400 36000 0 GST}.. {124819200 39600 1 GDT}.. {130863600 36000 0 GST}.. {201888000 39600 1 GDT}.. {209487660 36000 0 GST}.. {230659200 39600 1 GDT}.. {241542000 36000 0 GST}.. {977493600 36000 0 ChST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Honolulu

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):344
                                                                                                                      Entropy (8bit):4.640604617840767
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/PeDDm2OHsVVoHvBrai3UNFv+rUXaWFvAHovj/0nvCv7p+v:MB86WXmdH0VCvBz0GOTA0/0y74v
                                                                                                                      MD5:F3F0E64655FAA79E40860765EEBB5B77
                                                                                                                      SHA1:7F6C2FC100AEABC26B7205AB53C1E016B12E4D60
                                                                                                                      SHA-256:69319015799D32D3CF7C0A3E9991B4B1F3E0C5D1B4FBF400517350CCA9D2C3B7
                                                                                                                      SHA-512:7C9238BCCB13B90D4DC9B5E776C421A42C25D21B4E026406F57FA1E70983E8F6BF1CE927AB9D0D6261C5C1802A8B810399F506915262F82F487417CFD704B2F1
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Honolulu) {.. {-9223372036854775808 -37886 0 LMT}.. {-2334101314 -37800 0 HST}.. {-1157283000 -34200 1 HDT}.. {-1155436200 -34200 0 HST}.. {-880201800 -34200 1 HWT}.. {-769395600 -34200 1 HPT}.. {-765376200 -37800 0 HST}.. {-712150200 -36000 0 HST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Johnston

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):193
                                                                                                                      Entropy (8bit):4.844454917943834
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3yc6e8SHAIgOb6eKAN/NWyVheo:MByMdniinbtNWzo
                                                                                                                      MD5:4244078A03C2493009EF2F6BDA2F326F
                                                                                                                      SHA1:AC2FF3E91A8831A479B33DF32A0118BC2EB255D0
                                                                                                                      SHA-256:6E52B361AC8A6A578C709F6D58AA7535F06C0CB1707081C2D5A63FA8545D955C
                                                                                                                      SHA-512:398B32E0FAF80E40DF3ACD203DF380D61DC39322F0BA0388A18281BC26973945F45683A104B9A785BB9DF5E514322F6994F934289E4B56B7982F94D4528D4272
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Honolulu)]} {.. LoadTimeZoneFile Pacific/Honolulu..}..set TZData(:Pacific/Johnston) $TZData(:Pacific/Honolulu)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Kanton

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):208
                                                                                                                      Entropy (8bit):4.669308556946547
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/KyXDm2OHEMmzQwXy29BVyv7y/fTVVFty:MB86KyTmdHEZzQUBVyDy/fZvty
                                                                                                                      MD5:544A0A83241333805192A6F03888E359
                                                                                                                      SHA1:99D2BE79D57B44BD538386F9E7551C9E1874D7E3
                                                                                                                      SHA-256:0B1345555EC2B4738CC4DEBFE496C287966F238386263032FF1E27912CCBFBA6
                                                                                                                      SHA-512:61C91265632D01FBB7F4C739368756C428258FA6C141E49E88B6C78ABEA6150A74B8DFCF14C5AADDA03C1EA6F04D122734654495C26B8614561786B1C5C7EF10
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Kanton) {.. {-9223372036854775808 0 0 -00}.. {-1020470400 -43200 0 -12}.. {307627200 -39600 0 -11}.. {788871600 46800 0 +13}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Kiritimati

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):219
                                                                                                                      Entropy (8bit):4.739672105601744
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/iSDm2OHjkeoHvmLVFFz4YWXfSzvjNv:MB86iGmdHpCvU4VfSbxv
                                                                                                                      MD5:1B695BBB9C50F6AFC05F67DE30374160
                                                                                                                      SHA1:08AD8BBB6C99EB36FC3E462DB41C6896F52F150C
                                                                                                                      SHA-256:4F7235B956A5A01676BE05275E086D5157EBC24FD91022E87817020669F915F7
                                                                                                                      SHA-512:DC35CB1C2E5E035A82F91D1B1F4B48D7B112D9B7A1A7DB9C4A4C42C4D58002E1ECD9D24B2EA5B624DBB526ADDF9A8AB37D4315843207C34C16B2EFE33A254752
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Kiritimati) {.. {-9223372036854775808 -37760 0 LMT}.. {-2177415040 -38400 0 -1040}.. {307622400 -36000 0 -10}.. {788868000 50400 0 +14}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Kosrae

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):394
                                                                                                                      Entropy (8bit):4.441317927120857
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB869nmdHlCTvrvCvKcHwzHHI/HKOjHHwZaLYkcy:2ecrrqvGznISknwZaLxcy
                                                                                                                      MD5:B489D7BDE8EB805B2A24726A6FB0C441
                                                                                                                      SHA1:7997A33AA56857EC52B1198DBEF4CE1DB50D69FD
                                                                                                                      SHA-256:B528E5E712E5F878603183E7CCFF55E5DB97CB47D7628BCB635342796317B899
                                                                                                                      SHA-512:4898AC2747FB8620BE29933CC7AA344AF1A3B7777D1AFF08BB4C6CE6E7AF205581937CCB488F3CB39CC8CA7FB42EDC8E1CAD8BADC9FCA40E3CAD23271CD66FCB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Kosrae) {.. {-9223372036854775808 -47284 0 LMT}.. {-3944631116 39116 0 LMT}.. {-2177491916 39600 0 +11}.. {-1743678000 32400 0 +09}.. {-1606813200 39600 0 +11}.. {-1041418800 36000 0 +10}.. {-907408800 32400 0 +09}.. {-770634000 39600 0 +11}.. {-7988400 43200 0 +12}.. {915105600 39600 0 +11}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Kwajalein

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):304
                                                                                                                      Entropy (8bit):4.5947337310364835
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/yEyDm2OH4T2eoHvmfKnOjvScHrkL/Xy2185k0YAov:MB86XmmdHWCv6KOjHHgLN8tby
                                                                                                                      MD5:7D1FC9913941693ACBD6A3CCB2F34555
                                                                                                                      SHA1:D07C8AAED1DF9614BCA6EEF0F72FB98BE46CF5EF
                                                                                                                      SHA-256:38133BE70100D7DC244A680827879E6B240646C7C0B68F58652051E681A71985
                                                                                                                      SHA-512:419F0A1D1D71C8F84765C7B54271D7EFD6A81F428751523A214ABB24A8770DD5A7666F634A20AF97D5AAB8F21C0DEF23DCDE068CF4C1CCC7639ABC43864A9DBC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Kwajalein) {.. {-9223372036854775808 40160 0 LMT}.. {-2177492960 39600 0 +11}.. {-1041418800 36000 0 +10}.. {-907408800 32400 0 +09}.. {-817462800 39600 0 +11}.. {-7988400 -43200 0 -12}.. {745934400 43200 0 +12}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Majuro

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.7986219497241995
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQGqhyXHAIgObTq0vFvRL/nUDHznHlUDHqNn:SlSWB9vsM3ycmhSHAIgObmSN/QxNn
                                                                                                                      MD5:EB409C340A475B60993965A0E2892B6E
                                                                                                                      SHA1:819881A078F34EF8FC55D71D829B82C56E6723D7
                                                                                                                      SHA-256:935BC00C13863715D09463E54DC2A6FF0F1A7EEA8D5895C87836AA59716CBD57
                                                                                                                      SHA-512:A28AF85022F8B3C2EE5F93BF6FDC0C349B73F25D88BA151ACE424EED1A95FA29608A6B1AD3D5FD952B2FB7F48DF6FDF8E6504F2B53E6782E4FF73335AF9A15C0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Tarawa)]} {.. LoadTimeZoneFile Pacific/Tarawa..}..set TZData(:Pacific/Majuro) $TZData(:Pacific/Tarawa)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Marquesas

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):159
                                                                                                                      Entropy (8bit):4.976348164850869
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/nUDHzrHeWNMXGm2OHOx5oHsdNpNFvvIVVFvYy:SlSWB9eg/cHeSDm2OHOnoH4/FvQVVFAy
                                                                                                                      MD5:80CB45F42BAB1AA72CD7C7BC394DF3F8
                                                                                                                      SHA1:8B5ED2BCCA1AEB41F22AFD14F46533959828B2BE
                                                                                                                      SHA-256:AE0B5055C6E57516F23749B13681205EAD376E682959716A457B1377AF8160BA
                                                                                                                      SHA-512:71562E340B7A96B91D04FCBCAF71B66EA725CA1BD1094343C4442F8F9A8C67A3BE378034849197407D21C3EE74E2C753B1FD3BAFF2378714B993AD9336236A0E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Marquesas) {.. {-9223372036854775808 -33480 0 LMT}.. {-1806676920 -34200 0 -0930}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Midway

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):194
                                                                                                                      Entropy (8bit):4.81307101485774
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQGurKeTnXHAIgObTurKefVHRL/nUDHz0HvUDHurKv:SlSWB9vsM3yciemHAIgObiecN/Zevn
                                                                                                                      MD5:13CE48F8FF74BFCEFCB8D217D6357E38
                                                                                                                      SHA1:296D31E3F868934C6EB34BF1BF4C23F3E1839294
                                                                                                                      SHA-256:F62C6A2DEC1E9EC78115D5F14E5B9DB7C86F788662D2E68F7E6714F4A05DC974
                                                                                                                      SHA-512:778813FC08EF803743F392000BECE73C1C079883DAFC26FAC0AF8FA3FA4AE1D94BA8F3CAA5E82DD4DB1A5F12AD49E123901908F5483E0E325952622AB4C4A26A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Pago_Pago)]} {.. LoadTimeZoneFile Pacific/Pago_Pago..}..set TZData(:Pacific/Midway) $TZData(:Pacific/Pago_Pago)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Nauru

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):244
                                                                                                                      Entropy (8bit):4.702705620563736
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/JdDm2OHceoHx6sCH/ZdqvScH9cd0YAov:MB86J5mdH9CMhcHHauby
                                                                                                                      MD5:30A8285FCCE2E98889E53DF60B906C3D
                                                                                                                      SHA1:C7789CB11A2C8FE3861FF3C0A7A41F6CAFD87631
                                                                                                                      SHA-256:22C367F3219B5FC736260D9DBFEF5FCB767F1A6BDA991C9352F790A3D1FFE884
                                                                                                                      SHA-512:02DA82680588839B06F820979AECC78B7FBEAB9D6D49176B513B80F1C8BA2D55FB3674B19EFDD574EE6FC01539EF7C3081A4B34D14A54DACF367D816B62E5843
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Nauru) {.. {-9223372036854775808 40060 0 LMT}.. {-1545131260 41400 0 +1130}.. {-862918200 32400 0 +09}.. {-767350800 41400 0 +1130}.. {287418600 43200 0 +12}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Niue

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):184
                                                                                                                      Entropy (8bit):4.846897598147338
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/nUDHwMQA3WNMXGm2OH0SNoHoRWVGXyOyovFaSUGFAZvBByV:SlSWB9eg/Jm3SDm2OHJoHFGXCodZUGFd
                                                                                                                      MD5:6E8EC957423917AE7A7EF503661C1A77
                                                                                                                      SHA1:B4FA3C3E3F96C28B7DB87BFD441D2EE99CC81B6F
                                                                                                                      SHA-256:869CCA656BE88E4E7481C75737C3656BAB6924AD1751505815AC719C59269842
                                                                                                                      SHA-512:9047ABE673259699C7A548BC7B5636DD646DD382C751B796522F65404162AB1B0BB022FD274653921E5B23C847EE248AEF6749E15ED2CFC1DCE35BBA294D8251
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Niue) {.. {-9223372036854775808 -40780 0 LMT}.. {-543069620 -40800 0 -1120}.. {-173623200 -39600 0 -11}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Norfolk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5139
                                                                                                                      Entropy (8bit):3.65794255179185
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:K/yg8hZbeS07HbbYTqge+gDrWnAxhejtB0e+Pwn1UVimqNQrKvyXrStkCDv:K/y7hNeS07sq0Erk10lINQrKvyXrwv
                                                                                                                      MD5:E19700A894AA64715D14F501D8D2FA98
                                                                                                                      SHA1:57CFC96E2EBB985720DB290F59181860AF2AC1AA
                                                                                                                      SHA-256:5D16C3EF1DB996C1B8E33AD884C33946F77DA872F35F41EC3BD5B288F43CC9AF
                                                                                                                      SHA-512:E11EAF2A7B217CDBEECB57635184F04171F0DB088FCC4702AA8D40A3A5453904592F5869849913E2EB02DC5941C84203A76D270E8930B0B691A3B9C39B78BF30
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Norfolk) {.. {-9223372036854775808 40312 0 LMT}.. {-2177493112 40320 0 +1112}.. {-599656320 41400 0 +1130}.. {152029800 45000 1 +1230}.. {162916200 41400 0 +1130}.. {1443882600 39600 0 +11}.. {1561899600 39600 0 +12}.. {1570287600 43200 1 +12}.. {1586012400 39600 0 +12}.. {1601737200 43200 1 +12}.. {1617462000 39600 0 +12}.. {1633186800 43200 1 +12}.. {1648911600 39600 0 +12}.. {1664636400 43200 1 +12}.. {1680361200 39600 0 +12}.. {1696086000 43200 1 +12}.. {1712415600 39600 0 +12}.. {1728140400 43200 1 +12}.. {1743865200 39600 0 +12}.. {1759590000 43200 1 +12}.. {1775314800 39600 0 +12}.. {1791039600 43200 1 +12}.. {1806764400 39600 0 +12}.. {1822489200 43200 1 +12}.. {1838214000 39600 0 +12}.. {1853938800 43200 1 +12}.. {1869663600 39600 0 +12}.. {1885993200 43200 1 +12}.. {1901718000 39600 0 +12}.. {1917442800 43200 1 +12}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Noumea

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):326
                                                                                                                      Entropy (8bit):4.531117764974758
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9eg/JcSDm2OHTYoHgnX2czO/FxgV62JFy:MB86JcGmdHTYCgX2czUjgM2ny
                                                                                                                      MD5:2F1E92A11DF44C72DC305C13111DEA35
                                                                                                                      SHA1:847F551C3D6C75CD2D0D6D87FCF3294CA8DD90B2
                                                                                                                      SHA-256:238683C027D2319C33D975A837E9FC9D24DD53B1A67108EDBF7ABDF0DB050881
                                                                                                                      SHA-512:E35D8C71AFDBB9A7507E873925001AEDE3734B1D235F509D19952E85279CBCC233A73412EA1F79CB534A45D36FEAA8AFDA98D9964DC93C7892B318F4AFC9A076
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Noumea) {.. {-9223372036854775808 39948 0 LMT}.. {-1829387148 39600 0 +11}.. {250002000 43200 1 +11}.. {257342400 39600 0 +11}.. {281451600 43200 1 +11}.. {288878400 39600 0 +11}.. {849366000 43200 1 +11}.. {857228400 39600 0 +11}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Pago_Pago

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):188
                                                                                                                      Entropy (8bit):4.985607855830399
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/nUDHurKeTFfXMXGm2OH2ivkeoHvUPi1TsYoHsdfWTVvvVFv:SlSWB9eg/XecDm2OH23eoHvWieYoHiWB
                                                                                                                      MD5:E86D90DAA694B0EAC42F8C01346BC95B
                                                                                                                      SHA1:CD29DEFC291C939296E86DC7EF5D0654D85285E8
                                                                                                                      SHA-256:CCA96640AB3BC707224FA86D9AF66F9D53A204A97B370B2785BA8208688BF8B6
                                                                                                                      SHA-512:937BA420061E3781F831779B458E914A0FC465C4B41796F8B7CB1E548822F5777A6450FC6002AB13EBC5C9F54E374D3ED731D05B2B302B95359BE34094E5062B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Pago_Pago) {.. {-9223372036854775808 45432 0 LMT}.. {-2445424632 -40968 0 LMT}.. {-1861879032 -39600 0 SST}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Palau

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):183
                                                                                                                      Entropy (8bit):4.919381181565273
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/nUDHugEZF3fMXGm2OHKvkeoHucRbgnJnoHvmdQ4+vScFAy:SlSWB9eg/Xg2PDm2OHK8eoHTWJnoHvmi
                                                                                                                      MD5:2E6C7EC61C7E29A147475C223B163F6B
                                                                                                                      SHA1:3A98D3441335224E7EBC0648990BCA1DE3BDF5C6
                                                                                                                      SHA-256:97DE6C2C717BFEAD00F83B5D39D654C32CEE580226F5F084484EBAD57BBCE7FF
                                                                                                                      SHA-512:5868C43966DDEBA8EC4BBBB29CDFDDFF0C7B01FD4D579FF655F3363029059F969B39C9221190672B6A2F7938583594AA0B103FC2A7ED573E2BC1C3A1623DE8DD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Palau) {.. {-9223372036854775808 -54124 0 LMT}.. {-3944624276 32276 0 LMT}.. {-2177485076 32400 0 +09}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Pitcairn

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):188
                                                                                                                      Entropy (8bit):4.809907977056877
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/nUDHuQTWLMbNMXGm2OHUVFvoHvmXUlgloWkcyf/vGpn:SlSWB9eg/XQyLMJDm2OHUVVoHvmXUKm2
                                                                                                                      MD5:3F4987676F9C461895EDF9985AD22E06
                                                                                                                      SHA1:A96E470209010B837EF5BB3AC93BAE74BF2CCF64
                                                                                                                      SHA-256:5D363729A986E24C79F4B817CC88D2B22ACCCE3ADD20138D51C4422C4297AD6F
                                                                                                                      SHA-512:988FB98EFD3F57F5D66A932CC6B9D0387E9B0951FC590E08DAF19ACF5E4F39BC1B25265F16E14930BCF394902F5F0EF507E0E91C98902DFB10FA16D716091AB0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Pitcairn) {.. {-9223372036854775808 -31220 0 LMT}.. {-2177421580 -30600 0 -0830}.. {893665800 -28800 0 -08}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Pohnpei

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):201
                                                                                                                      Entropy (8bit):4.7682565894416005
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3ycaJHNPHAIgObaJHa6N/XyopJHYn:MByMdaJyiaJrtCopJ4n
                                                                                                                      MD5:1B418E3A4239AAFE1E15B57FFF913FA1
                                                                                                                      SHA1:0E278FCC058DE1B3F4715771819F14568A6C10BB
                                                                                                                      SHA-256:F744CD8337C5C72023D61F348DD03F48824F817D62F54ACC6A23DDD8B0F9EDC4
                                                                                                                      SHA-512:8E3E10B41CF64A07411B272C0BCA6DC7AA9FFBF625B31075651603B7D0A52A719F7174A67593BFDE45725C243D347D01560B2BC7813C2ABD2F4BF4B1BAD57E56
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Guadalcanal)]} {.. LoadTimeZoneFile Pacific/Guadalcanal..}..set TZData(:Pacific/Pohnpei) $TZData(:Pacific/Guadalcanal)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Ponape

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):200
                                                                                                                      Entropy (8bit):4.742862539020017
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3ycaJHNPHAIgObaJHa6N/X3HpBJHYn:MByMdaJyiaJrtHpBJ4n
                                                                                                                      MD5:514C399D990C87271812440A4B19FB21
                                                                                                                      SHA1:E1512482D10C8984DCD69C883F07C412E144081A
                                                                                                                      SHA-256:5BB11553F711BD591617F657A9D1811CC3E3FB46374F6867316A7C8F6B3765D9
                                                                                                                      SHA-512:DB227134822EA73407B6C0259FF7413D4961B558F3018BFF51E4E426DDB2DF581DCF7A6DE9E4890CE35F785BC3D07CC880DA883C93D73FFB249F403701BD8023
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Guadalcanal)]} {.. LoadTimeZoneFile Pacific/Guadalcanal..}..set TZData(:Pacific/Ponape) $TZData(:Pacific/Guadalcanal)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Port_Moresby

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):190
                                                                                                                      Entropy (8bit):4.945354510868153
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/nUDHuwKXI3SMXGm2OHwdvoHvZUeQTnoo3v/vnqMVVMUMy:SlSWB9eg/X/43SDm2OHwdvoHvZZQTnoQ
                                                                                                                      MD5:2CFB7C2A3D26D7AF0F6AE32ADD81C364
                                                                                                                      SHA1:80C96E50D23A9A9531E4EE33744CF445C054B901
                                                                                                                      SHA-256:124C137B091D9D54D5E0579131485428FAAE040ACC978D20D6A8C8E4DE9889AA
                                                                                                                      SHA-512:A215FF5A69BD3E786BD3F8C952C8593396402EFA85005F5342093028617A6862EAE8BFD7B6D5737F90D90897AB62CF785544A4157A222AE4D0F70797FFBEC2CB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Port_Moresby) {.. {-9223372036854775808 35320 0 LMT}.. {-2840176120 35312 0 PMMT}.. {-2366790512 36000 0 +10}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Rarotonga

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):969
                                                                                                                      Entropy (8bit):3.943959457262612
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86VrjmdHI5Cvn9HCFkN00hjNFq++UE+q0hwA+A7VxVnDEFn:IeZv8w0MNFq+xE+uAtx1c
                                                                                                                      MD5:64AD3A103F4D145C48484BF8FACF41C2
                                                                                                                      SHA1:40C00CFA56C87E506C254A93A164D7227DFF3BD5
                                                                                                                      SHA-256:5AB006A686E564E30C94884FF8A9D728AEC74681DA8772E9722B6FE203630B5D
                                                                                                                      SHA-512:D1088C3B673B5456A8706B69BE4D7AB18615EE53A82BF4ABE76E86700837E6BAD0BD79C13EDA9B04776B08A95B835BA755AA565F86E45BFE507E8783896C1EE2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Rarotonga) {.. {-9223372036854775808 48056 0 LMT}.. {-2209555256 -38344 0 LMT}.. {-543072056 -37800 0 -1030}.. {279714600 -34200 0 -10}.. {289387800 -36000 0 -10}.. {309952800 -34200 1 -10}.. {320837400 -36000 0 -10}.. {341402400 -34200 1 -10}.. {352287000 -36000 0 -10}.. {372852000 -34200 1 -10}.. {384341400 -36000 0 -10}.. {404906400 -34200 1 -10}.. {415791000 -36000 0 -10}.. {436356000 -34200 1 -10}.. {447240600 -36000 0 -10}.. {467805600 -34200 1 -10}.. {478690200 -36000 0 -10}.. {499255200 -34200 1 -10}.. {510139800 -36000 0 -10}.. {530704800 -34200 1 -10}.. {541589400 -36000 0 -10}.. {562154400 -34200 1 -10}.. {573643800 -36000 0 -10}.. {594208800 -34200 1 -10}.. {605093400 -36000 0 -10}.. {625658400 -34200 1 -10}.. {636543000 -36000 0 -10}.. {657108000 -34200 1 -10}.. {667992600 -36000 0 -10}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Saipan

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):179
                                                                                                                      Entropy (8bit):4.854594370903023
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQG5RFeyXHAIgObT5RV5RL/nUDHtluKpUDH5Rgn:SlSWB9vsM3ycdeSHAIgOb7N/vKbn
                                                                                                                      MD5:EFC985F07B24BEDA22993C9D0EA7E022
                                                                                                                      SHA1:6D05D12925621F1D05999A5DCC81B8C6F4D18945
                                                                                                                      SHA-256:4F6A1C20A11E186012466091CD4B3C09D89D35E7560F93874DEC2D7F99365589
                                                                                                                      SHA-512:5FB4D8784D2EB8AEF660D6CBC7C403561EE5874BEC0439762F3688C64830B52B1F557B467CA65B64B1210E82F385E134BF676F3CA443FB480702A2C90B3C3757
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Guam)]} {.. LoadTimeZoneFile Pacific/Guam..}..set TZData(:Pacific/Saipan) $TZData(:Pacific/Guam)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Samoa

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):193
                                                                                                                      Entropy (8bit):4.78073436515702
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQGurKeTnXHAIgObTurKefVHRL/nUDHthA5nUDHurK:SlSWB9vsM3yciemHAIgObiecN/NXevn
                                                                                                                      MD5:8E335F5D0A2082BB673E7FEB56167A89
                                                                                                                      SHA1:EF37235922D4477AC9B3D9576888CDE41E700741
                                                                                                                      SHA-256:98D06302EFC18FAD7751F7E5A059FE4ABAFBC361FDC365FE1EB576209D92C658
                                                                                                                      SHA-512:2572D99EE8BAF264B8A2EF3D7647D33A387EE83E036F9E7BDB21F64C2FCB43317AF9C899C8CDD822A2A5A207EF17504E71B217370473ED95AE925BBA2CFA90F9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Pago_Pago)]} {.. LoadTimeZoneFile Pacific/Pago_Pago..}..set TZData(:Pacific/Samoa) $TZData(:Pacific/Pago_Pago)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Tahiti

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):154
                                                                                                                      Entropy (8bit):4.946903999617555
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/nUDHqhFPMXGm2OHl/oeoHsdNqRU7vV:SlSWB9eg/TTPDm2OHloeoH4qRW9
                                                                                                                      MD5:341B0F535043051A91A21297BFA39DC0
                                                                                                                      SHA1:6AD9177FC237503E6D36DE5408790A68D5D36E2C
                                                                                                                      SHA-256:440A87DDB4F304DCBEAED1B0DE8F6058840E597918B688E0782F584DA03B1BBC
                                                                                                                      SHA-512:D97D399A0F1B4347F8AE5F15E43A8787697339AB0EFB4E1106C790528FFC529ADC5B44B231D95449D39DB464D84A5DDF7B61E7D190E3E2B0091D1EC204B530A2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Tahiti) {.. {-9223372036854775808 -35896 0 LMT}.. {-1806674504 -36000 0 -10}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Tarawa

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):152
                                                                                                                      Entropy (8bit):4.969953728206455
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QF08x/nUDHqQ3fMXGm2OHyyFpoeoHvmciRrWFN0UIoAov:SlSWB9eg/T+Dm2OHyyFGeoHvmbu0YAov
                                                                                                                      MD5:AA67FBBB6A02F5B30486C54E3A5C11D7
                                                                                                                      SHA1:C64FD3654A47A0ECDD681B8A4D9B621AC6D97DBE
                                                                                                                      SHA-256:91AA5DA8D5D1E72B1F561D0AEAB4B07E02EDD4EB95AE8C9F1C503C820460599F
                                                                                                                      SHA-512:FC170904098011C091622A263CA554CEE952D64888D3573EB324E0A262E1A0C0885C059429F0FFF9219FEB8F1B6B97EC34661DD8DD547124D0C6C0A1C8EE24B7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Tarawa) {.. {-9223372036854775808 41524 0 LMT}.. {-2177494324 43200 0 +12}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Tongatapu

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):451
                                                                                                                      Entropy (8bit):4.343299747430587
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:MB86PmdHmCdC/V7XZXw8Ut2rbUtGiAUtb4bUtqVy:iemn/VbKeOSy
                                                                                                                      MD5:87CFDA2399A8126117E5BFC018B06518
                                                                                                                      SHA1:6291611BCFB34293F9C20BA77170A13C1502C2ED
                                                                                                                      SHA-256:ECC9D2E7AD7B5E5D6599CF442941595C99C4D69E802A4DDB4DA321898CDDE91D
                                                                                                                      SHA-512:846FE07FEB82EC5F87FAE137D23074934246DBB7C7EE30F44F6C5373183B5FD2211B58E5CF1AB9A47938D282CA322FBDE80B58054FE6517CDC549992439F19A8
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:Pacific/Tongatapu) {.. {-9223372036854775808 44352 0 LMT}.. {-767189952 44400 0 +1220}.. {-284041200 46800 0 +13}.. {915102000 46800 0 +13}.. {939214800 50400 1 +13}.. {953384400 46800 0 +13}.. {973342800 50400 1 +13}.. {980596800 46800 0 +13}.. {1004792400 50400 1 +13}.. {1012046400 46800 0 +13}.. {1478350800 50400 1 +13}.. {1484398800 46800 0 +13}..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Truk

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):201
                                                                                                                      Entropy (8bit):4.903352083734246
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3yci/452HAIgObi/4oA6N/TAOA/4pv:MByMdNXiU5trv
                                                                                                                      MD5:443F5FFA58C5DB1F02695C5B76DF4F5E
                                                                                                                      SHA1:115AFE9C3EB36F836E2DF95AF42C43EA5C21C1E6
                                                                                                                      SHA-256:323A858946A2E8EC67C28176977D646C0A0F6DC8B48F9C4A3F8E7112C9B1B71D
                                                                                                                      SHA-512:33717F3423CE06D827445FEA85BE8A989712CF8C06C54A17B9610A4DAD50BF64CAE80DE15AB12AB0610CD6B5582A897DD9C543098108543FA3E6273AAD9467DE
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Port_Moresby)]} {.. LoadTimeZoneFile Pacific/Port_Moresby..}..set TZData(:Pacific/Truk) $TZData(:Pacific/Port_Moresby)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Wake

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):183
                                                                                                                      Entropy (8bit):4.771810884789573
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQGqhyXHAIgObTq0vFvRL/nUDHpbhpUDHqNn:SlSWB9vsM3ycmhSHAIgObmSN/0h9Nn
                                                                                                                      MD5:992D44D728747D79E1F7EF47E3CB2EF2
                                                                                                                      SHA1:8F05E8DA2A2A45F04B9B89BB34F0B7833B56A261
                                                                                                                      SHA-256:B6041BC18B595E38953632ACAD1D25F7394BF7C759A72FCCD81AF637F8016373
                                                                                                                      SHA-512:C59D360941240C8B11D892A930B6CFE141B1A55007483683AF400B1A0C98EF0BBBE7EF595EF6BA73A6EECB8E3D0658A681CF3203E5E32DE80DD61EDB9C6CBDB0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Tarawa)]} {.. LoadTimeZoneFile Pacific/Tarawa..}..set TZData(:Pacific/Wake) $TZData(:Pacific/Tarawa)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Wallis

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.752883303864462
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQGqhyXHAIgObTq0vFvRL/nUDHpEsppUDHqNn:SlSWB9vsM3ycmhSHAIgObmSN/t+9Nn
                                                                                                                      MD5:862ADA129322E53235ED5099A72FE8EE
                                                                                                                      SHA1:7DAB7BF451CF0FE483EA512C0C733B090FF22EFF
                                                                                                                      SHA-256:9601B749413D591D820AFAD431B3C30E577ACAB000EA11EC03DEB36EF0738DC3
                                                                                                                      SHA-512:D9C94BE2F08220E49A336A5760DBF43FCB889ADA95E29117AE5E237E33E9EE50BD32203D2743346A21354AF3F1ADDA43A2953FB55205B6FA998A6294CC57F063
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Tarawa)]} {.. LoadTimeZoneFile Pacific/Tarawa..}..set TZData(:Pacific/Wallis) $TZData(:Pacific/Tarawa)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Pacific\Yap

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):200
                                                                                                                      Entropy (8bit):4.896778032757086
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3yci/452HAIgObi/4oA6N/eP/4pv:MByMdNXiU5teev
                                                                                                                      MD5:343CCAC12AEB0DD78FC60405DF938729
                                                                                                                      SHA1:B7B4DF0178DEEC2BA6F23AF5CD896CF16CEAF224
                                                                                                                      SHA-256:16CF9FAB116E5E1732B4B601DA919798985A0C15803F0964844C7040894C5DBA
                                                                                                                      SHA-512:041609C63E95322460A31AC83BCC4F8F90B8D44B2740A5CF7E37F66CCD9F928416D74D313370516D7B1780DF2C9C9A78B7069CE2DA6BFFE88C46FB47CE1A4CB2
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Port_Moresby)]} {.. LoadTimeZoneFile Pacific/Port_Moresby..}..set TZData(:Pacific/Yap) $TZData(:Pacific/Port_Moresby)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Poland

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):174
                                                                                                                      Entropy (8bit):4.940195299412468
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVqEGIV5XHAIgoqpEGYvWARL/nSi67x/yQa0EGIy:SlSWB9vsM3ymc4HAIgocVAN/27x6qF
                                                                                                                      MD5:E6AA2F6A05B57AA9B4AEF8E98552EEB2
                                                                                                                      SHA1:22470C204152702D8826CA52299E942F572C85ED
                                                                                                                      SHA-256:C27E1179B55BF0C7DB6F1C334C0C20C4AFA4DBB84DB6F46244B118F7EAB9C76E
                                                                                                                      SHA-512:B28A264907C32F848D356FB0F5776C2CE819DCB6BC08A5E2DCD4FA455EE1616966E816748079C7A55485BABFFB292D567E6F958168F945889E33A267B0E7EDA9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Warsaw)]} {.. LoadTimeZoneFile Europe/Warsaw..}..set TZData(:Poland) $TZData(:Europe/Warsaw)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Portugal

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):176
                                                                                                                      Entropy (8bit):4.9353841548970205
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVxMvLS3vXHAIgoqyMvLL6RL/nM24h8QavMvLBn:SlSWB9vsM3ymvMv2PHAIgovMvH6N/e8i
                                                                                                                      MD5:7D7BD6E40D3ADCA04754255D69B5CC9D
                                                                                                                      SHA1:EE32167B450DE7B0F1A15199795AEF9524BE623B
                                                                                                                      SHA-256:EFD666F3062D52C5D0B4F83B1A206E6840C1EAEC356CD77A0A71C7EDFA78C964
                                                                                                                      SHA-512:6056AAF078316A89079D19555F0BAEFB4C1CDBAA5426A8BEE76E0BFA5C69A5DAAFD199DEF978ABD67287AE1B80F754B7845EAFD5CC0995FE10E44D1F34D5435C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Lisbon)]} {.. LoadTimeZoneFile Europe/Lisbon..}..set TZData(:Portugal) $TZData(:Europe/Lisbon)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\ROC

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):165
                                                                                                                      Entropy (8bit):4.795776391333205
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8qMveyXHAIgNqBLFARL/lOr4WFKfMy:SlSWB9vsM3yKMveSHAIgcBJAN/S4wKfB
                                                                                                                      MD5:C5AE3A1DAD32C870651C74E367F604CF
                                                                                                                      SHA1:9FF81383C43D98441841E182BC783381EF565204
                                                                                                                      SHA-256:9AEC39777013B23D63D0509EBB2F01D57A2C1592264DBB19CE2C61C7D7DDD8DE
                                                                                                                      SHA-512:3A7217ED885011972262B71DB7F5D7E4C9C6E82B4BEEF0718BCB9452E49FDBDD5ED78564156577AB09150140B862E1944B4B739BCE0C50E63667050C35329503
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Taipei)]} {.. LoadTimeZoneFile Asia/Taipei..}..set TZData(:ROC) $TZData(:Asia/Taipei)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\ROK

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):162
                                                                                                                      Entropy (8bit):4.900717350092823
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq8ZQckovXHAIgNtvQMHRL/lmFeWFKKQ7:SlSWB9vsM3yJJHAIgbHN/pwKv
                                                                                                                      MD5:59E4C80F97FAFC92987B08BFA03B5EE5
                                                                                                                      SHA1:4F86FCE17A51C3789DEB887BE01A1A0E6EA3D2DE
                                                                                                                      SHA-256:63153B40225270ADB7CD248788CA9F18C6DEBAF222B3165BBAB633337592DF44
                                                                                                                      SHA-512:9FCC0F747096775D0FB8DD252A73E6F47C16BF2D7DB0C3FBDFD206EE57393276FB40F65C1441296AE2AC115CFEE11098474DF3FEF8EE1FABE139427A8991F052
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Seoul)]} {.. LoadTimeZoneFile Asia/Seoul..}..set TZData(:ROK) $TZData(:Asia/Seoul)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Singapore

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):180
                                                                                                                      Entropy (8bit):4.85623787837429
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyq801c3vXHAIgNtK1tyHRL/kZ8O5h4WFKf1z:SlSWB9vsM3yUgHAIgWv6N/kth4wKf9
                                                                                                                      MD5:5EABBAAF3B29B5DFF9E54136F7ABC654
                                                                                                                      SHA1:44615F03264012D97512F9AB386413DD72BE1090
                                                                                                                      SHA-256:B9443FB17F0128DDB9F2DF657DC5D2DF176F64C61B0D02B272E5DFB108537678
                                                                                                                      SHA-512:B930D637A1E69E0847ADDEAB013B2C25BC27EBB9CDF20B9CDDFDAC111E9F26BB5EBC83194E845ACC3E1B9A08C386C94FCC4FDE32292EB558E3F7463832BB38B9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Asia/Singapore)]} {.. LoadTimeZoneFile Asia/Singapore..}..set TZData(:Singapore) $TZData(:Asia/Singapore)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\AST4

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):201
                                                                                                                      Entropy (8bit):4.996391010176349
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSNJB9vsM3y7p5oeSHAIgppON/kjx+90ppv:JByMYbpwt8+90b
                                                                                                                      MD5:1AC81E2C60D528A6C5BF2E6867146813
                                                                                                                      SHA1:73D2D24FE6D56CA34ABF11B9A95DC22F809C5158
                                                                                                                      SHA-256:978C4E5256057CE7374AD7929605090FC749B55558495BD0112FB0BB743FA9C2
                                                                                                                      SHA-512:DB2673FB54C1308BBEB298A186F9130FB9090CE33B958C82D62B9BD88EE39BAB9A1BE40645547BA4167FD475892A323CF8EBA16C97F6FDF5693F1BF7A313FE9A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Puerto_Rico)]} {.. LoadTimeZoneFile America/Puerto_Rico..}..set TZData(:SystemV/AST4) $TZData(:America/Puerto_Rico)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\AST4ADT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):192
                                                                                                                      Entropy (8bit):4.9470542553730255
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFLLJJT8QFtFb+MuUyqx02NEO/vXHAIg202NEqA6RL/kRDwh4IAcGE2NEOyn:SlSNJB9vsM3y7UEOXHAIgpUEqA6N/k+H
                                                                                                                      MD5:2AB4B896957F26B114A990F69989F3FB
                                                                                                                      SHA1:8048C99F5EE02C021F311709B30EB28D650D884D
                                                                                                                      SHA-256:0114C111F5BCD838A28F2E16E01ECB79D8AFC8CBF639A672889ED0D692FC6CDC
                                                                                                                      SHA-512:353744359CD94B1E8184A8B83F762459C69D3AEEA43DA638C1F4CC34E01E9D86C2EBCF7F7BFD059CB23B64051510D1C4556A49D180F8A92DE8449139194DCDC9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Halifax)]} {.. LoadTimeZoneFile America/Halifax..}..set TZData(:SystemV/AST4ADT) $TZData(:America/Halifax)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\CST6

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):186
                                                                                                                      Entropy (8bit):4.957831162100758
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFLLJJT8QFtFb+MuUyqx0sAzE5Y5XHAIg20sAzEo5RL/kR/eIAcGEsAzEpv:SlSNJB9vsM3y7hzi2HAIgphznN/kc90q
                                                                                                                      MD5:3EC0B09EAB848821D48849673B24401C
                                                                                                                      SHA1:41599CBA78E124A7DA9744D2B4EA8CDC10008E0B
                                                                                                                      SHA-256:30428B85B37898AD98B65BE5B6A8BD599331D9A1B49605FC6521464228E32F8F
                                                                                                                      SHA-512:9A3303B3338C01B281A40BB48B93C446ADB92BBDC45371667F09EDA92F9EE2AEC60CE8E98CE15C0112B823799C76AEF14895B15DC997DA506494D75BBE58D662
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Regina)]} {.. LoadTimeZoneFile America/Regina..}..set TZData(:SystemV/CST6) $TZData(:America/Regina)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\CST6CDT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):192
                                                                                                                      Entropy (8bit):4.975428048518589
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFLLJJT8QFtFb+MuUyqx096yXHAIg20961yHRL/kRwx/h4IAcGE967:SlSNJB9vsM3y796SHAIgp9616N/kyxpQ
                                                                                                                      MD5:D85CCC5EFAA1ED549D02F09A38A53C68
                                                                                                                      SHA1:642ED571E4C6F60A953D42DA4F756F2262E4E709
                                                                                                                      SHA-256:44BEF7D4660A9A873EB762E3FDC651D31D97893545DE643FA1B2D05991C090A1
                                                                                                                      SHA-512:3CC6A14A17EA4833958A7D444073D6C2709FD61BF54387E5C362151E9143F795B2432B621080DD53E0FC9BDD7C58F406E046E3D0A2BBA4132D99E7C705E6D645
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Chicago)]} {.. LoadTimeZoneFile America/Chicago..}..set TZData(:SystemV/CST6CDT) $TZData(:America/Chicago)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\EST5

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):204
                                                                                                                      Entropy (8bit):4.928128138328689
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSNJB9vsM3y73G7JHAIgp3GZRN/kkp4903G8:JByMY3G7Kp3GntVp4903G8
                                                                                                                      MD5:506D15E2F37F501F5A592154142A5296
                                                                                                                      SHA1:5ACA12E0BA0FFF9734ED978A9C60AAA9D1E05A59
                                                                                                                      SHA-256:798F92E5DDA65818C887750016D19E6EE9445ADFE0FCB7ACB11281293A09C2C7
                                                                                                                      SHA-512:2EE08D39461CAD3492BE88B421BA463B4CEB8497F036518794BCF605F477057FEA218A9DFBB6335A28A5120750EA06AED9D2EA84CD0007D34CDE562DCD79CC0C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Indianapolis)]} {.. LoadTimeZoneFile America/Indianapolis..}..set TZData(:SystemV/EST5) $TZData(:America/Indianapolis)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\EST5EDT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):195
                                                                                                                      Entropy (8bit):5.113680059406992
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSNJB9vsM3y71RHAIgp1aAN/krp4901Yn:JByMY4pltw+90q
                                                                                                                      MD5:AAD8EF3067E97785D4052B80F5C4ACE1
                                                                                                                      SHA1:3EF0A06FCC41119F4A60A32CED0E5A1E0E8B4300
                                                                                                                      SHA-256:D159140114A13C69F073CFE9AD0B67D713E8811CBFF773A3D1681FC38EA0E699
                                                                                                                      SHA-512:A8774ADF6818D85476A6C147A45E55B338F413CD9B61BF9FDB0CB7A335C0CE8F8C6D1970783FEFECC2CE18388DF91304CB295BD4DFD29FB538D74F6A414A441D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/New_York)]} {.. LoadTimeZoneFile America/New_York..}..set TZData(:SystemV/EST5EDT) $TZData(:America/New_York)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\HST10

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):193
                                                                                                                      Entropy (8bit):4.9733028894475195
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSNJB9vsM3yc6e8SHAIgOb6eKAN/kQmrheo:JByMdniinbtRTo
                                                                                                                      MD5:458061B3F3C8F06C61B5726393A26BA2
                                                                                                                      SHA1:E894F5615654D1110C9964B8F6A54C048442D8EB
                                                                                                                      SHA-256:BF62C8650BBA258000F62F16B0C7CBB66F4FD63F8CFDAF54273BB88A02A6C8D6
                                                                                                                      SHA-512:6A161A7AE44CBF8CE4C704C94456A5B714AAF2A3FAF30731254C9FE056F9DDF207119D516CC6A4C44AE76EC078F5C59F5EC6DD6701FAA3A36F061AF3953B7C7D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Honolulu)]} {.. LoadTimeZoneFile Pacific/Honolulu..}..set TZData(:SystemV/HST10) $TZData(:Pacific/Honolulu)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\MST7

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.999038624718282
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFLLJJT8QFtFb+MuUyqx0utLaDovXHAIg20utLRYovHRL/kRgFfh4IAcGEuto:SlSNJB9vsM3y7OBHAIgpONYyHN/kch4y
                                                                                                                      MD5:B06AB4998A57446FC4D5A5B986BCA0A9
                                                                                                                      SHA1:5E4A28466383CBAB2067B9B6D22882CF6D83C3FB
                                                                                                                      SHA-256:FEBE49FAE260E5595B6F1B21A0A3458D8A50ACA72F4551BF10C1EDB2758E0304
                                                                                                                      SHA-512:9E44174C4E348E1B768039585BA6393FD001B606E111092EEC57C75210A1E87BF3C72728321945D584CA60D4C848D88EB8B2F82CB88F38F90224A43FDCFEA9AA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Phoenix)]} {.. LoadTimeZoneFile America/Phoenix..}..set TZData(:SystemV/MST7) $TZData(:America/Phoenix)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\MST7MDT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.956231227702093
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFLLJJT8QFtFb+MuUyqx06RGFfXHAIg206RORL/kRMMFfh4IAcGE6RB:SlSNJB9vsM3y7+SPHAIgp+ON/kD490+B
                                                                                                                      MD5:5D3C1ADB8AC4EAC9E9A31734CD6884BD
                                                                                                                      SHA1:535B024EA088B9B192BE4206CBDD56BC5B163762
                                                                                                                      SHA-256:64556A7B20E425C79375C2A7CCF72B2B5223A7DE4FF4C99A5C039DB3456C63F6
                                                                                                                      SHA-512:FB799A42880613752AD6010D7B4E97ACCF7F6AE281D9A37057F6423AEF2607B608DB2AC52176F1653D8B2D086223C9658B101E73125F0FF7D6D9E8CD876EEC53
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Denver)]} {.. LoadTimeZoneFile America/Denver..}..set TZData(:SystemV/MST7MDT) $TZData(:America/Denver)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\PST8

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):192
                                                                                                                      Entropy (8bit):4.831981174214766
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFLLJJT8QFtFb+MuUyqTQGuQTWLM4YkovXHAIgObTuQTWLovFvHRL/kRQB5nv:SlSNJB9vsM3yciQyLM4YJHAIgObiQyLQ
                                                                                                                      MD5:B568B46A0207800D9C022BAB1E48709B
                                                                                                                      SHA1:71CE3F0E75E440D5BBA219BCBB92AF9C1F5A7466
                                                                                                                      SHA-256:0B8227AFC94082C985E8E125DF83E5EFADE7CD9CA399800D7B8E8B2BEAE22C7D
                                                                                                                      SHA-512:5067AAD0CD02EBDECA6980F9C7CCC80D076C34D6463C5B6B19B678D76B5E69C1C3639D046F56FE9D6255CBEA49189EDD735F66AD9EE2CB0389BE020E7ED3AD50
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Pitcairn)]} {.. LoadTimeZoneFile Pacific/Pitcairn..}..set TZData(:SystemV/PST8) $TZData(:Pacific/Pitcairn)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\PST8PDT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):204
                                                                                                                      Entropy (8bit):5.003766957083974
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSNJB9vsM3y7DvPHAIgp5N/kQ1p490Dy:JByMY8p5th090W
                                                                                                                      MD5:7E587175CA0F938C47FA920D787C57BD
                                                                                                                      SHA1:C3F7D8576C0AC74D6B70F4363EE2C174FADC70B0
                                                                                                                      SHA-256:D51D9549835E9C058F836C8952932CB53C10F7F194CD87452E9B13494D1C54C9
                                                                                                                      SHA-512:4460686AAA470F07A6DB1F8957FA4DB600E116273497F46E8A2D3FDECF622122DF753556B78C39FA2ADFDB2AF3C3ABB3C330ADA79B35C6A3CD8C498A0319CEE6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Los_Angeles)]} {.. LoadTimeZoneFile America/Los_Angeles..}..set TZData(:SystemV/PST8PDT) $TZData(:America/Los_Angeles)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\YST9

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.9524733332469095
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFLLJJT8QFtFb+MuUyqTQG5hB5WXHAIgObT5hByY6RL/kRKlUDH5hBpvn:SlSNJB9vsM3ycT2HAIgOboN/kNv
                                                                                                                      MD5:5970A466367825D72D9672293FCD4656
                                                                                                                      SHA1:1A736D61A6797295EEC8C094AED432171E98578E
                                                                                                                      SHA-256:55710EFDED5B5830B2F3A2A072037C5251E1766F318707ED7CD5EB03037FED43
                                                                                                                      SHA-512:1F2A1B2A7D0A3E410652546C174D9EC18C91C9327F11C384A0AA1EB12D7EFE85C4D53CA3C2A6C347C0068A4CE92A3138EB17232B0DEC88D52465C5DEDEEE6827
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Gambier)]} {.. LoadTimeZoneFile Pacific/Gambier..}..set TZData(:SystemV/YST9) $TZData(:Pacific/Gambier)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\SystemV\YST9YDT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):198
                                                                                                                      Entropy (8bit):4.994125896811442
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSNJB9vsM3y7/9EtDSHAIgp/9Ef6N/kB490/9E9v:JByMY/947p/9XtN90/9s
                                                                                                                      MD5:560B18DFB138DAF821CFDAE017B94473
                                                                                                                      SHA1:0BB0312C742CC0097DF033656AE3D10723035C30
                                                                                                                      SHA-256:DA20018DE301F879E4F026405C69FA0370EB10184FE1C84A4F1504079D5DAFA1
                                                                                                                      SHA-512:B1D4EAD5F549E319DAD55EE67DAFD732E755164748C08633AA8F07C280B2CF617380D6F886304142D0E4D50026E63678DACFBE2DC809F780BA4CFF35A90DE906
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by ../tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Anchorage)]} {.. LoadTimeZoneFile America/Anchorage..}..set TZData(:SystemV/YST9YDT) $TZData(:America/Anchorage)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Turkey

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):180
                                                                                                                      Entropy (8bit):4.9295990493611495
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxV0XaDovXHAIgoq3XRFvHRL/jCl1yQaqXKv:SlSWB9vsM3ymQa2HAIgoQ/HN/SymKv
                                                                                                                      MD5:1FABF2DFD4BFD0184AE22ED76F7569E5
                                                                                                                      SHA1:5859266B26357B4FCADD7EC65847667631E303EB
                                                                                                                      SHA-256:8471A5575B9D9E47412D851A18A26C4405480540AABC8DAED5F81BE0C714C07C
                                                                                                                      SHA-512:1DCBECEF6D1F923E6C9CEA70CB10F1FF4E453265966AA88FBC8739E93EF40F8A16AAD85AF4ECC5CC1E52F22F49E5D3F4EE01A97DE2302FC4FBC063FE814F3851
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Istanbul)]} {.. LoadTimeZoneFile Europe/Istanbul..}..set TZData(:Turkey) $TZData(:Europe/Istanbul)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\UCT

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):153
                                                                                                                      Entropy (8bit):4.844017562912325
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqAxmS3vXHAIgELyHRL/iGMFfh8RFB:SlSWB9vsM3yzTHAIgm6N/iP8RX
                                                                                                                      MD5:DA060D2F397C978E0842631B4EC73376
                                                                                                                      SHA1:649BC85430B04662BE079C0AAD43DF5D5D499D28
                                                                                                                      SHA-256:356A9BB6F831971C295CF4DCE0F0CDC9EDF94FD686CA3D3195E5F031A0B67CBA
                                                                                                                      SHA-512:3359BFC6F0837D2DA9D72DA8053773CE0C1A1B1A47C33163BF38965E2104F57BC147F9EEC228A3591B75BF1BA93285AB83E8427E8E2E697AB18501DC017B6E6A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/UTC)]} {.. LoadTimeZoneFile Etc/UTC..}..set TZData(:UCT) $TZData(:Etc/UTC)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\US\Alaska

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):189
                                                                                                                      Entropy (8bit):4.911775112130145
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0/VXEtDovXHAIg20/VXEfovRL/iOGl0IAcGE/VXEN:SlSWB9vsM3y7/9EtDSHAIgp/9Ef6N/i4
                                                                                                                      MD5:4379C0BF618649AA07CC4BDAC75F62EF
                                                                                                                      SHA1:7813B54BF2BD0C40A39CA9A29CC50C6D034880A3
                                                                                                                      SHA-256:CED56F09D68BE00555219594C7B2F3E7EFE8323201FB3E2AA0E1FA9A6467D5AF
                                                                                                                      SHA-512:AC822061F5C9743120A66E11C02B199253A40460A87F78DC154B0BDD91E410EDDA581E889F5D2A74670939034F39A7F6C7E814E038A1371DAB71EF79A8911AE7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Anchorage)]} {.. LoadTimeZoneFile America/Anchorage..}..set TZData(:US/Alaska) $TZData(:America/Anchorage)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\US\Aleutian

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):176
                                                                                                                      Entropy (8bit):4.8886795125313585
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0/yO5WXHAIg20/yOoNvWARL/iObMEIB/4IAcGE/y2:SlSWB9vsM3y7/yrHAIgp/yH0AN/itE8h
                                                                                                                      MD5:AB14CF1840CBDA2B326660DBD51273B4
                                                                                                                      SHA1:78144B3A2C75568307E4E86AE3B01EA7F541B011
                                                                                                                      SHA-256:A4F1398CF84D0AE09BF19288770756622D1710CCBFBFE79E0D3239497731287D
                                                                                                                      SHA-512:557A3ED9D1401E76291DC41524A1FD04AFF0829CEF66E103CEF9D10CD751F04FDEB6B7C0490302C71297F53AA8DC42930649AD274215D5DF068BCDE837E73756
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Adak)]} {.. LoadTimeZoneFile America/Adak..}..set TZData(:US/Aleutian) $TZData(:America/Adak)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\US\Arizona

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):184
                                                                                                                      Entropy (8bit):4.9334626069754455
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0utLaDovXHAIg20utLRYovHRL/iQMfQfBx+IAcGEB:SlSWB9vsM3y7OBHAIgpONYyHN/iZfQfl
                                                                                                                      MD5:30ED80335BE37C7CBA672C33FDE23490
                                                                                                                      SHA1:B627E86F023FE02A5590FE8D55FF41946BE6D24B
                                                                                                                      SHA-256:9503403F231BA33415A5F2F0FDD3771CE7FF78534CE83C16A8DB5BC333B4AD8A
                                                                                                                      SHA-512:C1352612EC0B4FF2F6F279CDB6008D7E9DA7F94F0009EFD959AD3092393150ECA83A09E72C724E1A4BFC3A057B9218D54A87FFA1102E2D9BF058B78AC0A0B1AB
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Phoenix)]} {.. LoadTimeZoneFile America/Phoenix..}..set TZData(:US/Arizona) $TZData(:America/Phoenix)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\US\Central

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):184
                                                                                                                      Entropy (8bit):4.90255068822036
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx096yXHAIg20961yHRL/ibXgox/h4IAcGE967:SlSWB9vsM3y796SHAIgp9616N/iB490+
                                                                                                                      MD5:7770A6B85B2FE73BCCE9D803E0200F23
                                                                                                                      SHA1:784AD1082FF1569961C2AC44F6D6F7605FBBE766
                                                                                                                      SHA-256:B6AC9FAE0AB69D58ECFD6B9A84F3C6D3E1A594E40CEEC94E2A0A7855781E173A
                                                                                                                      SHA-512:EEE79D37D77E6B80B91E8F30CE48B107371F6A58F0C91785E3C74EF210AE1011D0EB913113F1873BE6099B0BE1260410F0C74650446CB377F8FDB5505A44F266
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Chicago)]} {.. LoadTimeZoneFile America/Chicago..}..set TZData(:US/Central) $TZData(:America/Chicago)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\US\East-Indiana

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):228
                                                                                                                      Entropy (8bit):4.7645631776966715
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y73GK7JHAIgp3GKZRN/i3E0903GK8:MByMY3GK7Kp3GKnti3t903GK8
                                                                                                                      MD5:96828B6BA17CA96723794F4B3744B494
                                                                                                                      SHA1:C3A824A925AEFE2A13A0E65548078D9842C2C7D7
                                                                                                                      SHA-256:5D86F8D36598516FB2342A18A87DB2701BABD265B0671CC9321C48DB22C7ECA5
                                                                                                                      SHA-512:2A27A455787DEAC3EC78A2784FB989DAB178E9D6DD7721CD3F5D3337231A3C651994B964D6CE040B7858E0127D7F70C0C48CB0D553D5B725B649C828288224B5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Indiana/Indianapolis)]} {.. LoadTimeZoneFile America/Indiana/Indianapolis..}..set TZData(:US/East-Indiana) $TZData(:America/Indiana/Indianapolis)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\US\Eastern

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):187
                                                                                                                      Entropy (8bit):5.0345860115708785
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0wAy0vfXHAIg20wAyGWARL/i37oxp4IAcGEwAy0yn:SlSWB9vsM3y71RHAIgp1aAN/i37oxp4P
                                                                                                                      MD5:375DB249106C5D351CA0E84848835EDB
                                                                                                                      SHA1:ECC5C0C9DA68773B94C9013F4F1A8800D511CC4C
                                                                                                                      SHA-256:2FFCAD8CBEF5ECDC74DB3EE773E4B18ABC8EFA9C09C4EA8F3A45A08BADAF91A9
                                                                                                                      SHA-512:21550743BF4E1A79754F76AB201F0EB6BA6B265F43855901640054316A4A32A5D01D266B2441E4A6415720715A2ABD367D82E3D40949A7A66BE9F8366E47A8DD
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/New_York)]} {.. LoadTimeZoneFile America/New_York..}..set TZData(:US/Eastern) $TZData(:America/New_York)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\US\Hawaii

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):186
                                                                                                                      Entropy (8bit):4.88075715646936
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQG2fWGYFeyXHAIgObT2fWKARL/ioMN75nUDH2fWWv:SlSWB9vsM3yc6e8SHAIgOb6eKAN/ioER
                                                                                                                      MD5:C0475756CFEC302F737967468804846E
                                                                                                                      SHA1:85C13CA0A908C69B8BBB6040FC502AFF96B8F8C7
                                                                                                                      SHA-256:529BB43EFDA6C1584FEAEA789B590CEF1397E33457AB3845F3101B1FC126E0FB
                                                                                                                      SHA-512:D3FF374443344E8438D50803872E8A8EA077B2299B38C1BD155386B4D2C6008BBD0C0B0B26DE9680812D4AFC9A187B644BDCCB04C23880337228BCEC06D5D61B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Honolulu)]} {.. LoadTimeZoneFile Pacific/Honolulu..}..set TZData(:US/Hawaii) $TZData(:Pacific/Honolulu)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\US\Indiana-Starke

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):206
                                                                                                                      Entropy (8bit):4.87340978435866
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:SlSWB9vsM3y73GKaHAIgp3GKIN/iGIfh4903GKT:MByMY3GKDp3GKItiBfh4903GKT
                                                                                                                      MD5:00AAFD60A0B1146274981FAB6336AFD9
                                                                                                                      SHA1:20AD47ED52874202585C90FE362663F060E064D3
                                                                                                                      SHA-256:5827B6A6D50CF0FB75D6BA6E36282591AD25E1F0BE636DCFC5D09BDA29A107FD
                                                                                                                      SHA-512:61113AB72B7D671D7B429106709E73DB57D5B8A382680BA37A54126C7F54BC2D6B47A2584177CE6B434793546DA7EB9B8B7DF9163816DBFC67C83D9930D6A158
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Indiana/Knox)]} {.. LoadTimeZoneFile America/Indiana/Knox..}..set TZData(:US/Indiana-Starke) $TZData(:America/Indiana/Knox)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\US\Michigan

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):185
                                                                                                                      Entropy (8bit):4.83459089067994
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx06FQGFfXHAIg206FQJARL/iHaMCELMr4IAcGE6FQB:SlSWB9vsM3y74PFPHAIgp4KAN/iHaMHs
                                                                                                                      MD5:D955A5A943B203DC4B87A91ED196B82A
                                                                                                                      SHA1:C7ACC48AB2033C372C60C741F68B12FFAEA147DE
                                                                                                                      SHA-256:B4E4269C4FEBFEFF26750B297A590226C0A6872519A6BFDE36F6DC3F6F756349
                                                                                                                      SHA-512:445DC9A50487A4BA0A7F79078441696DCAA31F9988E5B515B5A827AC9275776B22DE303040900C1726EB99CABA8AD09E57AA674F798EA3FDEBC580E4B87D9439
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Detroit)]} {.. LoadTimeZoneFile America/Detroit..}..set TZData(:US/Michigan) $TZData(:America/Detroit)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\US\Mountain

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):182
                                                                                                                      Entropy (8bit):4.892777905787396
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx06RGFfXHAIg206RORL/iBOlLo/4IAcGE6RB:SlSWB9vsM3y7+SPHAIgp+ON/iBY8/49Z
                                                                                                                      MD5:E53EDD55E6448C624DD03A8A100EF5AF
                                                                                                                      SHA1:1D266553CAFA23A3375CFAF7AFE6636553CC7B70
                                                                                                                      SHA-256:3763BF520D3C97148C34DCFBDF70DEC2636D4E38241555900C058EFEE3BD1256
                                                                                                                      SHA-512:B7FCF01DBB4231F30FEFA77C339B2CD7D984D6E6182F3BD15D6B64AC9525994E7CBF90C3F1F520FD22B54E19831B3CBAE1C22F04F60244C0C60A1809942422A4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Denver)]} {.. LoadTimeZoneFile America/Denver..}..set TZData(:US/Mountain) $TZData(:America/Denver)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\US\Pacific

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):196
                                                                                                                      Entropy (8bit):4.932311644026309
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqx0ydJg4o3vXHAIg20ydJPyHRL/iP+e2IAcGEydJgov:SlSWB9vsM3y7DvPHAIgp5N/ip290Dy
                                                                                                                      MD5:37AF94FAB52D80AF32C766644892E36D
                                                                                                                      SHA1:03CE96A3B3EBFC16C9ED192DD2127FB265A7ED49
                                                                                                                      SHA-256:54E5F126D4E7CC13555841A61FF66C0350621C089F475638A393930B3FB4918C
                                                                                                                      SHA-512:405A7F414FA0864111E5E9F06FCA675BF4EF11FE0F82F5438416273BEF820A030A50E4D43E4E522ED79C08C0C243E9DD3692971DC912C9ADFB1BEABEB935CDDC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(America/Los_Angeles)]} {.. LoadTimeZoneFile America/Los_Angeles..}..set TZData(:US/Pacific) $TZData(:America/Los_Angeles)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\US\Samoa

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):188
                                                                                                                      Entropy (8bit):4.838968615416201
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqTQGurKeTnXHAIgObTurKefVHRL/i6A5nUDHurKeTyn:SlSWB9vsM3yciemHAIgObiecN/idXevn
                                                                                                                      MD5:509CF35F5F7C9567FD19CC5C137DC070
                                                                                                                      SHA1:AA5F27D36BC617A6A4107E3CA0CB0C10A71A1D9E
                                                                                                                      SHA-256:E51FC51C65FFEAB514D7636271157EE8941BDACF602CBC380F5D60B5FA674E87
                                                                                                                      SHA-512:E23633A16F11015F3FE2F4E675B5A60B4FDC61F8CF152FDB9BA7ED4C213B8897117721A78C5470296DAFB0FD4F0DDC019DD0DB8C28C1F1B2BE0D3A289F53D5B3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Pacific/Pago_Pago)]} {.. LoadTimeZoneFile Pacific/Pago_Pago..}..set TZData(:US/Samoa) $TZData(:Pacific/Pago_Pago)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\UTC

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):153
                                                                                                                      Entropy (8bit):4.844017562912325
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqAxmS3vXHAIgELyHRL/iLB5h8RFB:SlSWB9vsM3yzTHAIgm6N/iLfh8RX
                                                                                                                      MD5:3402C8784654C24F7E956731866B833F
                                                                                                                      SHA1:C34F3CCA074A50E6564B8C78683C8763B37A3002
                                                                                                                      SHA-256:DEE28FF84E3FC495ED3547D5E5E9FAFDACC36A67329E747D434248ED45BF1755
                                                                                                                      SHA-512:FBA2840B0FA0F084EE9840BCF56E497F8A7ABF509FA10FA66FB26BA3D80079C4F9A363577A453CD68557080EAF9DD7F1F7B5AF957B64BDA2A897B1E08C85DD19
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/UTC)]} {.. LoadTimeZoneFile Etc/UTC..}..set TZData(:UTC) $TZData(:Etc/UTC)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Universal

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):159
                                                                                                                      Entropy (8bit):4.879221007428352
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqAxmS3vXHAIgELyHRL/iL7DJMFfh8RFB:SlSWB9vsM3yzTHAIgm6N/iL7VMr8RX
                                                                                                                      MD5:5F24A249884C241D1E03D758C2641675
                                                                                                                      SHA1:63AAC15A68659006F8A14FEC3F2A66B55A8AC398
                                                                                                                      SHA-256:B7B0B82F471D64704E1D6F84646E6B7B2BD9CAB793FAD00F9C9B0595143C0AB7
                                                                                                                      SHA-512:A7AB5E26A2C23BA296942D7C524C6EE6708A9A38CDD88022EA92E2180BC3CCFE930758FC20A24A0D271AD70733EB924B0E530FBF83CC0FC49EAD411B28503CC0
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/UTC)]} {.. LoadTimeZoneFile Etc/UTC..}..set TZData(:Universal) $TZData(:Etc/UTC)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\W-SU

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):172
                                                                                                                      Entropy (8bit):4.999171213761279
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqxVwTwWXHAIgoqzTbNOARL/gIuyQauTgvn:SlSWB9vsM3ymSHAIgoXAN/gXy5n
                                                                                                                      MD5:5444E85070CA2E7A52D38D6D53216B88
                                                                                                                      SHA1:0F9A4FB1156312EBD0B9C81DA2164E89D21878E1
                                                                                                                      SHA-256:F7DA75B585F45AB501B2889E272FF47B1C4A1D668E40AED7463EB0E8054028C2
                                                                                                                      SHA-512:BBC94F98C84641392D3A4B67C152E92EDB3011DA329319ADB2485DBEAFD44DED328D80FBCA89E58687E1F0EB6BED8580BBB0075CA42284B6206A8641D76F2DE5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Europe/Moscow)]} {.. LoadTimeZoneFile Europe/Moscow..}..set TZData(:W-SU) $TZData(:Europe/Moscow)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\WET

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6945
                                                                                                                      Entropy (8bit):3.7806395604065135
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:v6PgDGfXCiZoFtFPIaFF1w0urfva946ZGsE3f2Sf+aCNmSv+kznl4klEp8OT:rQbkIaFF1w0us4qE3+sSGjT
                                                                                                                      MD5:1EC38B05B53ECF2DD3A90164C4693934
                                                                                                                      SHA1:00900F0ADDB7526C63C67CA1662C038E95A79245
                                                                                                                      SHA-256:7E6E2369C19DD19A41BE27BB8AD8DF5BE8B0096ED045C8B2C2D2F0916D494079
                                                                                                                      SHA-512:47A8DAAB1B891FF09A94AF01B6673213392F70C6C1EE53D95A59D6E238FD06B0E80FA21C7279A9ADA891F5CA5B86E4D6B696EE8CFE14BFEF0ACCC9759AF1419A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit....set TZData(:WET) {.. {-9223372036854775808 0 0 WET}.. {228877200 3600 1 WEST}.. {243997200 0 0 WET}.. {260326800 3600 1 WEST}.. {276051600 0 0 WET}.. {291776400 3600 1 WEST}.. {307501200 0 0 WET}.. {323830800 3600 1 WEST}.. {338950800 0 0 WET}.. {354675600 3600 1 WEST}.. {370400400 0 0 WET}.. {386125200 3600 1 WEST}.. {401850000 0 0 WET}.. {417574800 3600 1 WEST}.. {433299600 0 0 WET}.. {449024400 3600 1 WEST}.. {465354000 0 0 WET}.. {481078800 3600 1 WEST}.. {496803600 0 0 WET}.. {512528400 3600 1 WEST}.. {528253200 0 0 WET}.. {543978000 3600 1 WEST}.. {559702800 0 0 WET}.. {575427600 3600 1 WEST}.. {591152400 0 0 WET}.. {606877200 3600 1 WEST}.. {622602000 0 0 WET}.. {638326800 3600 1 WEST}.. {654656400 0 0 WET}.. {670381200 3600 1 WEST}.. {686106000 0 0 WET}.. {701830800 3600 1 WEST}.. {717555600 0 0 WET}.. {733280400 3600 1 WEST}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\tzdata\Zulu

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):154
                                                                                                                      Entropy (8bit):4.8800842076244715
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:SlEVFRKvJT8QFtFb+MuUyqAxmS3vXHAIgELyHRL/taFBURFB:SlSWB9vsM3yzTHAIgm6N/YFaRX
                                                                                                                      MD5:DDB6F69CA4F0EF6A708481F53F95EAB9
                                                                                                                      SHA1:A63E900A9257E9D73B4BB4BACBA8133C3D1DC41B
                                                                                                                      SHA-256:A06E8CCCF97CC8FB545DFDB4C89B5E5C8EDF0360547BDC1823B4AC47B1556C31
                                                                                                                      SHA-512:C8EA1039BE001F5EF52662B28DBF46D02E4848F08F05923850DEA1994732037B4C8D6030B742D97FA4276AF5FEE3F17C47C7DDA4F44DD23244F9976A076D5CC4
                                                                                                                      Malicious:false
                                                                                                                      Preview:# created by tools/tclZIC.tcl - do not edit..if {![info exists TZData(Etc/UTC)]} {.. LoadTimeZoneFile Etc/UTC..}..set TZData(:Zulu) $TZData(:Etc/UTC)..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tcl\word.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5030
                                                                                                                      Entropy (8bit):4.838527643033185
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:HgTQWiZuhdFQJmuldFQofsGP3R1hF9Dl19arB0E9Dl1YoaEhHe2Gu/q1ZFyJRpqk:8iZUroxvR197ABr971h5GIqrmbqIc+b/
                                                                                                                      MD5:70450A0CF04EF273EFF2B070053FCFA6
                                                                                                                      SHA1:47974D6C0FC986EE1273C4E13DDB9E1288CEF0FF
                                                                                                                      SHA-256:678F891615E2209A8ECBA17857922A9723E78709ADB983032E89CA706000C44D
                                                                                                                      SHA-512:AFD3E47324D1497CC46AC6141191FCEB843977D0B0285C807FF8985DCC56FDE10977F57D503D986CD2C1EDC6C62F01E405A0EB483340B247B129FC8D6D9FE689
                                                                                                                      Malicious:false
                                                                                                                      Preview:# word.tcl --..#..# This file defines various procedures for computing word boundaries in..# strings. This file is primarily needed so Tk text and entry widgets behave..# properly for different platforms...#..# Copyright (c) 1996 Sun Microsystems, Inc...# Copyright (c) 1998 Scritpics Corporation...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES.....# The following variables are used to determine which characters are..# interpreted as white space.....if {$::tcl_platform(platform) eq "windows"} {.. # Windows style - any but a unicode space char.. if {![info exists ::tcl_wordchars]} {...set ::tcl_wordchars {\S}.. }.. if {![info exists ::tcl_nonwordchars]} {...set ::tcl_nonwordchars {\s}.. }..} else {.. # Motif style - any unicode word char (number, letter, or underscore).. if {![info exists ::tcl_wordchars]} {...set ::tcl_wordchars {\w}.. }.. if {![info exists ::tcl_nonwordchar

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk86t.dll

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1555736
                                                                                                                      Entropy (8bit):6.182100088642903
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24576:gb3uXVFKflt2zwvzPYHURwgVdF9EWyCzfdmHQnveD4CGan9nViFoHb15K3cmwdb4:weFSpvzg0RwgVdF9EWyCzfdmHQnveD4B
                                                                                                                      MD5:9FB68A0252E2B6CD99FD0CB6708C1606
                                                                                                                      SHA1:60AB372E8473FAD0F03801B6719BF5CCCFC2592E
                                                                                                                      SHA-256:C6FFE2238134478D8CB1C695D57E794516F3790E211FF519F551E335230DE7DE
                                                                                                                      SHA-512:F5DE1B1A9DC2D71AE27DFAA7B01E079E4970319B6424B44C47F86360FAF0B976ED49DAB6EE9F811E766A2684B647711E567CBAA6660F53BA82D724441C4DDD06
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......y.P.=n>.=n>.=n>...?.?n>...;.1n>...:.5n>...=.9n>...:.>n>...:.<n>.4...-n>...?.(n>.=n?.wo>...6..n>...>.<n>.....<n>...<.<n>.Rich=n>.................PE..d...],.c.........." ...!............|.....................................................`..........................................?..L@..,...|........{...P..D......../.......E...T...............................S..@...............@............................text...h........................... ..`.rdata..0...........................@..@.data...............................@....pdata..D....P......................@..@.rsrc....{.......|..................@..@.reloc...E.......F...H..............@..B................................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\bgerror.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8806
                                                                                                                      Entropy (8bit):4.863085192885279
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:RpwYLapGk1BlM4UBIHpJFVUXUziMJ5Kxyk55qxUr7Vdk5vNR:RuYfvMdOXyj+01f
                                                                                                                      MD5:C5E9A2E32AE83A79DF422D1145B692DF
                                                                                                                      SHA1:08350F930FB97A95970122920C91FB9CED8329E9
                                                                                                                      SHA-256:8822365EE279BEBF7A36CFDEDBA1114762F894781F4635170CC5D85FF5B17923
                                                                                                                      SHA-512:71420E15A3D63329560074F6FFAD42CB464401284BC29D0DC8E34D83F8F77079F26BB4C5703E656A48E6931C3DBF6B873756FB212D0860483E0301B29EDE1212
                                                                                                                      Malicious:false
                                                                                                                      Preview:# bgerror.tcl --..#..#.Implementation of the bgerror procedure. It posts a dialog box with..#.the error message and gives the user a chance to see a more detailed..#.stack trace, and possible do something more interesting with that..#.trace (like save it to a log). This is adapted from work done by..#.Donal K. Fellows...#..# Copyright (c) 1998-2000 by Ajuba Solutions...# Copyright (c) 2007 by ActiveState Software Inc...# Copyright (c) 2007 Daniel A. Steffen <das@users.sourceforge.net>..# Copyright (c) 2009 Pat Thoyts <patthoyts@users.sourceforge.net>....namespace eval ::tk::dialog::error {.. namespace import -force ::tk::msgcat::*.. namespace export bgerror.. option add *ErrorDialog.function.text [mc "Save To Log"] \...widgetDefault.. option add *ErrorDialog.function.command [namespace code SaveToLog].. option add *ErrorDialog*Label.font TkCaptionFont widgetDefault.. if {[tk windowingsystem] eq "aqua"} {...option add *ErrorDialog*background systemAlertBackgroundActi

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\button.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):21612
                                                                                                                      Entropy (8bit):4.947590677310969
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:Tv7cBCAsj9oqlFFSsB3VfRt+lMpWaNwJgzCHarc6gAsj9oqlFFSsB3VlRtYlMpBz:TvweHBBTfIZxHBnZWqbJPBFIaVlCj26+
                                                                                                                      MD5:AEB53F7F1506CDFDFE557F54A76060CE
                                                                                                                      SHA1:EBB3666EE444B91A0D335DA19C8333F73B71933B
                                                                                                                      SHA-256:1F5DD8D81B26F16E772E92FD2A22ACCB785004D0ED3447E54F87005D9C6A07A5
                                                                                                                      SHA-512:ACDAD4DF988DF6B2290FC9622E8EACCC31787FECDC98DCCA38519CB762339D4D3FB344AE504B8C7918D6F414F4AD05D15E828DF7F7F68F363BEC54B11C9B7C43
                                                                                                                      Malicious:false
                                                                                                                      Preview:# button.tcl --..#..# This file defines the default bindings for Tk label, button,..# checkbutton, and radiobutton widgets and provides procedures..# that help in implementing those bindings...#..# Copyright (c) 1992-1994 The Regents of the University of California...# Copyright (c) 1994-1996 Sun Microsystems, Inc...# Copyright (c) 2002 ActiveState Corporation...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....#-------------------------------------------------------------------------..# The code below creates the default class bindings for buttons...#-------------------------------------------------------------------------....if {[tk windowingsystem] eq "aqua"} {.... bind Radiobutton <Enter> {...tk::ButtonEnter %W.. }.. bind Radiobutton <1> {...tk::ButtonDown %W.. }.. bind Radiobutton <ButtonRelease-1> {...tk::ButtonUp %W.. }.. bind Checkbutton <Enter> {...tk::ButtonEnter %W

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\choosedir.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Nim source code, ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9960
                                                                                                                      Entropy (8bit):4.802555950168837
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:HKOdkMpU9YUp8UIhMYYicln9Die0luVZat3pIp5Y3sF1P8Bg8p6trIOzvKsOiCLU:HyMm9J8wPx70luex4C8Fygq6tohef+0J
                                                                                                                      MD5:818E4F0112931F12B4FAC4CAD262814C
                                                                                                                      SHA1:AC7060DF952F9DB52C3687B8F5E6AA4ADF06992E
                                                                                                                      SHA-256:35B208E8570B0D1E0CA1C911D4FE02EE3B0CFE5667CF1BDEC006CF9D043122BA
                                                                                                                      SHA-512:0C535B6621BC83412B7A64CB6AC2BA526B8E49BB5F6BC5EBEDA41D223D68DEB031DB9C8A31F8671BC5F327D720942E7FDAE3328334B0B550AC991191F96909D6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# choosedir.tcl --..#..#.Choose directory dialog implementation for Unix/Mac...#..# Copyright (c) 1998-2000 by Scriptics Corporation...# All rights reserved.....# Make sure the tk::dialog namespace, in which all dialogs should live, exists..namespace eval ::tk::dialog {}..namespace eval ::tk::dialog::file {}....# Make the chooseDir namespace inside the dialog namespace..namespace eval ::tk::dialog::file::chooseDir {.. namespace import -force ::tk::msgcat::*..}....# ::tk::dialog::file::chooseDir:: --..#..#.Implements the TK directory selection dialog...#..# Arguments:..#.args..Options parsed by the procedure...#..proc ::tk::dialog::file::chooseDir:: {args} {.. variable ::tk::Priv.. set dataName __tk_choosedir.. upvar ::tk::dialog::file::$dataName data.. Config $dataName $args.... if {$data(-parent) eq "."} {.. set w .$dataName.. } else {.. set w $data(-parent).$dataName.. }.... # (re)create the dialog box if necessary.. #.. if {![winfo exis

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\clrpick.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):22103
                                                                                                                      Entropy (8bit):5.03166227244502
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:lJGidpe3JQDUd6hgp6EQstzQf+a9DPbS43/H//cO802UeeVnZmM6BA0kyVJv9Qpu:Gep6JCwQDPbLPaRCzTdMAe
                                                                                                                      MD5:AD86E0265C307348A16E9E4B64D8F235
                                                                                                                      SHA1:66EC6726DF997EE6096F642EBBBDB8C3201BA571
                                                                                                                      SHA-256:D210DCFA9ADB4C23E44EBF744839158CAB4E21EACF9483C6BA91BA6EC4660EB8
                                                                                                                      SHA-512:A0C9DF815FE54C26EED69C84B29FD829EB1B7E43D2787E98C71D091607226532F6F0E9213E83FF8263FCB6DA892178029D5EF475FD46D22F9BB8AB31B87BF438
                                                                                                                      Malicious:false
                                                                                                                      Preview:# clrpick.tcl --..#..#.Color selection dialog for platforms that do not support a..#.standard color selection dialog...#..# Copyright (c) 1996 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#..# ToDo:..#..#.(1): Find out how many free colors are left in the colormap and..#. don't allocate too many colors...#.(2): Implement HSV color selection...#....# Make sure namespaces exist..namespace eval ::tk {}..namespace eval ::tk::dialog {}..namespace eval ::tk::dialog::color {.. namespace import ::tk::msgcat::*..}....# ::tk::dialog::color:: --..#..#.Create a color dialog and let the user choose a color. This function..#.should not be called directly. It is called by the tk_chooseColor..#.function when a native color selector widget does not exist..#..proc ::tk::dialog::color:: {args} {.. variable ::tk::Priv.. set dataName __tk__color.. upvar ::tk::dialog::color::$da

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\comdlg.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8690
                                                                                                                      Entropy (8bit):5.098389551322902
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:u4R7+/gFw/MEN55fO7eyjt4bjC+gR8e3vwLln/+LVtUw0tXK4jA:u4l+/gFeMI55Xyjt4bjC+gOe3Ih/+LV1
                                                                                                                      MD5:ABF277E4F62423F4345B6AD65640B8C2
                                                                                                                      SHA1:E66A4E37D51C7827C9ACA449A42E0966AACBC8C8
                                                                                                                      SHA-256:C7DA292CCF5F413E599C3491C331FFD58CF273F8477FACB097E6F36CF1F32A08
                                                                                                                      SHA-512:AA9F75D7C5C915B5FCD2F454856D080D186AB9BA149DC139FEAF7F4AC3DC51E6769E138E3B1BE45B3FEC3AE744189DE44DB2B748F0628FF13E4E733B9CD68BD5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# comdlg.tcl --..#..#.Some functions needed for the common dialog boxes. Probably need to go..#.in a different file...#..# Copyright (c) 1996 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....# tclParseConfigSpec --..#..#.Parses a list of "-option value" pairs. If all options and..#.values are legal, the values are stored in..#.$data($option). Otherwise an error message is returned. When..#.an error happens, the data() array may have been partially..#.modified, but all the modified members of the data(0 array are..#.guaranteed to have valid values. This is different than..#.Tk_ConfigureWidget() which does not modify the value of a..#.widget record if any error occurs...#..# Arguments:..#..# w = widget record to modify. Must be the pathname of a widget...#..# specs = {..# {-commandlineswitch resourceName ResourceClass defaultValue verifier}..# {....}..# }..#..# flags

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\console.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):33347
                                                                                                                      Entropy (8bit):4.995865221021151
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:jMpwGU6OGEJemVueuR3fitsHI76Su6qKQjGCy1HyOnmTTRV+po2mBh6S5mDjbHqC:jMpdUDGEJpC6+oVeKQPjnD2jVfV/
                                                                                                                      MD5:4CA2E90A125FFD6191D0C5AC6818D18F
                                                                                                                      SHA1:855F10234FA1D65521C2508206EA58DC565E452B
                                                                                                                      SHA-256:A4B21DBF699C20EA5AC334EC109F731BE8EB2B8F9A34CCC2EBE538F4BF8A05F8
                                                                                                                      SHA-512:ED5AE05A7F1D379F8343FF4AD7EF561C5C4D9B7E02399A7281DF8B8930B924B0482FDC5B4E3F90C2214ADA4F87D9A5E64DB2259194C58A2135D969C01BBE64F9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# console.tcl --..#..# This code constructs the console window for an application. It..# can be used by non-unix systems that do not have built-in support..# for shells...#..# Copyright (c) 1995-1997 Sun Microsystems, Inc...# Copyright (c) 1998-2000 Ajuba Solutions...# Copyright (c) 2007-2008 Daniel A. Steffen <das@users.sourceforge.net>..#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....# TODO: history - remember partially written command....namespace eval ::tk::console {.. variable blinkTime 500 ; # msecs to blink braced range for.. variable blinkRange 1 ; # enable blinking of the entire braced range.. variable magicKeys 1 ; # enable brace matching and proc/var recognition.. variable maxLines 600 ; # maximum # of lines buffered in console.. variable showMatches 1 ; # show multiple expand matches.. variable useFontchooser [llength [info command ::tk::fontchooser]

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\dialog.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5988
                                                                                                                      Entropy (8bit):4.829498876074983
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:qFR55woFFEciKwKClFEOTIhDHWyzaoj9zza7v0J7:qL55jiKwKCzTIhDbzaojhSG7
                                                                                                                      MD5:B2B3AA971D42FDBF92F13B45111EE1D3
                                                                                                                      SHA1:A74F2C2707463D6E209D0E0C96D75083AC6920A5
                                                                                                                      SHA-256:1C977052C1D8293CC5FE4198A538BECA9BC821AF85E76E4EEFBFB75B33CE8BED
                                                                                                                      SHA-512:146F658DA3E6E9176FA51C9836D7C1DCFC14E148A26B224155F6493C195A7FB20C2DC4EE21994E5A193B8DA8561C75374E830304F94F0C844E52AD829F6810D5
                                                                                                                      Malicious:false
                                                                                                                      Preview:# dialog.tcl --..#..# This file defines the procedure tk_dialog, which creates a dialog..# box containing a bitmap, a message, and one or more buttons...#..# Copyright (c) 1992-1993 The Regents of the University of California...# Copyright (c) 1994-1997 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....#..# ::tk_dialog:..#..# This procedure displays a dialog box, waits for a button in the dialog..# to be invoked, then returns the index of the selected button. If the..# dialog somehow gets destroyed, -1 is returned...#..# Arguments:..# w -..Window to use for dialog top-level...# title -.Title to display in dialog's decorative frame...# text -.Message to display in dialog...# bitmap -.Bitmap to display in dialog (empty string means none)...# default -.Index of button that is to display the default ring..#..(-1 means none)...# args -.One or more strings to display in buttons

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\entry.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):18440
                                                                                                                      Entropy (8bit):4.982597499983157
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:mDfyPIlBk3yrt8qLjtpa+qh+rA4rsWRWrrMUtCPnkKYNlPp64ZnCD:mDfyPIlBk3yJ8mtpaplcp6o
                                                                                                                      MD5:007F42FBCDC57652AC8381F11AF7FB67
                                                                                                                      SHA1:1BB1B0FCAD6F5633D1BEB8903112F180B1C4BA7F
                                                                                                                      SHA-256:65BA33A1E0B21E8E074780A51189CEE6FD9926C85273E9E7633987FC212A17B2
                                                                                                                      SHA-512:A27089719ADAFC48B5ABB905E40D0C6A0A2507526223D72C1CFF36AB7C15362C6F0B8EE5775181BA1730852802AFA64631EE3720E624B630E3274BFB32F6A59A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# entry.tcl --..#..# This file defines the default bindings for Tk entry widgets and provides..# procedures that help in implementing those bindings...#..# Copyright (c) 1992-1994 The Regents of the University of California...# Copyright (c) 1994-1997 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....#-------------------------------------------------------------------------..# Elements of tk::Priv that are used in this file:..#..# afterId -..If non-null, it means that auto-scanning is underway..#...and it gives the "after" id for the next auto-scan..#...command to be executed...# mouseMoved -..Non-zero means the mouse has moved a significant..#...amount since the button went down (so, for example,..#...start dragging out a selection)...# pressX -..X-coordinate at which the mouse button was pressed...# selectMode -..The style of selection currently underway:..#...char, word

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\focus.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5035
                                                                                                                      Entropy (8bit):4.819523401259934
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:J3MRZZ7HWb/6OgRKjtS6Mn9GRZZ7HWb2Y6aO6R5nh76SMoB2kd82KtTpsi2D0DSn:CRZdPul1RZdFaRf0XoB2gZKZpsi2pn
                                                                                                                      MD5:63B219BE9AFF1DE7DE2BAF0E941CAE38
                                                                                                                      SHA1:A2FEBB31380E12FF01E6F641FE8B4F815941462F
                                                                                                                      SHA-256:8872F236D7E824AEC0ACD4BACC00FDD7EC9BC5534814ECF2160610C10647B7C5
                                                                                                                      SHA-512:057700F8FDE4B7C3D7AB7CEFD6C531060BF2B1B3B727CAD6A37ECD42EBC557765D94B83ADD438BD5AFA1F6F919D80AE755A8D98918981167B871F31AD42FDF5E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# focus.tcl --..#..# This file defines several procedures for managing the input..# focus...#..# Copyright (c) 1994-1995 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....# ::tk_focusNext --..# This procedure returns the name of the next window after "w" in..# "focus order" (the window that should receive the focus next if..# Tab is typed in w). "Next" is defined by a pre-order search..# of a top-level and its non-top-level descendants, with the stacking..# order determining the order of siblings. The "-takefocus" options..# on windows determine whether or not they should be skipped...#..# Arguments:..# w -..Name of a window.....proc ::tk_focusNext w {.. set cur $w.. while {1} {.....# Descend to just before the first child of the current widget......set parent $cur...set children [winfo children $cur]...set i -1.....# Look for the next sibling that isn't a top-leve

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\fontchooser.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):18232
                                                                                                                      Entropy (8bit):4.723225284452692
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:NoRqdguMCeor/4VxgU80zNxWHKVozN5EaKdhsbyM:NoRqdguMCeor/4VxgUnzN0KSDEk
                                                                                                                      MD5:CFA99C2D3F02AE6538809774699A9CE7
                                                                                                                      SHA1:DADB7B3D1D9531710BA7D3025CE18F6F8149F280
                                                                                                                      SHA-256:4EE521F4980A5056077005B748717D91CB6B17342CDD20135962AB92A665B580
                                                                                                                      SHA-512:DCF54AAEA439C986AE28CEC0241F204BB5001DE4E98C2E7A9C282F9E47747AD62E9B2CF6FBBAC068BF1F1BB0AAC866F85476E9EE79935CE1E3656F122C2D002D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# fontchooser.tcl -..#..#.A themeable Tk font selection dialog. See TIP #324...#..# Copyright (C) 2008 Keith Vetter..# Copyright (C) 2008 Pat Thoyts <patthoyts@users.sourceforge.net>..#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES.....namespace eval ::tk::fontchooser {.. variable S.... set S(W) .__tk__fontchooser.. set S(fonts) [lsort -dictionary -unique [font families]].. set S(styles) [list \.. [::msgcat::mc Regular] \.. [::msgcat::mc Italic] \.. [::msgcat::mc Bold] \.. [::msgcat::mc {Bold Italic}] \.. ].. set S(sizes) {8 9 10 11 12 14 16 18 20 22 24 26 28 36 48 72}.. set S(strike) 0.. set S(under) 0.. set S(first) 1.. set S(-parent) ... set S(-title) {}.. set S(-command) "".. set S(-font) TkDefaultFont.. set S(bad) [list ]..}....proc ::tk::fontchooser::Canonical {} {.. variable S.... foreach style $S(styles

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\iconlist.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Tcl script, ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):17565
                                                                                                                      Entropy (8bit):4.959816621842895
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:FNP8nO9Wo8k5NfQH8EsOy8WMdbffNCvHshPOw7jW:FNf8uNfQH89Z8WMdz1vDW
                                                                                                                      MD5:FDB839B85C4CEB34DEC04E0EBD6A3C96
                                                                                                                      SHA1:0FD8981093CC6ED9927D1DDE708FECE84B9C5E6F
                                                                                                                      SHA-256:07812124D27E47621AF74FDB90C777D3219B02F657FC2F97F606C69EF9468A01
                                                                                                                      SHA-512:E65616B3F6BDC3910FC90E9710426370AA4B0A0D9EB6289871B9C30A98A2F2B5CC1E471B63203210AAE89120F20F164A33E01DA45BCCCCCEC7BFC1CCFD70FAC7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# iconlist.tcl..#..#.Implements the icon-list megawidget used in the "Tk" standard file..#.selection dialog boxes...#..# Copyright (c) 1994-1998 Sun Microsystems, Inc...# Copyright (c) 2009 Donal K. Fellows..#..# See the file "license.terms" for information on usage and redistribution of..# this file, and for a DISCLAIMER OF ALL WARRANTIES...#..# API Summary:..#.tk::IconList <path> ?<option> <value>? .....#.<path> add <imageName> <itemList>..#.<path> cget <option>..#.<path> configure ?<option>? ?<value>? .....#.<path> deleteall..#.<path> destroy..#.<path> get <itemIndex>..#.<path> index <index>..#.<path> invoke..#.<path> see <index>..#.<path> selection anchor ?<int>?..#.<path> selection clear <first> ?<last>?..#.<path> selection get..#.<path> selection includes <item>..#.<path> selection set <first> ?<last>?.....package require Tk....::tk::Megawidget create ::tk::IconList ::tk::FocusableWidget {.. variable w canvas sbar accel accelCB fill font index \...itemList itemsPerColumn list

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\icons.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):11037
                                                                                                                      Entropy (8bit):6.048349526382653
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:0nEPytJLl1S47T3YqN5/vkJpnhXqBB4aw2rqZiygTtYTpOq/pc75Mk:xqLz7F5KTqBBLuZ1gTSsqhk
                                                                                                                      MD5:995A0A8F7D0861C268AEAD5FC95A42EA
                                                                                                                      SHA1:21E121CF85E1C4984454237A646E58EC3C725A72
                                                                                                                      SHA-256:1264940E62B9A37967925418E9D0DC0BEFD369E8C181B9BAB3D1607E3CC14B85
                                                                                                                      SHA-512:DB7F5E0BC7D5C5F750E396E645F50A3E0CDE61C9E687ADD0A40D0C1AA304DDFBCEEB9F33AD201560C6E2B051F2EDED07B41C43D00F14EE435CDEEE73B56B93C7
                                                                                                                      Malicious:false
                                                                                                                      Preview:# icons.tcl --..#..#.A set of stock icons for use in Tk dialogs. The icons used here..#.were provided by the Tango Desktop project which provides a..#.unified set of high quality icons licensed under the..#.Creative Commons Attribution Share-Alike license..#.(https://creativecommons.org/licenses/by-sa/3.0/)..#..#.See http://tango.freedesktop.org/Tango_Desktop_Project..#..# Copyright (c) 2009 Pat Thoyts <patthoyts@users.sourceforge.net>....namespace eval ::tk::icons {}....image create photo ::tk::icons::warning -data {.. iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAABHNCSVQICAgIfAhkiAAABSZJREFU.. WIXll1toVEcYgL+Zc87u2Yu7MYmrWRuTJuvdiMuqiJd4yYKXgMQKVkSjFR80kFIVJfWCWlvpg4h9.. 8sXGWGof8iKNICYSo6JgkCBEJRG8ImYThNrNxmaTeM7pQ5IlJkabi0/9YZhhZv7///4z/8zPgf+7.. KCNRLgdlJijXwRyuDTlcxV9hbzv8nQmxMjg+XDtiOEplkG9PSfkztGmTgmFQd+FCVzwa3fYN/PHZ.. AcpBaReicW5xcbb64IEQqko8Lc26d/58cxS+/BY6hmJvyEfQBoUpwWCmW1FErKaGWHU13uRk4QkE.. UtxQNFR7QwIoB4eiKD9PWbVKbb10CZmaCqmpxCormRYO26QQx85B0mcD+AeK0

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\README

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):329
                                                                                                                      Entropy (8bit):4.3973643486226655
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:nVxpJFBmHdeA1xNZgk0dIf3Ju4dFi6/XWrWhr3W7FxmVFraazmVAJFKyVQR7icr8:nj5Bqf1fZgp6A4FDG6dm7FUGAJVVMRmn
                                                                                                                      MD5:921245A21F7E783997DC7B859AF1B65B
                                                                                                                      SHA1:2EFE3C8F70CF18621006890BF21CC097770D140D
                                                                                                                      SHA-256:C6DB098EBD8A622164D37D4AB0A8C205DB1A83AC3065D5CDE3CB5FB61925D283
                                                                                                                      SHA-512:CAD823FF3D13A64C00825961E75B5133690556FB1F622834F8B1DF316A9E75BABB63B9F5148DAE7B1391123B4C8D55B4B8B2EB6F8E6E1DA9DE02A5BD7AC0FD6F
                                                                                                                      Malicious:false
                                                                                                                      Preview:README - images directory....This directory includes images for the Tcl Logo and the Tcl Powered..Logo. Please feel free to use the Tcl Powered Logo on any of your..products that employ the use of Tcl or Tk. The Tcl logo may also be..used to promote Tcl in your product documentation, web site or other..places you so desire...

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\logo.eps

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PostScript document text conforming DSC level 3.0, type EPS
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):34991
                                                                                                                      Entropy (8bit):5.248845410801251
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:0YrY6a0v4uIqYMEKjodQKOfRXMLcSqDGpfTKFVm3AsanMEDzzBHWzaw7XUbTJjoB:0YrY6aeIqYMEKjouzfRXMLcSqDGpfTKo
                                                                                                                      MD5:23C4EDED40DEC065F99E6653AEE1BB31
                                                                                                                      SHA1:3175E261BE198731DEDB07264CCB84C8DEDF7967
                                                                                                                      SHA-256:76207D8DFDE189A29DC0E76ADB7EAAA606B96BC6C1C831F34D1C85B1C5B51DD3
                                                                                                                      SHA-512:BA139A64BE72BB681040924C4294E2726BA5AB243E805E60A854D2D23E154705E2431D1AB2DE732BFA393747FD30D8A5C913895CBE1463DBF50CC23CAE5B0454
                                                                                                                      Malicious:false
                                                                                                                      Preview:%!PS-Adobe-3.0 EPSF-3.0..%%Creator: Adobe Illustrator(TM) 5.5..%%For: (Bud Northern) (Mark Anderson Design)..%%Title: (TCL/TK LOGO.ILLUS)..%%CreationDate: (8/1/96) (4:58 PM)..%%BoundingBox: 251 331 371 512..%%HiResBoundingBox: 251.3386 331.5616 370.5213 511.775..%%DocumentProcessColors: Cyan Magenta Yellow..%%DocumentSuppliedResources: procset Adobe_level2_AI5 1.0 0..%%+ procset Adobe_IllustratorA_AI5 1.0 0..%AI5_FileFormat 1.2..%AI3_ColorUsage: Color..%%DocumentCustomColors: (TCL RED)..%%CMYKCustomColor: 0 0.45 1 0 (Orange)..%%+ 0 0.25 1 0 (Orange Yellow)..%%+ 0 0.79 0.91 0 (TCL RED)..%AI3_TemplateBox: 306 396 306 396..%AI3_TileBox: 12 12 600 780..%AI3_DocumentPreview: Macintosh_ColorPic..%AI5_ArtSize: 612 792..%AI5_RulerUnits: 0..%AI5_ArtFlags: 1 0 0 1 0 0 1 1 0..%AI5_TargetResolution: 800..%AI5_NumLayers: 1..%AI5_OpenToView: 90 576 2 938 673 18 1 1 2 40..%AI5_OpenViewLayers: 7..%%EndComments..%%BeginProlog..%%BeginResource: procset Adobe_level2_AI5 1.0 0..%%Title: (Adobe Illustrator

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\logo100.gif

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:GIF image data, version 89a, 68 x 100
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2341
                                                                                                                      Entropy (8bit):6.9734417899888665
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:qF/mIXn3l7+ejbL/4nZEsKPKer1OPQqVRqJbPpRRKOv/UVO47f:81nHL4T0KorxvRKkc847f
                                                                                                                      MD5:FF04B357B7AB0A8B573C10C6DA945D6A
                                                                                                                      SHA1:BCB73D8AF2628463A1B955581999C77F09F805B8
                                                                                                                      SHA-256:72F6B34D3C8F424FF0A290A793FCFBF34FD5630A916CD02E0A5DDA0144B5957F
                                                                                                                      SHA-512:10DFE631C5FC24CF239D817EEFA14329946E26ED6BCFC1B517E2F9AF81807977428BA2539AAA653A89A372257D494E8136FD6ABBC4F727E6B199400DE05ACCD5
                                                                                                                      Malicious:false
                                                                                                                      Preview:GIF89aD.d...............f..3.............f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3..............f..3.............f..3..........f.3...f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3.............f..3............f..3.............f..3....f..f.f..ff.f3.f..3..3.3..3f.33.3...........f..3...f..f..f..f.ff.3f..f..f..f.f.ff.3f..f..f..f..f.ff.3f..ff.ff.ff.fffff3ff.f3.f3.f3.f3ff33f3.f..f..f..f.ff.3f..3..3..3..3.f3.33..3..3..3.3.f3.33..3..3..3..3.f3.33..3f.3f.3f.3ff3f33f.33.33.33.33f33333.3..3..3..3.f3.33.............f..3.............f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3...............w..U..D..".....................w..U..D..".....................w..U..D..".................wwwUUUDDD"""......,....D.d........H......*\...z..Ht@Q...92.p...z.$.@@.E..u.Y.2..0c..q.cB.,[..... ..1..qbM.2~*].....s...S.@.L.j..#..\......h..........].D(..m......@.Z....oO...3=.c...G".(..pL...q]..%....[...#...+...X.h....^.....

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\logo64.gif

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:GIF image data, version 89a, 43 x 64
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1670
                                                                                                                      Entropy (8bit):6.326462043862671
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:PF/mIXn3l7+ejbL/4xsgq4sNC6JYp6s/pmp76F:/1nHL404raM/op2
                                                                                                                      MD5:B226CC3DA70AAB2EBB8DFFD0C953933D
                                                                                                                      SHA1:EA52219A37A140FD98AEA66EA54685DD8158D9B1
                                                                                                                      SHA-256:138C240382304F350383B02ED56C69103A9431C0544EB1EC5DCD7DEC7A555DD9
                                                                                                                      SHA-512:3D043F41B887D54CCADBF9E40E48D7FFF99B02B6FAF6B1DD0C6C6FEF0F8A17630252D371DE3C60D3EFBA80A974A0670AF3747E634C59BDFBC78544D878D498D4
                                                                                                                      Malicious:false
                                                                                                                      Preview:GIF89a+.@...............f..3.............f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3..............f..3.............f..3..........f.3...f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3.............f..3............f..3.............f..3....f..f.f..ff.f3.f..3..3.3..3f.33.3...........f..3...f..f..f..f.ff.3f..f..f..f.f.ff.3f..f..f..f..f.ff.3f..ff.ff.ff.fffff3ff.f3.f3.f3.f3ff33f3.f..f..f..f.ff.3f..3..3..3..3.f3.33..3..3..3.3.f3.33..3..3..3..3.f3.33..3f.3f.3f.3ff3f33f.33.33.33.33f33333.3..3..3..3.f3.33.............f..3.............f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3...............w..U..D..".....................w..U..D..".....................w..U..D..".................wwwUUUDDD"""......,....+.@........H. .z..(tp......@...92....#. A.......C.\.%...)Z..1a.8s..W/..@....3..C...y$.GW.....5.FU..j..;.F(Pc+W.-..X.D-[.*g....F..`.:mkT...Lw...A/.....u.7p..a..9P.....q2..Xg..G....3}AKv.\.d..yL.>..1.#

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\logoLarge.gif

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:GIF image data, version 89a, 354 x 520
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):11000
                                                                                                                      Entropy (8bit):7.88559092427108
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:d+nY6zludc/We/yXy9JHBUoIMSapQdrGlapzmyNMK1vbXkgMmgFW/KxIq3NhZe:YnY6p4c/OCHyowaGUaCcMK1vbXNwFW/l
                                                                                                                      MD5:45D9B00C4CF82CC53723B00D876B5E7E
                                                                                                                      SHA1:DDD10E798AF209EFCE022E97448E5EE11CEB5621
                                                                                                                      SHA-256:0F404764D07A6AE2EF9E1E0E8EAAC278B7D488D61CF1C084146F2F33B485F2ED
                                                                                                                      SHA-512:6E89DACF2077E1307DA05C16EF8FDE26E92566086346085BE10A7FD88658B9CDC87A3EC4D17504AF57D5967861B1652FA476B2DDD4D9C6BCFED9C60BB2B03B6F
                                                                                                                      Malicious:false
                                                                                                                      Preview:GIF89ab.................f..3.............f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3..............f..3.............f..3..........f.3...f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3.............f..3............f..3.............f..3....f..f.f..ff.f3.f..3..3.3..3f.33.3...........f..3...f..f..f..f.ff.3f..f..f..f.f.ff.3f..f..f..f..f.ff.3f..ff.ff.ff.fffff3ff.f3.f3.f3.f3ff33f3.f..f..f..f.ff.3f..3..3..3..3.f3.33..3..3..3.3.f3.33..3..3..3..3.f3.33..3f.3f.3f.3ff3f33f.33.33.33.33f33333.3..3..3..3.f3.33.............f..3.............f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3...............w..U..D..".....................w..U..D..".....................w..U..D..".................wwwUUUDDD"""......,....b..........H......*\....#J.H....3j.... '.;p....(.8X..^.0c.I...z8O.\.....:....$..Fu<8`...P.>%I.gO.C.h-..+.`....@..h....dJ.?...K...H.,U.._.#...g..[.*^.x.....J.L.!.'........=+eZ..i..ynF.8...].y|..m.

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\logoMed.gif

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:GIF image data, version 87a, 120 x 181
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3889
                                                                                                                      Entropy (8bit):7.425138719078912
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:9qqbIh+cE4C8ric/jxK5mxsFBu3/0GIJ6Qap1Y5uMiR8pw5rB/SgijDb+TOh:hy+mnZ7xK5IsTwDQmkdiiG5rB/BE+6h
                                                                                                                      MD5:BD12B645A9B0036A9C24298CD7A81E5A
                                                                                                                      SHA1:13488E4F28676F1E0CE383F80D13510F07198B99
                                                                                                                      SHA-256:4D0BD3228AB4CC3E5159F4337BE969EC7B7334E265C99B7633E3DAF3C3FCFB62
                                                                                                                      SHA-512:F62C996857CA6AD28C9C938E0F12106E0DF5A20D1B4B0B0D17F6294A112359BA82268961F2A054BD040B5FE4057F712206D02F2E668675BBCF6DA59A4DA0A1BB
                                                                                                                      Malicious:false
                                                                                                                      Preview:GIF87ax............................................................................z.....{..o.....m..b...`{.X....vy...hk.Um.N...I`.D..Z^.LP.?R.;!....?C.5C.3#.l..,6.*&.15...`..#(.If.y.....l...._..#/...Hm.>_.y..4R.k..#6..._......w..*K.^.."<.....G{.w..3_."C.Q..F....v..!K...v.2m.)_.[..!R.u.1t.g..)f. X.O..E..1z.g. _.Z..D..:..0..Z.. f.D..0..'z..m.N..C../.z.svC.q/.m.ze7.\..P..I..1%.,...............................................................................................................................................................................................................................................................................................................................................................................................,....x..........H.......D..!...7.PAQ...._l8.... C.<.a...*.x....0q.. ..M.%.<.HBe.@.....Q..7..XC..P..<z3..X...P.jA.%'@.J.lV.......R.,..+....t....7h.....(..a...+^.'..7..L.....V...s..$....a.....8`.9..}K......

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\pwrdLogo.eps

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PostScript document text conforming DSC level 3.0, type EPS
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):29706
                                                                                                                      Entropy (8bit):5.33387357427899
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:0warY6a0v4uIqYMEKjodQKOfRtMLcSqDGpf88KFVmlhEtOI/eE7U0a1:03rY6aeIqYMEKjouzfRtMLcSqDGpfbKc
                                                                                                                      MD5:4AE11820D4D592D02CDE458E6F8CE518
                                                                                                                      SHA1:A2E8D3D6191B336D43E48A65C3AE6485B07D93C6
                                                                                                                      SHA-256:87FD9E46DBB5F2BF1529AFB411182C9FB9C58E23D830C66A233AF0C256BB8EFF
                                                                                                                      SHA-512:E0AD4ED570D414BF00931B0F5BBB61FEF981ABDB22ECC42F8E9841905D38874CDFE38F22EDB17ACD0F7539B2932F9C4A865FA73A49BB1458CE05EE10A78BE357
                                                                                                                      Malicious:false
                                                                                                                      Preview:%!PS-Adobe-3.0 EPSF-3.0..%%Creator: Adobe Illustrator(TM) 5.5..%%For: (Bud Northern) (Mark Anderson Design)..%%Title: (TCL PWRD LOGO.ILLUS)..%%CreationDate: (8/1/96) (4:59 PM)..%%BoundingBox: 242 302 377 513..%%HiResBoundingBox: 242.0523 302.5199 376.3322 512.5323..%%DocumentProcessColors: Cyan Magenta Yellow..%%DocumentSuppliedResources: procset Adobe_level2_AI5 1.0 0..%%+ procset Adobe_IllustratorA_AI5 1.0 0..%AI5_FileFormat 1.2..%AI3_ColorUsage: Color..%%CMYKCustomColor: 0 0.45 1 0 (Orange)..%%+ 0 0.25 1 0 (Orange Yellow)..%%+ 0 0.79 0.91 0 (PANTONE Warm Red CV)..%%+ 0 0.79 0.91 0 (TCL RED)..%AI3_TemplateBox: 306 396 306 396..%AI3_TileBox: 12 12 600 780..%AI3_DocumentPreview: Macintosh_ColorPic..%AI5_ArtSize: 612 792..%AI5_RulerUnits: 0..%AI5_ArtFlags: 1 0 0 1 0 0 1 1 0..%AI5_TargetResolution: 800..%AI5_NumLayers: 1..%AI5_OpenToView: 102 564 2 938 673 18 1 1 2 40..%AI5_OpenViewLayers: 7..%%EndComments..%%BeginProlog..%%BeginResource: procset Adobe_level2_AI5 1.0 0..%%Title: (Adobe I

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\pwrdLogo100.gif

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:GIF image data, version 89a, 64 x 100
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1615
                                                                                                                      Entropy (8bit):7.461273815456419
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:aE45BzojC3r1WAQ+HT2gAdKhPFZ/ObchgB8:V5Gb1WN+yfcObmgW
                                                                                                                      MD5:DBFAE61191B9FADD4041F4637963D84F
                                                                                                                      SHA1:BD971E71AE805C2C2E51DD544D006E92363B6C0C
                                                                                                                      SHA-256:BCC0E6458249433E8CBA6C58122B7C0EFA9557CBC8FB5F9392EED5D2579FC70B
                                                                                                                      SHA-512:ACEAD81CC1102284ED7D9187398304F21B8287019EB98B0C4EC7398DD8B5BA8E7D19CAA891AA9E7C22017B73D734110096C8A7B41A070191223B5543C39E87AF
                                                                                                                      Malicious:false
                                                                                                                      Preview:GIF89a@.d.............................f.................f...ff.f3.f..33.3.........f..ff.f3.33.3.f..f..ff.ff.ffff3ff333f.3f.33.33f.3...................................................................!.. -dl-.!.......,....@.d....@.pH,..E.... ..(...H$..v..j....K....q..5L......^).3.Y7..r..u.v|g..om...\iHl..p...`G..\~....fn[q...P.g.Z.l....y...\.l......f.Z.g...%%....e...e...)....O.f..e. ....O..qf..%..(.H.u..]..&....#4.......@.).....u!.M..2. ..PJ..#..T..a.....P.Gi... <Hb....x..z.3.X.O..f.........].Bt..lB.Q.r...9pP....&...L. ..,`[.....E6.Q.....?.#L......|g........N....[.._........."4......b....G6.........m.zI].....I.@.......I.9...glew...2.B..c>./..2....x.....<...{...7;.....y.I.....4G.Qj0..7..%.W.V...?!..[...X..=..k.h..[Q<.....0.B....(P.x.,.......8O*Z.8P!.$....u.c..Ea!..eC....CB.. .H..E..#..C..E...z..&.Nu........c.0..#.T.M.U........l.p @..s.|..pf!..&.......8.#.8.....*..J>. .t..h6(........#..0.A...*!..)...x..u.Z....*%..H.....*.......`......|.....1.......&.....T*...f.l...

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\pwrdLogo150.gif

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:GIF image data, version 89a, 97 x 150
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2489
                                                                                                                      Entropy (8bit):7.708754027741608
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:/Ev7JJ+3uvz/Hwbcp7igaIwjBui7qFxIIOdJXcI+Ks:M9oWz/7pZAV7qPIImJXtXs
                                                                                                                      MD5:711F4E22670FC5798E4F84250C0D0EAA
                                                                                                                      SHA1:1A1582650E218B0BE6FFDEFFD64D27F4B9A9870F
                                                                                                                      SHA-256:5FC25C30AEE76477F1C4E922931CC806823DF059525583FF5705705D9E913C1C
                                                                                                                      SHA-512:220C36010208A87D0F674DA06D6F5B4D6101D196544ABCB4EE32378C46C781589DB1CE7C7DFE6471A8D8E388EE6A279DB237B18AF1EB9130FF9D0222578F1589
                                                                                                                      Malicious:false
                                                                                                                      Preview:GIF89aa...............................f.................f...ff.f3.f..33.3............f..ff.f3.33.3.f..ff.ff.ffff3ff333f.3f.33.33f.3...................................................................!.. -dl-.!.......,....a......@.pH,...r.l:..TB.T..V..z..H.j..h...&.......t"....F...d..gN~Y...g....}..r....g.....o...g.......Y.w..W......N....Z....W....f...tL.~.f....New............W.M.r.........O.q........W-./i.*...`..z..F9.../9..-.......$6..G..S...........zB.,nw.64...e4.......HOt......f.....)..OX..C.eU.(.Qh.....T..<Q.Y.P.L.YxT....2........ji..3.^)zz..O.a..6 ...TZ........^...7.....>|P.....w$...k.ZF.\R.u....F.]Z.--(v+)[Y....=.!.W..+.]..]._.....&..../Ap...j...!..b.:...{.^.=.`...U.....@Hf..\?.(..Lq@.........0..L...a...&.!.....]#..]G \..q...A.H.X[...(.W......,...1a..B...W(.t.8.AdG.)..(P=...Uu.u..A.KM\...'r.R./.W..d2a.0..G...?...B......#H........1Q.0...R....%+...0.I..{.<......QV.tz'.yn.E.p..0i.I.g......L....%....K...A.l.ph.Q.1e...Z....g..2e...smU&d;.J..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\pwrdLogo175.gif

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:GIF image data, version 89a, 113 x 175
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2981
                                                                                                                      Entropy (8bit):7.758793907956808
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:AmEwM8ioQoHJQBTThKVI7G78NLL120GFBBFXJRxlu+BmO/5lNqm7Eq:B57QoHJQt4II8BZ+jxluZO/5lNqm7Eq
                                                                                                                      MD5:DA5FB10F4215E9A1F4B162257972F9F3
                                                                                                                      SHA1:8DB7FB453B79B8F2B4E67AC30A4BA5B5BDDEBD3B
                                                                                                                      SHA-256:62866E95501C436B329A15432355743C6EFD64A37CFB65BCECE465AB63ECF240
                                                                                                                      SHA-512:990CF306F04A536E4F92257A07DA2D120877C00573BD0F7B17466D74E797D827F6C127E2BEAADB734A529254595918C3A5F54FDBD859BC325A162C8CD8F6F5BE
                                                                                                                      Malicious:false
                                                                                                                      Preview:GIF89aq...............................f.................f...ff.f3.f..33.3............f..ff.f3.3f.33.3.f..ff.ff.ffff3ff333f.3f.33.33f.3................................................................!.. -dl-.!.......,....q......@.pH,...r.l:....A}H...v..R......D.VF..,%M....^.....fyzU.P..f...i.....t..Uqe..N..Z..i......~....g......u.....g......\...h.....P...h.....Q..g....Z..h......]......\...M...[..s...c2.+R.$. ......#.....)v..4....MO.b.....9......[.M.........h'..<-..=.....HQD....D?.~......W7. ..V.W0..l....*0p}..KP?c.\@KW.S(..M..B.....-q...S2...*.,..P.{....F..._MAn ....i.Y3............zh.y.j@...a876...ui.i..;K.........p...`.,}w....tv.m...Y..........;.;.e).e&.......-.NC.*4..(........*..F........[,w....f......E....h..a3.T.^.........)...C.N8.h\T...+&.z....g]H..B..#.t6..Z.....j.-..N......TI....A........M?..Q&V'...Mb.f.x...h.$r.U .9..Ci. ].4.Zb..@...X....%..<..b)V!........Y)x......T.....h.p.d..h..(........]@.**J.M.U.Jf...Y.:....F..g:..d..6q.-..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\pwrdLogo200.gif

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:GIF image data, version 89a, 130 x 200
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3491
                                                                                                                      Entropy (8bit):7.790611381196208
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:ROGuxkQ9mcV7RXcECEtqCa+6GK8WseNXhewFIp9ZmL4u:ROGwpVOEbqCrWsUhtIk4u
                                                                                                                      MD5:A5E4284D75C457F7A33587E7CE0D1D99
                                                                                                                      SHA1:FA98A0FD8910DF2EFB14EDAEC038B4E391FEAB3C
                                                                                                                      SHA-256:BAD9116386343F4A4C394BDB87146E49F674F687D52BB847BD9E8198FDA382CC
                                                                                                                      SHA-512:4448664925D1C1D9269567905D044BBA48163745646344E08203FCEF5BA1524BA7E03A8903A53DAF7D73FE0D9D820CC9063D4DA2AA1E08EFBF58524B1D69D359
                                                                                                                      Malicious:false
                                                                                                                      Preview:GIF89a................................f.................f...ff.f3.f..33.3............f..ff.3f.33.3.f..ff.ff.ffff3ff333f.3f.33.33f.3...................................................................!.. -dl-.!.......,...........@.pH,...r.l:..T..F$XIe..V$.x..V.Z.z..F.pxd~..........{....o....l..{.b...hi[}P.k...y.....y.f.._R.\...............m.....y.....x......^.Q...j.....\S.....^.......l......]...[.......).....{....7...`..<...`..">..i.?/..@............>..Z.z@....0B..r...j.V.I.@..;%R...*...J.p.A.t.*..$A*...>`.....@g5BP.A..p.x.............q..8...... ...(.Q..#..@...F..YSK..M..#o.....D.m..-.....k}...BT..V......'.....`.d..~;..9+..6...<b.eZ..y^0]0..I...=.6.....}.0<.Z...M...Y1*35.e.....b...U0F~.-.HT......l2.s.q`-....y...e....dPZ....~.zT.M.... "r.E/k. ...*..Lj@'........Pcd&.(..mxF_w.."K..x!..--Y`..A.....Be.jH.A..\..j.....du#.....]^...>......].i.FMO..].9n1",Y...F...EW.9.....0TY.T...Cv!i`%...Hz@.]..U.!Y...#Dv&pi.z(.mn.A....@Q.0.%...&.4.v.cw(.`cd'|..M9..."...,*.......

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\pwrdLogo75.gif

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:GIF image data, version 89a, 48 x 75
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1171
                                                                                                                      Entropy (8bit):7.289201491091023
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:DOfHIzP8hqiF+oyPOmp3XHhPBlMVvG0ffWLpfc:DGoPM+o0OmZXHhOv5WRc
                                                                                                                      MD5:7013CFC23ED23BFF3BDA4952266FA7F4
                                                                                                                      SHA1:E5B1DED49095332236439538ECD9DD0B1FD4934B
                                                                                                                      SHA-256:462A8FF8FD051A8100E8C6C086F497E4056ACE5B20B44791F4AAB964B010A448
                                                                                                                      SHA-512:A887A5EC33B82E4DE412564E86632D9A984E8498F02D8FE081CC4AC091A68DF6CC1A82F4BF99906CFB6EA9D0EF47ADAC2D1B0778DCB997FB24E62FC7A6D77D41
                                                                                                                      Malicious:false
                                                                                                                      Preview:GIF89a0.K.............................f.................f...ff.f3.f..33.3.........f..ff.f3.3f.33.3.f..ff.ff.f3ff333f.3f.33.33f.3......................................................................!.. -dl-.!.......,....0.K....@.pH,...GD.<:..%SR.Z......<.V.$l.....z......:.. .|v[D..f...z.W.G.Vr...NgsU.yl..qU..`.......`fe`.......Fg....(.&...g.Y.. .."..q.V.$.'.Ez.W....y...Y.U...(#Xrf.........Xux.U..........(U.4...X....G.B..t..1S...R..Y. ...l ..".>.h......,%K....A.....<s....#..8.iK.....a.y$h..DQh.PE)....6.....MyL.qzF..... ."..Y0..a......2..*t..Ma..b...M..R.....\..st..=....Q......,>s`....Qt.,..B.R.....!.$..%.....(...s...B.T...`,".h(. D....8..dC..\Q.p.......x.#A.....:..du..(D.XV......7....S.#n8a....2`...f.:G,...==(......`!..$...t....b..../N|...f..J.x... P&.|.d._!N...].1w.3D.0!....@o&H...N.B.J....pz8..w.i....=r.............@5.-!.......H."..[.j.AB<..p....h...V.D..6.h...ab1F.g...I !.V~.H..V.........:.G..|c...,.....TD5..c[.W.....LC.....FJ..71[..lH.M.....8.:$......

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\images\tai-ku.gif

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:GIF image data, version 89a, 100 x 100
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5473
                                                                                                                      Entropy (8bit):7.754239979431754
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:+EqG96vSGfyJZ26G6U1LI7nTD2enhjc+2VBnOqcUERVIim:+46KcyJI6G6uU7/LhjlkhQR7m
                                                                                                                      MD5:048AFE69735F6974D2CA7384B879820C
                                                                                                                      SHA1:267A9520C4390221DCE50177E789A4EBD590F484
                                                                                                                      SHA-256:E538F8F4934CA6E1CE29416D292171F28E67DA6C72ED9D236BA42F37445EA41E
                                                                                                                      SHA-512:201DA67A52DADA3AE7C533DE49D3C08A9465F7AA12317A0AE90A8C9C04AA69A85EC00AF2D0069023CD255DDA8768977C03C73516E4848376250E8D0D53D232CB
                                                                                                                      Malicious:false
                                                                                                                      Preview:GIF89ad.d...................RJJ...B99.......RBB..B11ZBB!....R991!!...)....{{B!!R)).JJ.ss.ZZ.BB.kk.RR.JJ.BB9...JJR!!.ZZ.BB.11.99.{s.sk.kc.cZ.ZR.JB.ZR.JB.JB.RJ.B9.91.B9...{.JB.91.B9.B9.1){)!.)!.9)..ZR.JB{91.cR{1).ZJ.ZJ.RB.J9.B1.B1.9).1!....{B9.{k.scc1).kZZ)!c)!.9).B1.9).9).1!.1!.1!.B).9!.9!.1..).....{.sZ1)R)!.B1.B1.ZBR!..9).ZB.9).R9.R9.1!.J1.J1.B).B).9!.9!.1..1..).....sZ.J9.ZB.cJJ!.{1!.B).9!{)..9!.J).B!.B!.9..R1).kJ)!.B1{9).R9.cB.Z9.Z9.B).Z9.B).R1.9!.R1.J).J).B!.1..9....{.s.J9.{Z.ZB.sR.kJk1!.cB.cB.R1.R).1..B!.J!.B.....R91.J1).c.kJ.J).Z1.B!.B!..9!..{R.sJ.Z9.R1{9!..s.R9.Z...J91Z9){B)...............B91..1)!..............................RJR............B)1......R19........BJ.9B..{..s{......!.......,....d.d.@............0@PHa....*.p...7.8.y...C.s6Z.%Q.#s.`:B.N....4jd.K.0..|y....F@.......1~ ......'Y.B"C&R.V.R.4$k.3...D.......Ef*Y3..M........BDV._.....\..).]..>s..$H\%y0WL...d.......D..'..v..1Kz.Zp$;S

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\license.terms

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2307
                                                                                                                      Entropy (8bit):5.135743409565932
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:XU/zAcKT6yOCaDBfsHLk32s3J5w83KDyP1BXy3JQz7yuC:XNc+92sg3A8uyDXy3JQnDC
                                                                                                                      MD5:F090D9B312C16489289FD39813412164
                                                                                                                      SHA1:1BEC6668F6549771DADC67D153B89B8F77DCD4B9
                                                                                                                      SHA-256:0D1E4405F6273F091732764ED89B57066BE63CE64869BE6C71EA337DC4F2F9B5
                                                                                                                      SHA-512:57B323589C5A8D9CBB224416731D8CE65C4B94146DF15CE30885DF63B1D0B3F709093B65390A911F84F20B7C5DE3C0AF9B4D7D531742BE046EDA6E8C3432EF6E
                                                                                                                      Malicious:false
                                                                                                                      Preview:This software is copyrighted by the Regents of the University of..California, Sun Microsystems, Inc., Scriptics Corporation, ActiveState..Corporation, Apple Inc. and other parties. The following terms apply to..all files associated with the software unless explicitly disclaimed in..individual files.....The authors hereby grant permission to use, copy, modify, distribute,..and license this software and its documentation for any purpose, provided..that existing copyright notices are retained in all copies and that this..notice is included verbatim in any distributions. No written agreement,..license, or royalty fee is required for any of the authorized uses...Modifications to this software may be copyrighted by their authors..and need not follow the licensing terms described here, provided that..the new terms are clearly indicated on the first page of each file where..they apply.....IN NO EVENT SHALL THE AUTHORS OR DISTRIBUTORS BE LIABLE TO ANY PARTY..FOR DIRECT, INDIRECT, SPECIAL, INCI

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\listbox.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):15255
                                                                                                                      Entropy (8bit):4.9510475386072095
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:apDYV5Yupn5OcckwBv3HCpg2J8JvJBfWeZhXkz+WkHGowv:aPPkevB2JuvJ9D3XmSc
                                                                                                                      MD5:804E6DCE549B2E541986C0CE9E75E2D1
                                                                                                                      SHA1:C44EE09421F127CF7F4070A9508F22709D06D043
                                                                                                                      SHA-256:47C75F9F8348BF8F2C086C57B97B73741218100CA38D10B8ABDF2051C95B9801
                                                                                                                      SHA-512:029426C4F659848772E6BB1D8182EB03D2B43ADF68FCFCC1EA1C2CC7C883685DEDA3FFFDA7E071912B9BDA616AD7AF2E1CB48CE359700C1A22E1E53E81CAE34B
                                                                                                                      Malicious:false
                                                                                                                      Preview:# listbox.tcl --..#..# This file defines the default bindings for Tk listbox widgets..# and provides procedures that help in implementing those bindings...#..# Copyright (c) 1994 The Regents of the University of California...# Copyright (c) 1994-1995 Sun Microsystems, Inc...# Copyright (c) 1998 by Scriptics Corporation...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES.....#--------------------------------------------------------------------------..# tk::Priv elements used in this file:..#..# afterId -..Token returned by "after" for autoscanning...# listboxPrev -.The last element to be selected or deselected..#...during a selection operation...# listboxSelection -.All of the items that were selected before the..#...current selection operation (such as a mouse..#...drag) started; used to cancel an operation...#--------------------------------------------------------------------------....#--------------

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\megawidget.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Tcl script, ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9862
                                                                                                                      Entropy (8bit):4.786615174847384
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:mvEEVwjVwqOpOLbkVAg/vyKEZ25YbKZbwrmQ:mvEEVwJwpALPgnyx25YGZkr3
                                                                                                                      MD5:D83ED6AC2912900040530528A0237AB3
                                                                                                                      SHA1:2D18E42A8B96C3D71C1C6701010FDF75C1E6D5D8
                                                                                                                      SHA-256:848258B946C002E2696CA3815A1589C8120AF5CC41FBC11BBD9A3F5754CC21AF
                                                                                                                      SHA-512:00B4CD0D58029FC37820C163A4AE1DEAD22FB5C767BDC118659EACE26D449C362189611DFB3FAB1AC129FABFEC2CE853EA2C10D418FAE5AEB91DDC9330FF782D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# megawidget.tcl..#..#.Basic megawidget support classes. Experimental for any use other than..#.the ::tk::IconList megawdget, which is itself only designed for use in..#.the Unix file dialogs...#..# Copyright (c) 2009-2010 Donal K. Fellows..#..# See the file "license.terms" for information on usage and redistribution of..# this file, and for a DISCLAIMER OF ALL WARRANTIES...#....package require Tk.....::oo::class create ::tk::Megawidget {.. superclass ::oo::class.. method unknown {w args} {...if {[string match .* $w]} {... [self] create $w {*}$args... return $w...}...next $w {*}$args.. }.. unexport new unknown.. self method create {name superclasses body} {...next $name [list \....superclass ::tk::MegawidgetClass {*}$superclasses]\;$body.. }..}....::oo::class create ::tk::MegawidgetClass {.. variable w hull options IdleCallbacks.. constructor args {...# Extract the "widget name" from the object name...set w [namespace tail [self]].....# Configure things...

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\menu.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):39790
                                                                                                                      Entropy (8bit):4.915612301723047
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:NKJsO8O4IzOQjJwxzire5pKVjriecYyq4CpKgnP:NKJsO8iOQizire54lriecYf40
                                                                                                                      MD5:B7DAA21C1C192B8CB5B86CBD7B2CE068
                                                                                                                      SHA1:AE8ABF9017F37CCDF5D0D15DE66BB124A7482BA0
                                                                                                                      SHA-256:312AF944A276CDBF1EE00757EF141595670984F7F13E19922C25643A040F5339
                                                                                                                      SHA-512:B619E3B8BE5EC4545E97B7A7A7F7FECC2AAFA58438F9CA3819F644720CF5FF5C44DA12AC25988570E595D97CAD799F87D93C24D5E67A7A953B9F5312952FBEB6
                                                                                                                      Malicious:false
                                                                                                                      Preview:# menu.tcl --..#..# This file defines the default bindings for Tk menus and menubuttons...# It also implements keyboard traversal of menus and implements a few..# other utility procedures related to menus...#..# Copyright (c) 1992-1994 The Regents of the University of California...# Copyright (c) 1994-1997 Sun Microsystems, Inc...# Copyright (c) 1998-1999 Scriptics Corporation...# Copyright (c) 2007 Daniel A. Steffen <das@users.sourceforge.net>..#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....#-------------------------------------------------------------------------..# Elements of tk::Priv that are used in this file:..#..# cursor -..Saves the -cursor option for the posted menubutton...# focus -..Saves the focus during a menu selection operation...#...Focus gets restored here when the menu is unposted...# grabGlobal -..Used in conjunction with tk::Priv(oldGrab): if..#...tk::Priv(oldGrab) is non

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\mkpsenc.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):30840
                                                                                                                      Entropy (8bit):5.142909056222569
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:+c4g8rSnBGzHsGK83Ch0x/0kmSq6O4+rNfPCpM2sEmqKys3pCJxi5dEaY:+c4g8OnBGzBK83Ch0x/0FSq6OnrGM2h3
                                                                                                                      MD5:983C7B78F1A0EBACAB8006D391A01FCD
                                                                                                                      SHA1:7EA37474EA039ED7A37BFDD7D76EAE673E666283
                                                                                                                      SHA-256:C5BDCA3ABA671F03DC4624AB5FD260490F5002491D6C619142CCF5A1A744528A
                                                                                                                      SHA-512:A006EF9B7213E572F6FC540D1512A52C52FEC44E3A07846DE09662AE32B7191C5CF639798531847B39E4076BF9DD6314B6F5373065C04F4FEF221185B39C3117
                                                                                                                      Malicious:false
                                                                                                                      Preview:# mkpsenc.tcl --..#..# This file generates the postscript prolog used by Tk.....namespace eval ::tk {.. # Creates Postscript encoding vector for ISO-8859-1 (could theoretically.. # handle any 8-bit encoding, but Tk never generates characters outside.. # ASCII)... #.. proc CreatePostscriptEncoding {} {...variable psglyphs...# Now check for known. Even if it is known, it can be other than we...# need. GhostScript seems to be happy with such approach...set result "\[\n"...for {set i 0} {$i<256} {incr i 8} {... for {set j 0} {$j<8} {incr j} {....set enc [encoding convertfrom "iso8859-1" \.....[format %c [expr {$i+$j}]]]....catch {.... set hexcode {}.... set hexcode [format %04X [scan $enc %c]]....}....if {[info exists psglyphs($hexcode)]} {.... append result "/$psglyphs($hexcode)"....} else {.... append result "/space"....}... }... append result "\n"...}...append result "\]"...return $result.. }.... # List of adobe glyph names. Converted from glyph

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgbox.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:xbm image (32x, ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):16786
                                                                                                                      Entropy (8bit):4.717927930017041
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:+haZOxBpK8uxGe4V88/wxY3Fxqipz4zz4zxxFzxT4OcErDxqdRRZeuC/Vj2CoopC:+hRWRG3FFjvsfCoopwITHzLHFHHAABs
                                                                                                                      MD5:217087AB6B2A8F9D7252E311D69C3769
                                                                                                                      SHA1:09AEB2BC5B7C7F4AB3DE4211D786C519AE0970F6
                                                                                                                      SHA-256:A07E3A3809CED3C6C9C1E171DCA5AD1F28357734CD41B2B9DD9F58085B3D2842
                                                                                                                      SHA-512:6E57633C924BFC16D380C014C20DD24D5727E70D4843FCEC4D7995B4DB21941EA8F2A5FD6E5386DF3364B6905D4D66B2B9595DC8FC70CFF40A2D49A92A1B6FBA
                                                                                                                      Malicious:false
                                                                                                                      Preview:# msgbox.tcl --..#..#.Implements messageboxes for platforms that do not have native..#.messagebox support...#..# Copyright (c) 1994-1997 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....# Ensure existence of ::tk::dialog namespace..#..namespace eval ::tk::dialog {}....image create bitmap ::tk::dialog::b1 -foreground black \..-data "#define b1_width 32\n#define b1_height 32..static unsigned char q1_bits[] = {.. 0x00, 0xf8, 0x1f, 0x00, 0x00, 0x07, 0xe0, 0x00, 0xc0, 0x00, 0x00, 0x03,.. 0x20, 0x00, 0x00, 0x04, 0x10, 0x00, 0x00, 0x08, 0x08, 0x00, 0x00, 0x10,.. 0x04, 0x00, 0x00, 0x20, 0x02, 0x00, 0x00, 0x40, 0x02, 0x00, 0x00, 0x40,.. 0x01, 0x00, 0x00, 0x80, 0x01, 0x00, 0x00, 0x80, 0x01, 0x00, 0x00, 0x80,.. 0x01, 0x00, 0x00, 0x80, 0x01, 0x00, 0x00, 0x80, 0x01, 0x00, 0x00, 0x80,.. 0x01, 0x00, 0x00, 0x80, 0x02, 0x00, 0x00, 0x40, 0x02, 0x00, 0x00, 0x40,.. 0x04, 0x00,

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\cs.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4235
                                                                                                                      Entropy (8bit):4.789130604359491
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:nlw9Twd+j3gLhokqwX+hTnJgNanPNcgRhgP+5QPwJJENL:nlw9TjjwI3hTnJgNaRhgP75L
                                                                                                                      MD5:5A8B46B85DCCBF74E2B5B820E1A7B9D1
                                                                                                                      SHA1:980F4FC5BABA82BA0FE02F9BD03A23DF6D565BB1
                                                                                                                      SHA-256:4DFFBEEDBF0D66D84B13088016D1A782CEAAD4DED27BE1E38842F8969C0E533F
                                                                                                                      SHA-512:2D81FC06CF3C20E4F6314BD13AF81FDE38A9B06510584C84C6A0C8C36314F980F77D02BD8056E7EE5DE599A0620E0C0349124147334B9C141145270046B19D90
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset cs "&Abort" "&P\u0159eru\u0161it".. ::msgcat::mcset cs "&About..." "&O programu...".. ::msgcat::mcset cs "All Files" "V\u0161echny soubory".. ::msgcat::mcset cs "Application Error" "Chyba programu".. ::msgcat::mcset cs "Bold Italic".. ::msgcat::mcset cs "&Blue" "&Modr\341".. ::msgcat::mcset cs "Cancel" "Zru\u0161it".. ::msgcat::mcset cs "&Cancel" "&Zru\u0161it".. ::msgcat::mcset cs "Cannot change to the directory \"%1\$s\".\nPermission denied." "Nemohu zm\u011bnit atku\341ln\355 adres\341\u0159 na \"%1\$s\".\nP\u0159\355stup odm\355tnut.".. ::msgcat::mcset cs "Choose Directory" "V\375b\u011br adres\341\u0159e".. ::msgcat::mcset cs "Cl&ear" "Sma&zat".. ::msgcat::mcset cs "&Clear Console" "&Smazat konzolu".. ::msgcat::mcset cs "Color" "Barva".. ::msgcat::mcset cs "Console" "Konzole".. ::msgcat::mcset cs "&Copy" "&Kop\355rovat".. ::msgcat::mcset cs "Cu&t" "V&y\u0159\355znout".. ::msgcat::mcset cs "&

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\da.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3987
                                                                                                                      Entropy (8bit):4.651948695787255
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:nRZ2uDMr05sIEzs2KkrT+XuTKN0FjDDP9:nRZzDy4kBKkrT+QpP9
                                                                                                                      MD5:227B0F255F854460E8E5146ED7A17B85
                                                                                                                      SHA1:99A080CAD631F21963C51A5B254BDAD3724DC866
                                                                                                                      SHA-256:FEEF8F8AD33BB3362C845A25D6ED273C398051047D899B31790474614C7AFD2D
                                                                                                                      SHA-512:36A4B48831316CC29686CC76DA00110EB078EC56F55A960D11AE427AA3D913C340C1E3805BF2AD40C1A8A92FC6587DA5D2C245E7501289FC3E228BE14FE49598
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset da "&Abort" "&Afbryd".. ::msgcat::mcset da "&About..." "&Om...".. ::msgcat::mcset da "All Files" "Alle filer".. ::msgcat::mcset da "Application Error" "Programfejl".. ::msgcat::mcset da "&Blue" "&Bl\u00E5".. ::msgcat::mcset da "Cancel" "Annuller".. ::msgcat::mcset da "&Cancel" "&Annuller".. ::msgcat::mcset da "Cannot change to the directory \"%1\$s\".\nPermission denied." "Kan ikke skifte til katalog \"%1\$s\".\nIngen rettigheder.".. ::msgcat::mcset da "Choose Directory" "V\u00E6lg katalog".. ::msgcat::mcset da "Cl&ear" "&Ryd".. ::msgcat::mcset da "&Clear Console" "&Ryd konsolen".. ::msgcat::mcset da "Color" "Farve".. ::msgcat::mcset da "Console" "Konsol".. ::msgcat::mcset da "&Copy" "&Kopier".. ::msgcat::mcset da "Cu&t" "Kli&p".. ::msgcat::mcset da "&Delete" "&Slet".. ::msgcat::mcset da "Details >>" "Detailer".. ::msgcat::mcset da "Directory \"%1\$s\" does not exist." "Katalog \"%1\$s\" finde

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\de.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4914
                                                                                                                      Entropy (8bit):4.6221938909259475
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:nxLEpatioUqGBLbz4ME/XKKVN9R7S/0oYr9:epY3MkXKKxRu2r9
                                                                                                                      MD5:2203F65BCDA61BC15AEAC4F868C6D94A
                                                                                                                      SHA1:C4CC3975679D23892406E4E8971359A0775B1B86
                                                                                                                      SHA-256:C0F574B14068A049E93421C73873D750C98DE28B7B77AA42FE72CBE0270A4186
                                                                                                                      SHA-512:79F134FDAD3B12524D43BF9F59D3C04CAE30A95F591A51B82C8DF7CC8563BEA5D464AEECC457D9F60C04365E30459C447ED537AFC832BA25E1815DE06C2B81E5
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset de "&Abort" "&Abbruch".. ::msgcat::mcset de "&About..." "&\u00dcber...".. ::msgcat::mcset de "All Files" "Alle Dateien".. ::msgcat::mcset de "Application Error" "Applikationsfehler".. ::msgcat::mcset de "&Apply" "&Anwenden".. ::msgcat::mcset de "Bold" "Fett".. ::msgcat::mcset de "Bold Italic" "Fett kursiv".. ::msgcat::mcset de "&Blue" "&Blau".. ::msgcat::mcset de "Cancel" "Abbruch".. ::msgcat::mcset de "&Cancel" "&Abbruch".. ::msgcat::mcset de "Cannot change to the directory \"%1\$s\".\nPermission denied." "Kann nicht in das Verzeichnis \"%1\$s\" wechseln.\nKeine Rechte vorhanden.".. ::msgcat::mcset de "Choose Directory" "W\u00e4hle Verzeichnis".. ::msgcat::mcset de "Cl&ear" "&R\u00fccksetzen".. ::msgcat::mcset de "&Clear Console" "&Konsole l\u00f6schen".. ::msgcat::mcset de "Color" "Farbe".. ::msgcat::mcset de "Console" "Konsole".. ::msgcat::mcset de "&Copy" "&Kopieren".. ::msgcat::mcset de "

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\el.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with very long lines (355), with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8784
                                                                                                                      Entropy (8bit):4.334043617395095
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:tVj/F+oxBHbkI8+xTqFt2zPJ0k63fRGIUvPXrfBNnzc+zIF7meUOT7GC8MO07S0g:fj9+AHlLoozHn7fBFrMVmehCAGb
                                                                                                                      MD5:780F863903BBDAA6C371EC0D3C7E6D59
                                                                                                                      SHA1:DF5D435E132BEE4C076A7FC577C8C275A8B68CD5
                                                                                                                      SHA-256:3F6F155864FE59A341BFD869735E54DD21CEE21BBD038433D9B271AD77BA3F7E
                                                                                                                      SHA-512:091965EE912513AE1943BE840A2E757188FBA6F760F7C47BE80D06313D59B051F183E3A29D4B1CEDE1F9E54CA3CA23D75FF2C3A3672A4E71FB56F0FA76F7FA0D
                                                                                                                      Malicious:false
                                                                                                                      Preview:## Messages for the Greek (Hellenic - "el") language...## Please report any changes/suggestions to:..## petasis@iit.demokritos.gr....namespace eval ::tk {.. ::msgcat::mcset el "&Abort" "\u03a4\u03b5\u03c1\u03bc\u03b1\u03c4\u03b9\u03c3\u03bc\u03cc\u03c2".. ::msgcat::mcset el "About..." "\u03a3\u03c7\u03b5\u03c4\u03b9\u03ba\u03ac...".. ::msgcat::mcset el "All Files" "\u038c\u03bb\u03b1 \u03c4\u03b1 \u0391\u03c1\u03c7\u03b5\u03af\u03b1".. ::msgcat::mcset el "Application Error" "\u039b\u03ac\u03b8\u03bf\u03c2 \u0395\u03c6\u03b1\u03c1\u03bc\u03bf\u03b3\u03ae\u03c2".. ::msgcat::mcset el "&Blue" "\u039c\u03c0\u03bb\u03b5".. ::msgcat::mcset el "&Cancel" "\u0391\u03ba\u03cd\u03c1\u03c9\u03c3\u03b7".. ::msgcat::mcset el \.."Cannot change to the directory \"%1\$s\".\nPermission denied." \.."\u0394\u03b5\u03bd \u03b5\u03af\u03bd\u03b1\u03b9 \u03b4\u03c5\u03bd\u03b1\u03c4\u03ae \u03b7 \u03b1\u03bb\u03bb\u03b1\u03b3\u

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\en.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3377
                                                                                                                      Entropy (8bit):4.279601088621442
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:sQ7dw5bO0V3gqmCNyoKJ6iwp/uvENv4SKEcET2hsHFjr:n7dwNOc3RmOKJQcvEl4SK1ET2hYFjr
                                                                                                                      MD5:D48CFC9EC779085E8F6AAA7B1C40C89A
                                                                                                                      SHA1:0CF6253BFF39F40CA0991F9B06D3394BFEA21ED2
                                                                                                                      SHA-256:4A33B44B2E220E28EAAE7FAC407CAFE43D97C270DA58FA5F3B699A1760BFB2A4
                                                                                                                      SHA-512:C00EC0CFB48ABE621EF625C51952BCF177CE3BC7F0DEC5276EF84C9A97C7E014806B106EA8DEE202C43F8DD54ED7261A8D899E3EE12E3F37A90C387D864463AE
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset en "&Abort".. ::msgcat::mcset en "&About...".. ::msgcat::mcset en "All Files".. ::msgcat::mcset en "Application Error".. ::msgcat::mcset en "&Apply".. ::msgcat::mcset en "Bold".. ::msgcat::mcset en "Bold Italic".. ::msgcat::mcset en "&Blue".. ::msgcat::mcset en "Cancel".. ::msgcat::mcset en "&Cancel".. ::msgcat::mcset en "Cannot change to the directory \"%1\$s\".\nPermission denied.".. ::msgcat::mcset en "Choose Directory".. ::msgcat::mcset en "Cl&ear".. ::msgcat::mcset en "&Clear Console".. ::msgcat::mcset en "Color".. ::msgcat::mcset en "Console".. ::msgcat::mcset en "&Copy".. ::msgcat::mcset en "Cu&t".. ::msgcat::mcset en "&Delete".. ::msgcat::mcset en "Details >>".. ::msgcat::mcset en "Directory \"%1\$s\" does not exist.".. ::msgcat::mcset en "&Directory:".. ::msgcat::mcset en "&Edit".. ::msgcat::mcset en "Effects".. ::msgcat::mcset en "Error: %1\$s".. ::msgcat::mcs

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\en_gb.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):66
                                                                                                                      Entropy (8bit):4.262228832346611
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3:fEGp6fRyv//mGoW8vMKEQXyVn:sooyv//xoQOOn
                                                                                                                      MD5:3D41FC47CD9936F817EF9645D73A77ED
                                                                                                                      SHA1:E62BBE094B71CAF4A389DE3ECD84D2EEFBA33827
                                                                                                                      SHA-256:01238293356E82F1D298896491F8B299BB7DC9C34F299C9E756254C736DA612B
                                                                                                                      SHA-512:B92582C32C4D7CD9DE6571CBB6B93DD693A8B5A80645468E2D02B80C339BE2B95D5B4878A0DA9AFFE9E2F98A6C38AAE9CC1FF2440146D0ED128FE8C9A92EECDB
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset en_gb Color Colour..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\eo.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4035
                                                                                                                      Entropy (8bit):4.614759526381991
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:n6oXunu4/LQmI+nl0WemQ+uISIKk/2nibN5My/uXcFSZHBohy:n6oXuu4jJtlPemVuISIKkuniJS1Gy
                                                                                                                      MD5:3704A08985B0AA3C521FDF9C2DA59D97
                                                                                                                      SHA1:3F1E42C5697504B4DEE1EE314CD361B4203BF686
                                                                                                                      SHA-256:84B117857674A2426290946053A61316C5C8C6808F2C6EDF0ECC5C4A9C5C72AC
                                                                                                                      SHA-512:99FE97B10B1CA59DDA0385161E7C05F7D22424B6B1FB844138921EF94B2E9809D73EBC0062897D0DDE040CF92C96A6E4916CC9F3F02442AE2C4162858434B6BA
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset eo "&Abort" "&\u0108esigu".. ::msgcat::mcset eo "&About..." "Pri...".. ::msgcat::mcset eo "All Files" "\u0108iuj dosieroj".. ::msgcat::mcset eo "Application Error" "Aplikoeraro".. ::msgcat::mcset eo "&Blue" "&Blua".. ::msgcat::mcset eo "Cancel" "Rezignu".. ::msgcat::mcset eo "&Cancel" "&Rezignu".. ::msgcat::mcset eo "Cannot change to the directory \"%1\$s\".\nPermission denied." "Neeble \u015dan\u011di al dosierujo \"%1\$s\".\nVi ne rajtas tion.".. ::msgcat::mcset eo "Choose Directory" "Elektu Dosierujon".. ::msgcat::mcset eo "Cl&ear" "&Vakigu".. ::msgcat::mcset eo "&Clear Console" "&Vakigu konzolon".. ::msgcat::mcset eo "Color" "Koloro".. ::msgcat::mcset eo "Console" "Konzolo".. ::msgcat::mcset eo "&Copy" "&Kopiu".. ::msgcat::mcset eo "Cu&t" "&Eltondu".. ::msgcat::mcset eo "&Delete" "&Forigu".. ::msgcat::mcset eo "Details >>" "Detaloj >>".. ::msgcat::mcset eo "Directory \"%1\$s\" does not exi

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\es.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4024
                                                                                                                      Entropy (8bit):4.536517819515934
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:nN0T1Lt8ZYSih/aiik148aFscyTzoixccUTqjcg60Dx/H5:nN0BLSQUXy/o8re055
                                                                                                                      MD5:4765F3C055742530E4644771EBC6C69F
                                                                                                                      SHA1:8BEA722AC00522DEAA5B380AEEF4CA57D7A271BD
                                                                                                                      SHA-256:D2842B80F1B521EFF2D2656A69274B5F2A8F4F5831AF2E8EE73E3C37389F981F
                                                                                                                      SHA-512:9CA247F22797A1A1FCA42B5CDABF58262ED95EECDDD321CEB1440A60A4375923E0F511238F360D159EB5EED6F82CBBE0B8907A07CC77DB831BF97082932CD0FD
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset es "&Abort" "&Abortar".. ::msgcat::mcset es "&About..." "&Acerca de ...".. ::msgcat::mcset es "All Files" "Todos los archivos".. ::msgcat::mcset es "Application Error" "Error de la aplicaci\u00f3n".. ::msgcat::mcset es "&Blue" "&Azul".. ::msgcat::mcset es "Cancel" "Cancelar".. ::msgcat::mcset es "&Cancel" "&Cancelar".. ::msgcat::mcset es "Cannot change to the directory \"%1\$s\".\nPermission denied." "No es posible acceder al directorio \"%1\$s\".\nPermiso denegado.".. ::msgcat::mcset es "Choose Directory" "Elegir directorio".. ::msgcat::mcset es "Cl&ear" "&Borrar".. ::msgcat::mcset es "&Clear Console" "&Borrar consola".. ::msgcat::mcset es "Color".. ::msgcat::mcset es "Console" "Consola".. ::msgcat::mcset es "&Copy" "&Copiar".. ::msgcat::mcset es "Cu&t" "Cor&tar".. ::msgcat::mcset es "&Delete" "&Borrar".. ::msgcat::mcset es "Details >>" "Detalles >>".. ::msgcat::mcset es "Directory \"%1\$s\"

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\fi.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4693
                                                                                                                      Entropy (8bit):4.640083757706223
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:najdLGoC0TXwqTwPRNQXfdHzAIX169ZZv6CpvgIPJupuupw6kWVVxn6/9Yv:nWdLGo2WiMn4t5pvbxuPtx6F6
                                                                                                                      MD5:BD795A1D95446BEE7AEB16FB6E346271
                                                                                                                      SHA1:38469DBD386C35B90EBE0A0FE2CE9F1AB5A5444A
                                                                                                                      SHA-256:893BEDCDAED4602898D988E6248B8BB0857DD66C06194B45F31340CA03D82369
                                                                                                                      SHA-512:B9BDDECB1DE2025C6C4027BF6228A14D5F573F5859ED3444298809266F06E6203F72004D589314C6529A2E198039355B4FD6160F87DA8F97B55E9F841B6C3F5A
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset fi "&Abort" "&Keskeyt\u00e4".. ::msgcat::mcset fi "&About..." "&Tietoja...".. ::msgcat::mcset fi "All Files" "Kaikki tiedostot".. ::msgcat::mcset fi "Application Error" "Ohjelmavirhe".. ::msgcat::mcset fi "&Apply" "K\u00e4&yt\u00e4".. ::msgcat::mcset fi "Bold" "Lihavoitu".. ::msgcat::mcset fi "Bold Italic" "Lihavoitu, kursivoitu".. ::msgcat::mcset fi "&Blue" "&Sininen".. ::msgcat::mcset fi "Cancel" "Peruuta".. ::msgcat::mcset fi "&Cancel" "&Peruuta".. ::msgcat::mcset fi "Cannot change to the directory \"%1\$s\".\nPermission denied." "Ei voitu vaihtaa hakemistoon \"%1\$s\".\nLupa ev\u00e4tty.".. ::msgcat::mcset fi "Choose Directory" "Valitse hakemisto".. ::msgcat::mcset fi "Cl&ear" "&Tyhjenn\u00e4".. ::msgcat::mcset fi "&Clear Console" "&Tyhjenn\u00e4 konsoli".. ::msgcat::mcset fi "Color" "V\u00e4ri".. ::msgcat::mcset fi "Console" "Konsoli".. ::msgcat::mcset fi "&Copy" "K&opioi".. ::msgcat::mcs

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\fr.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3877
                                                                                                                      Entropy (8bit):4.630737553723335
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:nByEWs/3lHFB9FamsIfSAzZ2eaISAxh0BRc3jC:nByEWaRNzsSSWonMAv
                                                                                                                      MD5:E279E5FFF03E1B8E9063ABC8A499A6BD
                                                                                                                      SHA1:80910911F6B4830BA4DCBA9A9EAD12C9F802DDC9
                                                                                                                      SHA-256:3F2CEB4A33695AB6B56E27F61A4C60C029935BB026497D99CB2C246BCB4A63C4
                                                                                                                      SHA-512:8333388E421AC3F342317BEBE352809B0B190EF8B044A0BAE2FE4051974D86008BAFDCB7098E9DC39A8D9E1E08FB87F54B9D3388AF2D0185FF913DB6788C5AB5
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset fr "&Abort" "&Annuler".. ::msgcat::mcset fr "About..." "\u00c0 propos...".. ::msgcat::mcset fr "All Files" "Tous les fichiers".. ::msgcat::mcset fr "Application Error" "Erreur d'application".. ::msgcat::mcset fr "&Blue" "&Bleu".. ::msgcat::mcset fr "Cancel" "Annuler".. ::msgcat::mcset fr "&Cancel" "&Annuler".. ::msgcat::mcset fr "Cannot change to the directory \"%1\$s\".\nPermission denied." "Impossible d'acc\u00e9der au r\u00e9pertoire \"%1\$s\".\nPermission refus\u00e9e.".. ::msgcat::mcset fr "Choose Directory" "Choisir r\u00e9pertoire".. ::msgcat::mcset fr "Cl&ear" "Effacer".. ::msgcat::mcset fr "Color" "Couleur".. ::msgcat::mcset fr "Console".. ::msgcat::mcset fr "Copy" "Copier".. ::msgcat::mcset fr "Cu&t" "Couper".. ::msgcat::mcset fr "Delete" "Effacer".. ::msgcat::mcset fr "Details >>" "D\u00e9tails >>".. ::msgcat::mcset fr "Directory \"%1\$s\" does not exist." "Le r\u00e9pertoire \"%1\$s\"

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\hu.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4678
                                                                                                                      Entropy (8bit):4.7955991577265245
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:nkCEz2TTrKmA17fzq/Hj+pUva+fQR/a5a/Thn5kU:kTqM17u/8NiMrhb
                                                                                                                      MD5:4F1610E0C73DAE668E3F9D9235631152
                                                                                                                      SHA1:63EE54A6C1A69B798C65C999D5F80A7AB252B6D8
                                                                                                                      SHA-256:E063AD7CA93F37728A65E4CD7C0433950F22607D307949F6CB056446AFEAA4FE
                                                                                                                      SHA-512:37F4B8A9CD020A77591C09AF40FBC2FA82107B2596D31B5F30CE6ECAA225417CF7A5C62FB7A93539B0D7E930D0A44F9BF2EE6BE113F831B0A72B229444672AFD
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset hu "&Abort" "&Megszak\u00edt\u00e1s".. ::msgcat::mcset hu "&About..." "N\u00e9vjegy...".. ::msgcat::mcset hu "All Files" "Minden f\u00e1jl".. ::msgcat::mcset hu "Application Error" "Alkalmaz\u00e1s hiba".. ::msgcat::mcset hu "&Blue" "&K\u00e9k".. ::msgcat::mcset hu "Cancel" "M\u00e9gsem".. ::msgcat::mcset hu "&Cancel" "M\u00e9g&sem".. ::msgcat::mcset hu "Cannot change to the directory \"%1\$s\".\nPermission denied." "A k\u00f6nyvt\u00e1rv\u00e1lt\u00e1s nem siker\u00fclt: \"%1\$s\".\nHozz\u00e1f\u00e9r\u00e9s megtagadva.".. ::msgcat::mcset hu "Choose Directory" "K\u00f6nyvt\u00e1r kiv\u00e1laszt\u00e1sa".. ::msgcat::mcset hu "Cl&ear" "T\u00f6rl\u00e9s".. ::msgcat::mcset hu "&Clear Console" "&T\u00f6rl\u00e9s Konzol".. ::msgcat::mcset hu "Color" "Sz\u00edn".. ::msgcat::mcset hu "Console" "Konzol".. ::msgcat::mcset hu "&Copy" "&M\u00e1sol\u00e1s".. ::msgcat::mcset hu "Cu&t" "&Kiv\u00e1g\u00e1s".. ::ms

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\it.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3765
                                                                                                                      Entropy (8bit):4.49679862548805
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:nmU4xnonTjwUE5Xs6ZrT8BpXAg+Wr+u92C8t7mU9nUSs:nZ4FonFE58HBpXjr+fBJs
                                                                                                                      MD5:B74C54666A5A431A782DB691B4CA3315
                                                                                                                      SHA1:2BC63982C14BBA8A4C451CE31540181F40CE2216
                                                                                                                      SHA-256:806930F283FD097195C7850E3486B3815D1564529B4F8E5FA6D26F3175183BC1
                                                                                                                      SHA-512:8120E2FFD14E0A992E254796ADDC0DC995C921BE31688C0995D7A36FE82609D78791FEF73EAF5B14E2F0D40AD256AB8DAAA07C18E6950362B28E40B71E47C0B6
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset it "&Abort" "&Interrompi".. ::msgcat::mcset it "&About..." "Informazioni...".. ::msgcat::mcset it "All Files" "Tutti i file".. ::msgcat::mcset it "Application Error" "Errore dell' applicazione".. ::msgcat::mcset it "&Blue" "&Blu".. ::msgcat::mcset it "Cancel" "Annulla".. ::msgcat::mcset it "&Cancel" "&Annulla".. ::msgcat::mcset it "Cannot change to the directory \"%1\$s\".\nPermission denied." "Impossibile accedere alla directory \"%1\$s\".\nPermesso negato.".. ::msgcat::mcset it "Choose Directory" "Scegli una directory".. ::msgcat::mcset it "Cl&ear" "Azzera".. ::msgcat::mcset it "&Clear Console" "Azzera Console".. ::msgcat::mcset it "Color" "Colore".. ::msgcat::mcset it "Console".. ::msgcat::mcset it "&Copy" "Copia".. ::msgcat::mcset it "Cu&t" "Taglia".. ::msgcat::mcset it "Delete" "Cancella".. ::msgcat::mcset it "Details >>" "Dettagli >>".. ::msgcat::mcset it "Directory \"%1\$s\" does not ex

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\nl.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4557
                                                                                                                      Entropy (8bit):4.524344068436489
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:nucQswBju0x0M4U2z9KSSOzZL5KhWTqGGIrlxXvhYbL/ZO5NT+T4kiLzzdDf1SDM:nLGa0x0Mp2KSHKSv2bL/ZO5u6nRfAXU9
                                                                                                                      MD5:E56229BAC5A8ABB90C4DD8EE3F9FF9F8
                                                                                                                      SHA1:7527D6C3C6C84BFF0E683FFA86A21C58458EB55D
                                                                                                                      SHA-256:0914FBA42361227D14FA281E8A9CBF57C16200B4DA1E61CC3402EF0113A512C7
                                                                                                                      SHA-512:13649DDB06DB4BA9E39BEAF828211086A519444DA9AB5CBDD1B88B29208388189A5141F75AD94B56A348EDDE534FFADE8B19B557CB988EA4ECC9A84B135D36C1
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset nl "&Abort" "&Afbreken".. ::msgcat::mcset nl "&About..." "Over...".. ::msgcat::mcset nl "All Files" "Alle Bestanden".. ::msgcat::mcset nl "Application Error" "Toepassingsfout".. ::msgcat::mcset nl "&Apply" "Toepassen".. ::msgcat::mcset nl "Bold" "Vet".. ::msgcat::mcset nl "Bold Italic" "Vet Cursief".. ::msgcat::mcset nl "&Blue" "&Blauw".. ::msgcat::mcset nl "Cancel" "Annuleren".. ::msgcat::mcset nl "&Cancel" "&Annuleren".. ::msgcat::mcset nl "Cannot change to the directory \"%1\$s\".\nPermission denied." "Kan niet naar map \"%1\$s\" gaan.\nU heeft hiervoor geen toestemming.".. ::msgcat::mcset nl "Choose Directory" "Kies map".. ::msgcat::mcset nl "Cl&ear" "Wissen".. ::msgcat::mcset nl "&Clear Console" "&Wis Console".. ::msgcat::mcset nl "Color" "Kleur".. ::msgcat::mcset nl "Console".. ::msgcat::mcset nl "&Copy" "Kopi\u00ebren".. ::msgcat::mcset nl "Cu&t" "Knippen".. ::msgcat::mcset nl "&Dele

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\pl.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4932
                                                                                                                      Entropy (8bit):4.799369674927008
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:nXra9E310fwNCeVsvSmy6MZv8lWBTDGdZ3tojTyrEQmAUCIx4wBxZ:n7a9Q0fyw5MQWgP3uoZChB3
                                                                                                                      MD5:8CFA2E38822303FDCB55AE3277F0B81B
                                                                                                                      SHA1:447F28A5064FCEA019C60B3F9B6D50CD43C2D0E3
                                                                                                                      SHA-256:EACEB1F08DE0863CCF726881E07FE5B135EA09646C5253E0CBF7DDB987EB0D92
                                                                                                                      SHA-512:E38BA9059AFF55C2B22A4AE24D6A76149C76DBA8BF8646AE81D6E07D7ED490D0605034B29D9AC848E6685C8EC26A3DBE5B2EAF462B14D96376E80076FBE7082A
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset pl "&Abort" "&Przerwij".. ::msgcat::mcset pl "&About..." "O programie...".. ::msgcat::mcset pl "All Files" "Wszystkie pliki".. ::msgcat::mcset pl "Application Error" "B\u0142\u0105d w programie".. ::msgcat::mcset pl "&Apply" "Zastosuj".. ::msgcat::mcset pl "Bold" "Pogrubienie".. ::msgcat::mcset pl "Bold Italic" "Pogrubiona kursywa".. ::msgcat::mcset pl "&Blue" "&Niebieski".. ::msgcat::mcset pl "Cancel" "Anuluj".. ::msgcat::mcset pl "&Cancel" "&Anuluj".. ::msgcat::mcset pl "Cannot change to the directory \"%1\$s\".\nPermission denied." "Nie mo\u017cna otworzy\u0107 katalogu \"%1\$s\".\nOdmowa dost\u0119pu.".. ::msgcat::mcset pl "Choose Directory" "Wybierz katalog".. ::msgcat::mcset pl "Cl&ear" "&Wyczy\u015b\u0107".. ::msgcat::mcset pl "&Clear Console" "&Wyczy\u015b\u0107 konsol\u0119".. ::msgcat::mcset pl "Color" "Kolor".. ::msgcat::mcset pl "Console" "Konsola".. ::msgcat::mcset pl "&Copy" "&Kopiu

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\pt.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3987
                                                                                                                      Entropy (8bit):4.63232183429232
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:nHOT1mM5qHHxiBHb3joTjtcp2UqMxweo6VvilCMKKXx9vjM:nHOT1mMQnwB/otcUUpGX6VPVoLjM
                                                                                                                      MD5:4018686F2A8E299D86BDB1478BC97896
                                                                                                                      SHA1:0EECE3D57F2EA5EECE8157B06F3AFB97E1F2551A
                                                                                                                      SHA-256:D687F71F0432BB0D02EFDF576E526D2C19D4136F76C41A3224A2F034168F3F34
                                                                                                                      SHA-512:4D730068B2A21E1D6004205B10A9D0D5EE9683FEB03B6FB673E8B9B94ED6BE468086A52DFE97C4DBF35A07CBB2C5E276DF0952A06C78E029D53D796CB6FCC8DF
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset pt "&Abort" "&Abortar".. ::msgcat::mcset pt "About..." "Sobre ...".. ::msgcat::mcset pt "All Files" "Todos os arquivos".. ::msgcat::mcset pt "Application Error" "Erro de aplica\u00e7\u00e3o".. ::msgcat::mcset pt "&Blue" "&Azul".. ::msgcat::mcset pt "Cancel" "Cancelar".. ::msgcat::mcset pt "&Cancel" "&Cancelar".. ::msgcat::mcset pt "Cannot change to the directory \"%1\$s\".\nPermission denied." "N\u00e3o foi poss\u00edvel mudar para o diret\u00f3rio \"%1\$s\".\nPermiss\u00e3o negada.".. ::msgcat::mcset pt "Choose Directory" "Escolha um diret\u00f3rio".. ::msgcat::mcset pt "Cl&ear" "Apagar".. ::msgcat::mcset pt "&Clear Console" "Apagar Console".. ::msgcat::mcset pt "Color" "Cor".. ::msgcat::mcset pt "Console".. ::msgcat::mcset pt "&Copy" "Copiar".. ::msgcat::mcset pt "Cu&t" "Recortar".. ::msgcat::mcset pt "&Delete" "Excluir".. ::msgcat::mcset pt "Details >>" "Detalhes >>".. ::msgcat::mcset pt "D

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\ru.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8620
                                                                                                                      Entropy (8bit):4.477728981060218
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:n9MEBGkFKT4YHCDhxqEMk0yOC2xXLtSRoxwKl9zFAWx2yuV9cDcwRjnWNQuNFNfO:T0rm8IONoRkN1w+jRQ/FoxrRHRJP
                                                                                                                      MD5:C69A904A57FDC95520086E9DDFED362C
                                                                                                                      SHA1:F0220602ABE91FE563E5AA6A4EA4AB43818C0CFC
                                                                                                                      SHA-256:F0D310A2EE9C0AF928D822CBB39BCBE54FB2C1C95EE8167DFFD55EDC1B2FE040
                                                                                                                      SHA-512:808B82F29B7BA06AF5AE44C6C23EC8DD743E93B391F060C7586D6D3FF26C97294BD11AD215848EBA422491BD50C4509330DD24C83134C7A384E81304133CAADB
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset ru "&Abort" "&\u041e\u0442\u043c\u0435\u043d\u0438\u0442\u044c".. ::msgcat::mcset ru "&About..." "\u041f\u0440\u043e...".. ::msgcat::mcset ru "All Files" "\u0412\u0441\u0435 \u0444\u0430\u0439\u043b\u044b".. ::msgcat::mcset ru "Application Error" "\u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435".. ::msgcat::mcset ru "&Apply" "&\u041f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c".. ::msgcat::mcset ru "Bold" "Bold".. ::msgcat::mcset ru "Bold Italic" "Bold Italic".. ::msgcat::mcset ru "&Blue" " &\u0413\u043e\u043b\u0443\u0431\u043e\u0439".. ::msgcat::mcset ru "Cancel" "\u041e\u0442\u043c\u0435\u043d\u0430".. ::msgcat::mcset ru "&Cancel" "\u041e\u0442&\u043c\u0435\u043d\u0430".. ::msgcat::mcset ru "Cannot change to the directory \"%1\$s\".\nPermission denied." \....."\u041d\u0435 \u043c\u043e\u0433\u0443 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u0432 \u043a\u043

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\sv.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3908
                                                                                                                      Entropy (8bit):4.658068191079967
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:nT8A5cbwKmtI1sE9xt6BDyepTr2iiK/yGqXZlBp9:nD5cb2extDepTCnVpJ9
                                                                                                                      MD5:1D085A672A6FCDECEF5D7D876E4C74A3
                                                                                                                      SHA1:1A40C03F15A6926359CA3E5C0A809485CAD28AEE
                                                                                                                      SHA-256:A6821A13D34FB31F1827294B82C4BF9586BB255CA14F78C3ACE11181F42EF211
                                                                                                                      SHA-512:981EDEEF5E4C915BB8F10044096B412D1855CAD08F98A448C6C0A49A54222945EBD102DDCB9525535E0FB19313C319155FA59384605B2C36CC8B4A58693D57E7
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset sv "&Abort" "&Avsluta".. ::msgcat::mcset sv "&About..." "&Om...".. ::msgcat::mcset sv "All Files" "Samtliga filer".. ::msgcat::mcset sv "Application Error" "Programfel".. ::msgcat::mcset sv "&Blue" "&Bl\u00e5".. ::msgcat::mcset sv "Cancel" "Avbryt".. ::msgcat::mcset sv "&Cancel" "&Avbryt".. ::msgcat::mcset sv "Cannot change to the directory \"%1\$s\".\nPermission denied." "Kan ej n\u00e5 mappen \"%1\$s\".\nSaknar r\u00e4ttigheter.".. ::msgcat::mcset sv "Choose Directory" "V\u00e4lj mapp".. ::msgcat::mcset sv "Cl&ear" "&Radera".. ::msgcat::mcset sv "&Clear Console" "&Radera konsollen".. ::msgcat::mcset sv "Color" "F\u00e4rg".. ::msgcat::mcset sv "Console" "Konsoll".. ::msgcat::mcset sv "&Copy" "&Kopiera".. ::msgcat::mcset sv "Cu&t" "Klipp u&t".. ::msgcat::mcset sv "&Delete" "&Radera".. ::msgcat::mcset sv "Details >>" "Detaljer >>".. ::msgcat::mcset sv "Directory \"%1\$s\" does not exist." "Mapp

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\msgs\zh_cn.msg

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Unicode text, UTF-8 text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4951
                                                                                                                      Entropy (8bit):5.319678095131993
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:nnIoT3wHqLHQslojYhOvZSVGNUpi6Zz0qBAE9A+uiTrBsyqCgnPLz:nnIoT3wHU/osIAwNILt0HE2oV6CgPLz
                                                                                                                      MD5:1435107EB17A09E4AD7277FFA1C76913
                                                                                                                      SHA1:9990C26829275F16C6FC494D32C4298EC541E7D3
                                                                                                                      SHA-256:B6802B7B080A2D8BC3D81614EC55A609CB5EF673C7A81E93E07925D6710F90DD
                                                                                                                      SHA-512:4B2CAE4FA135411761D5B7CBFFABCE87D745A9B6496C7FD7C4AF10E76EE36E51CA62A1417CF6C27070EFF9539A305BE45C010AE4F8532C8C2D915FA101F5157E
                                                                                                                      Malicious:false
                                                                                                                      Preview:namespace eval ::tk {.. ::msgcat::mcset zh_cn "&Abort" "&..".. ::msgcat::mcset zh_cn "&About..." "&....".. ::msgcat::mcset zh_cn "All Files" "....".. ::msgcat::mcset zh_cn "Application Error" "......".. ::msgcat::mcset zh_cn "&Apply" "&..".. ::msgcat::mcset zh_cn "Bold" "..".. ::msgcat::mcset zh_cn "Bold Italic" "....".. ::msgcat::mcset zh_cn "&Blue" "&..".. ::msgcat::mcset zh_cn "Cancel" "..".. ::msgcat::mcset zh_cn "&Cancel" "&..".. ::msgcat::mcset zh_cn "Cannot change to the directory \"%1\$s\".\nPermission denied." "...... \"%1\$s\".\n......".. ::msgcat::mcset zh_cn "Choose Directory" ".....".. ::msgcat::mcset zh_cn "Cl&ear" ".&.".. ::msgcat::mcset zh_cn "&Clear Console" "&....".. ::msgcat::mcset zh_cn "Color" "..".. ::msgcat::mcset zh_cn "Console" "..".. ::msgcat::mcset zh_cn "&Copy" "&..".. ::msgcat::mcset zh

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\obsolete.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5772
                                                                                                                      Entropy (8bit):5.038729016734604
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:onzxtm7EMgdMjwPqeuAmz9LD1kFIQETZqoIK/RLf7w:ozxtm7qUwi79l0sZqoBJLDw
                                                                                                                      MD5:FC9E03823BEB08DAF7681C09D106DF7D
                                                                                                                      SHA1:7D06FC8F98140E0FFAA2571BD522FC772E58DE54
                                                                                                                      SHA-256:540EEECBA17207A56290BAFFDAE882BBD4F88364791204AD5D14C7BEDD022CCC
                                                                                                                      SHA-512:2B5BAD311A703A0FE2ED67ACE311BAD4C767BCD23DFC3D9ABDF5C3604146A6A15D6BD13A14BDEFCDB2B602C708AACFAB404E96FCBA7C546AD0DAECD4BE2EB34A
                                                                                                                      Malicious:false
                                                                                                                      Preview:# obsolete.tcl --..#..# This file contains obsolete procedures that people really shouldn't..# be using anymore, but which are kept around for backward compatibility...#..# Copyright (c) 1994 The Regents of the University of California...# Copyright (c) 1994 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....# The procedures below are here strictly for backward compatibility with..# Tk version 3.6 and earlier. The procedures are no longer needed, so..# they are no-ops. You should not use these procedures anymore, since..# they may be removed in some future release.....proc tk_menuBar args {}..proc tk_bindForTraversal args {}....# ::tk::classic::restore --..#..# Restore the pre-8.5 (Tk classic) look as the widget defaults for classic..# Tk widgets...#..# The value following an 'option add' call is the new 8.5 value...#..namespace eval ::tk::classic {.. # This may need t

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\optMenu.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1629
                                                                                                                      Entropy (8bit):4.784780799273752
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:g2hBuOrlkBytcqYXRE5fvvXq1EhJPqOj6Wf0cVlN:gQ6q4E5HCqhBqOhcaD
                                                                                                                      MD5:9B7A8FD2C6B538FF31BDC380452C6DE3
                                                                                                                      SHA1:3F915BFE85CED9F6C7E9A352718770E9F14F098E
                                                                                                                      SHA-256:40CA505C9784B0767D4854485C5C311829594A4FCBDFD7251E60E6BB7EA74FD1
                                                                                                                      SHA-512:43937152B844BE1E597E99DA1270E54AB1D572AE89CB759E6D41C18C9C8044CCC15A6925F9C5AF617AE9EC1404E78C2733231F4D5C6CFE4D23C546387B1FC328
                                                                                                                      Malicious:false
                                                                                                                      Preview:# optMenu.tcl --..#..# This file defines the procedure tk_optionMenu, which creates..# an option button and its associated menu...#..# Copyright (c) 1994 The Regents of the University of California...# Copyright (c) 1994 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....# ::tk_optionMenu --..# This procedure creates an option button named $w and an associated..# menu. Together they provide the functionality of Motif option menus:..# they can be used to select one of many values, and the current value..# appears in the global variable varName, as well as in the text of..# the option menubutton. The name of the menu is returned as the..# procedure's result, so that the caller can use it to change configuration..# options on the menu or otherwise manipulate it...#..# Arguments:..# w -...The name to use for the menubutton...# varName -..Global variable to hold the currently

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\palette.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8418
                                                                                                                      Entropy (8bit):4.964814946573677
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:HWh/x+hFMyTA/CTzxFoUuliRLDm8pQrQlENPyF3o48M6C:HWL+MyTA/CTzvAiRqyEw3ok
                                                                                                                      MD5:4CE08A10CD9AE941654B8C679DF669F3
                                                                                                                      SHA1:F1288BABCA698FD18C3BD221E6AE6C02F2975AAE
                                                                                                                      SHA-256:849B4C57E4644E51BEAEAEB3AE59B7FF067E582ECD10F1B2CAF6B6E72F11F506
                                                                                                                      SHA-512:0F37539DA3540E9B1DA7B0377E3BBB359B71DB4271D63BC9501E95931B4E609E8CB91DC2F7B08A6452598D4A0D58C6A2034049A215000EEF0F93A9963D003632
                                                                                                                      Malicious:false
                                                                                                                      Preview:# palette.tcl --..#..# This file contains procedures that change the color palette used..# by Tk...#..# Copyright (c) 1995-1997 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....# ::tk_setPalette --..# Changes the default color scheme for a Tk application by setting..# default colors in the option database and by modifying all of the..# color options for existing widgets that have the default value...#..# Arguments:..# The arguments consist of either a single color name, which..# will be used as the new background color (all other colors will..# be computed from this) or an even number of values consisting of..# option names and values. The name for an option is the one used..# for the option database, such as activeForeground, not -activeforeground.....proc ::tk_setPalette {args} {.. if {[winfo depth .] == 1} {...# Just return on monochrome displays, otherwise errors

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\panedwindow.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5370
                                                                                                                      Entropy (8bit):4.979530133775421
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:ssAXzkTQ9w5fLQYkJLZkRXKUXfwyZTq2sz8j2Em3YKhrYK:jAXgE0DQpJLGR6UXfpqnzG3m3YKhrYK
                                                                                                                      MD5:286C01A1B12261BC47F5659FD1627ABD
                                                                                                                      SHA1:4CA36795CAB6DFE0BBBA30BB88A2AB71A0896642
                                                                                                                      SHA-256:AA4F87E41AC8297F51150F2A9F787607690D01793456B93F0939C54D394731F9
                                                                                                                      SHA-512:D54D5A89B7408A9724A1CA1387F6473BDAD33885194B2EC5A524C7853A297FD65CE2A57F571C51DB718F6A00DCE845DE8CF5F51698F926E54ED72CDC81BCFE54
                                                                                                                      Malicious:false
                                                                                                                      Preview:# panedwindow.tcl --..#..# This file defines the default bindings for Tk panedwindow widgets and..# provides procedures that help in implementing those bindings.....bind Panedwindow <Button-1> { ::tk::panedwindow::MarkSash %W %x %y 1 }..bind Panedwindow <Button-2> { ::tk::panedwindow::MarkSash %W %x %y 0 }....bind Panedwindow <B1-Motion> { ::tk::panedwindow::DragSash %W %x %y 1 }..bind Panedwindow <B2-Motion> { ::tk::panedwindow::DragSash %W %x %y 0 }....bind Panedwindow <ButtonRelease-1> {::tk::panedwindow::ReleaseSash %W 1}..bind Panedwindow <ButtonRelease-2> {::tk::panedwindow::ReleaseSash %W 0}....bind Panedwindow <Motion> { ::tk::panedwindow::Motion %W %x %y }....bind Panedwindow <Leave> { ::tk::panedwindow::Leave %W }....# Initialize namespace..namespace eval ::tk::panedwindow {}....# ::tk::panedwindow::MarkSash --..#..# Handle marking the correct sash for possible dragging..#..# Arguments:..# w..the widget..# x..widget local x coord..# y..widget local y coord..# proxy.

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\pkgIndex.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):376
                                                                                                                      Entropy (8bit):5.040809246948068
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:6:CsUgabAOgjDnzJNBc6ynID/cL4RpncleXN17MQ9PCSIBIQ08hof7MQ9PCSIBIQei:lGbyntNO6LYZliCNBIUhkCNBIFi
                                                                                                                      MD5:8A0517A7A4C70111080ED934329E2BC5
                                                                                                                      SHA1:5B465E0D3500A8F04EE1C705662032F44E2ED0D2
                                                                                                                      SHA-256:A5D208887A94832328C3A33928A80F3B46AA205C20DB4F050A47D940E94071B4
                                                                                                                      SHA-512:D9F502A006A5E0514FD61426818AD1F4168E449588F9D383D6B0BF87A18BE82C420863A9A28E1BEB441284A0B1BC2A0B3D3276A0FE3196341AEC15A27920DE5D
                                                                                                                      Malicious:false
                                                                                                                      Preview:if {![package vsatisfies [package provide Tcl] 8.6.0]} return..if {($::tcl_platform(platform) eq "unix") && ([info exists ::env(DISPLAY)]...|| ([info exists ::argv] && ("-display" in $::argv)))} {.. package ifneeded Tk 8.6.13 [list load [file join $dir .. .. bin libtk8.6.dll]]..} else {.. package ifneeded Tk 8.6.13 [list load [file join $dir .. .. bin tk86t.dll]]..}..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\safetk.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Tcl script, ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):7632
                                                                                                                      Entropy (8bit):4.891666209090638
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:Eet0t8bm9Z+Yjo+j/YKOtOUOtk8XKUal320:EetG8biZZs+bIAUoxX0d
                                                                                                                      MD5:21A3AC11146EC26784C0E729D8D644D0
                                                                                                                      SHA1:C7E0918E8692C42C1D1DD1BBCBFFF22A85979B69
                                                                                                                      SHA-256:579701605669AADFFBCDB7E3545C68442495428EE6E93C2D3A3133583BCD3D33
                                                                                                                      SHA-512:724ED83B989AD9033BEC4211EE50E4C9E85B51054C518CDF7E02D0ED0416F636B9F38C0B0D29F8F4F7F465B77C7D2E01D0918D2C2C3FEC4C7739EA982302FA2E
                                                                                                                      Malicious:false
                                                                                                                      Preview:# safetk.tcl --..#..# Support procs to use Tk in safe interpreters...#..# Copyright (c) 1997 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES.....# see safetk.n for documentation....#..#..# Note: It is now ok to let untrusted code being executed..# between the creation of the interp and the actual loading..# of Tk in that interp because the C side Tk_Init will..# now look up the parent interp and ask its safe::TkInit..# for the actual parameters to use for it's initialization (if allowed),..# not relying on the child state...#....# We use opt (optional arguments parsing)..package require opt 0.4.1;....namespace eval ::safe {.... # counter for safe toplevels.. variable tkSafeId 0..}....#..# tkInterpInit : prepare the child interpreter for tk loading..# most of the real job is done by loadTk..# returns the child name (tkInterpInit

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\scale.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8693
                                                                                                                      Entropy (8bit):4.968450834020619
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:GSusE8YOdpO4aDtao+QYa6t2jooB6ajpaqa5xQGmLGKOC9dLrVx:KsbYQO48t+QYa+NkFjpagGmKKX9dLrVx
                                                                                                                      MD5:D45202D3D2D052D4C6BFE8D1322AAB39
                                                                                                                      SHA1:8CDF184AC2E9299B2B2A107A64E9D1803AA298DE
                                                                                                                      SHA-256:0747A387FDD1B2C7135ECEAE7B392ED52E1D1EBF3FFA90FEBE886DBC0981EB74
                                                                                                                      SHA-512:27B005F955BAE00D15C4492E7BD3EBDC5EE3BF9C164C418198B4BD185709C8810AA6CF76CBCC07EEB4C1D20F8C76EF8DF8B219563C18B88C94954C910BFF575D
                                                                                                                      Malicious:false
                                                                                                                      Preview:# scale.tcl --..#..# This file defines the default bindings for Tk scale widgets and provides..# procedures that help in implementing the bindings...#..# Copyright (c) 1994 The Regents of the University of California...# Copyright (c) 1994-1995 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....#-------------------------------------------------------------------------..# The code below creates the default class bindings for entries...#-------------------------------------------------------------------------....# Standard Motif bindings:....bind Scale <Enter> {.. if {$tk_strictMotif} {...set tk::Priv(activeBg) [%W cget -activebackground]...%W configure -activebackground [%W cget -background].. }.. tk::ScaleActivate %W %x %y..}..bind Scale <Motion> {.. tk::ScaleActivate %W %x %y..}..bind Scale <Leave> {.. if {$tk_strictMotif} {...%W configure -activebackground

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\scrlbar.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):13188
                                                                                                                      Entropy (8bit):5.063842571848725
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:Gf7RV8ei32PHKT8H2wwucyRlXn+kl1nBKp4nu5FCyK:2mei3qHKT8WPurnXn+I1nBg4nu5MyK
                                                                                                                      MD5:5249CD1E97E48E3D6DEC15E70B9D7792
                                                                                                                      SHA1:612E021BA25B5E512A0DFD48B6E77FC72894A6B9
                                                                                                                      SHA-256:EEC90404F702D3CFBFAEC0F13BF5ED1EBEB736BEE12D7E69770181A25401C61F
                                                                                                                      SHA-512:E4E0AB15EB9B3118C30CD2FF8E5AF87C549EAA9B640FFD809A928D96B4ADDEFB9D25EFDD1090FBD0019129CDF355BB2F277BC7194001BA1D2ED4A581110CEAFC
                                                                                                                      Malicious:false
                                                                                                                      Preview:# scrlbar.tcl --..#..# This file defines the default bindings for Tk scrollbar widgets...# It also provides procedures that help in implementing the bindings...#..# Copyright (c) 1994 The Regents of the University of California...# Copyright (c) 1994-1996 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....#-------------------------------------------------------------------------..# The code below creates the default class bindings for scrollbars...#-------------------------------------------------------------------------....# Standard Motif bindings:..if {[tk windowingsystem] eq "x11" || [tk windowingsystem] eq "aqua"} {....bind Scrollbar <Enter> {.. if {$tk_strictMotif} {...set tk::Priv(activeBg) [%W cget -activebackground]...%W configure -activebackground [%W cget -background].. }.. %W activate [%W identify %x %y]..}..bind Scrollbar <Motion> {.. %W activate [%

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\spinbox.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):16543
                                                                                                                      Entropy (8bit):5.034958189335699
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:IMpfyeKu9TzD0E8+9T1wqBaQKpiqQr7E32fnzXfWJU:IMpfyeKu9Tx8WODTp2zPP
                                                                                                                      MD5:EAA36F0AA69AE19DDBDD0448FBAD9D4D
                                                                                                                      SHA1:EB0ADB4F4D937BAC2F17480ADAF6F948262E754D
                                                                                                                      SHA-256:747889C3086C917A34554A9DC495BC0C08A03FD3A5828353ED2A64B97F376835
                                                                                                                      SHA-512:C8368F19EC6842ED67073B9FC9C9274107E643324CB23B28C54DF63FB720F63B043281B30DBEA053D08481B0442A87465F715A8AA0711B01CE83FF7B9F8A4F4C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# spinbox.tcl --..#..# This file defines the default bindings for Tk spinbox widgets and provides..# procedures that help in implementing those bindings. The spinbox builds..# off the entry widget, so it can reuse Entry bindings and procedures...#..# Copyright (c) 1992-1994 The Regents of the University of California...# Copyright (c) 1994-1997 Sun Microsystems, Inc...# Copyright (c) 1999-2000 Jeffrey Hobbs..# Copyright (c) 2000 Ajuba Solutions..#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....#-------------------------------------------------------------------------..# Elements of tk::Priv that are used in this file:..#..# afterId -..If non-null, it means that auto-scanning is underway..#...and it gives the "after" id for the next auto-scan..#...command to be executed...# mouseMoved -..Non-zero means the mouse has moved a significant..#...amount since the button went down (so, for example,..#.

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\tclIndex

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):20523
                                                                                                                      Entropy (8bit):4.786929402401609
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:eeVL0UI9Ms++J7VT/hc+ISyNsATbOan/uW/UFQ1gs1gxtKZufe2SvdJcmq/YbhEB:eeF0UI9Ms++J7VT/hc+ISyCATbOan2W+
                                                                                                                      MD5:9378397DD3DCA9DFB181F6F512B15631
                                                                                                                      SHA1:4F95DD6B658B6A912725DC7D6226F8414020D6C7
                                                                                                                      SHA-256:B04B1A675572E6FCD12C5FE82C4FD0930395548436FF93D848BF340AE202E7E3
                                                                                                                      SHA-512:D28CC3C8F3D0B1B2371CBD9EE29AC6881BABD8A07C762FF8F3284449998EE44FA44752CC8AB0DE47A3492776CE1D13BC8EA18CFDBDF710639D2D62D02CB917A9
                                                                                                                      Malicious:false
                                                                                                                      Preview:# Tcl autoload index file, version 2.0..# This file is generated by the "auto_mkindex" command..# and sourced to set up indexing information for one or..# more commands. Typically each line is a command that..# sets an element in the auto_index array, where the..# element name is the name of a command and the value is..# a script that loads the command.....set auto_index(::tk::dialog::error::Return) [list source [file join $dir bgerror.tcl]]..set auto_index(::tk::dialog::error::Details) [list source [file join $dir bgerror.tcl]]..set auto_index(::tk::dialog::error::SaveToLog) [list source [file join $dir bgerror.tcl]]..set auto_index(::tk::dialog::error::Destroy) [list source [file join $dir bgerror.tcl]]..set auto_index(::tk::dialog::error::bgerror) [list source [file join $dir bgerror.tcl]]..set auto_index(bgerror) [list source [file join $dir bgerror.tcl]]..set auto_index(::tk::ButtonInvoke) [list source [file join $dir button.tcl]]..set auto_index(::tk::ButtonAutoInvoke) [list sou

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\tearoff.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5309
                                                                                                                      Entropy (8bit):4.74935501162253
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:wfQXIqAv6iEwYtKVlPBnXWASbvMsDjXKpQQkK2tTsSZQ7Fowqm2K5r:wf+IqI6iU43PJYbvMsDjXKpsK2tISyZV
                                                                                                                      MD5:5F042DE8AD8941C7B9EF6D7BE06C86E4
                                                                                                                      SHA1:A4DFCEA2ACCAC2E85EAAA186DC765086D1E3AA3C
                                                                                                                      SHA-256:A4A8568633F827B54326640E6D1C3FDE4978EDC9E9FA1FB1D7B58F189DF1B1DC
                                                                                                                      SHA-512:E92A00028696A1557666CAB1C25AE6B63F25D75A9811BFAC56DFC069ECC769CC751B71CC81FA85C9CDE8F7FB6D7121EB64B58548CEE8AFE3F6C4A5C243507216
                                                                                                                      Malicious:false
                                                                                                                      Preview:# tearoff.tcl --..#..# This file contains procedures that implement tear-off menus...#..# Copyright (c) 1994 The Regents of the University of California...# Copyright (c) 1994-1997 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....# ::tk::TearoffMenu --..# Given the name of a menu, this procedure creates a torn-off menu..# that is identical to the given menu (including nested submenus)...# The new torn-off menu exists as a toplevel window managed by the..# window manager. The return value is the name of the new menu...# The window is created at the point specified by x and y..#..# Arguments:..# w -...The menu to be torn-off (duplicated)...# x -...x coordinate where window is created..# y -...y coordinate where window is created....proc ::tk::TearOffMenu {w {x 0} {y 0}} {.. # Find a unique name to use for the torn-off menu. Find the first.. # ancestor of w that is a

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\text.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):34969
                                                                                                                      Entropy (8bit):4.95825801435303
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:Rp4LaQDlOrqquMwIMyv4Et8avJLgmTGXs1bYMeNnnZl8n6KRD:RYK8aymTGs1b0xncn6KR
                                                                                                                      MD5:9CA5094ED6FE46620ABF090BF8E2AE63
                                                                                                                      SHA1:60DC3C2E3F69CE5B6DB4F2B3A1F3C109D766BC63
                                                                                                                      SHA-256:AB88556E349F03BACA2D8DC2121071A4F299DB86F484CAB2D9249FF4C7007564
                                                                                                                      SHA-512:0B0C20A754BE744A7FA214BA06AB0744A9BC466D51F96310D97EA1E61119A8ACFEF24E6DC5C4EBDD2C126BF84ACE74FFE622E9641C87E5A240DD13D1F7B5E6AF
                                                                                                                      Malicious:false
                                                                                                                      Preview:# text.tcl --..#..# This file defines the default bindings for Tk text widgets and provides..# procedures that help in implementing the bindings...#..# Copyright (c) 1992-1994 The Regents of the University of California...# Copyright (c) 1994-1997 Sun Microsystems, Inc...# Copyright (c) 1998 by Scriptics Corporation...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....#-------------------------------------------------------------------------..# Elements of ::tk::Priv that are used in this file:..#..# afterId -..If non-null, it means that auto-scanning is underway..#...and it gives the "after" id for the next auto-scan..#...command to be executed...# char -..Character position on the line; kept in order..#...to allow moving up or down past short lines while..#...still remembering the desired position...# mouseMoved -..Non-zero means the mouse has moved a significant..#...amount since the button we

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\tk.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:Tcl script, ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):24102
                                                                                                                      Entropy (8bit):5.137459715823081
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:NJyxt+WaB9USY15gSgC3DbTbXLXKr3cIXyDAbK2LMGgtewT+3oFQRyH5bAy59HmD:NJItNe9USZblXysm7GgteoFQRYMESL
                                                                                                                      MD5:184D05201893B2042D3FA6140FCF277C
                                                                                                                      SHA1:AAD67797864456749ADF0C4A1C0BE52F563C8FB8
                                                                                                                      SHA-256:1D5E7518AFC1382E36BF13FC5196C8A7CD93A4E9D24ACF445522564245A489B0
                                                                                                                      SHA-512:291BDF793CABC5EC27E8265A8A313FE0F4ACAB4DB6CE507A46488A83EEF72CD43CF5815762B22D1C8D64A9EEDEA927E109F937E6573058E5493B1354DD449CB3
                                                                                                                      Malicious:false
                                                                                                                      Preview:# tk.tcl --..#..# Initialization script normally executed in the interpreter for each Tk-based..# application. Arranges class bindings for widgets...#..# Copyright (c) 1992-1994 The Regents of the University of California...# Copyright (c) 1994-1996 Sun Microsystems, Inc...# Copyright (c) 1998-2000 Ajuba Solutions...#..# See the file "license.terms" for information on usage and redistribution of..# this file, and for a DISCLAIMER OF ALL WARRANTIES.....# Verify that we have Tk binary and script components from the same release..package require -exact Tk 8.6.13.....# Create a ::tk namespace..namespace eval ::tk {.. # Set up the msgcat commands.. namespace eval msgcat {...namespace export mc mcmax.. if {[interp issafe] || [catch {package require msgcat}]} {.. # The msgcat package is not available. Supply our own.. # minimal replacement... proc mc {src args} {.. return [format $src {*}$args].. }.. proc mc

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\tkfbox.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):39557
                                                                                                                      Entropy (8bit):5.186073482848965
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:768:+oj+AqE9cn9tJNgDt0/vsKulXgo65Eh6pQb:+6+Zv/ggEdio65Ehdb
                                                                                                                      MD5:670837EBC804E7B6E2F65F840BC508D6
                                                                                                                      SHA1:2DD316487F87DDE5D05F65F564CAE4E1306CE662
                                                                                                                      SHA-256:3AAA66AE8E74B94481C3F6642634E78BB5D7892771E7C27B54DFA56DED0B2F3C
                                                                                                                      SHA-512:BB8350ADDF1A25C037DFD60A4AFCBF401CACAD2A370B60BD0BA0981D938C46394BD8D40D1E9A66F4E3C46FCC2A41CF688E78C4F1FE918B45E70D3E92D8B3D116
                                                                                                                      Malicious:false
                                                                                                                      Preview:# tkfbox.tcl --..#..#.Implements the "TK" standard file selection dialog box. This dialog..#.box is used on the Unix platforms whenever the tk_strictMotif flag is..#.not set...#..#.The "TK" standard file selection dialog box is similar to the file..#.selection dialog box on Win95(TM). The user can navigate the..#.directories by clicking on the folder icons or by selecting the..#."Directory" option menu. The user can select files by clicking on the..#.file icons or by entering a filename in the "Filename:" entry...#..# Copyright (c) 1994-1998 Sun Microsystems, Inc...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....namespace eval ::tk::dialog {}..namespace eval ::tk::dialog::file {.. namespace import -force ::tk::msgcat::*.. variable showHiddenBtn 0.. variable showHiddenVar 1.... # Create the images if they did not already exist... if {![info exists ::tk::Priv(updirImage)]} {...s

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\altTheme.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3713
                                                                                                                      Entropy (8bit):4.915055696129498
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:InrWdo3L7Fe5qusQGdrMNnQbfIxEOxE0kFgG0FgGouox9FrGVuwg3kNcT+z5UlEr:UWdsOBn/1i+pqxwNjKs
                                                                                                                      MD5:01F28512E10ACBDDF93AE2BB29E343BC
                                                                                                                      SHA1:C9CF23D6315218B464061F011E4A9DC8516C8F1F
                                                                                                                      SHA-256:AE0437FB4E0EBD31322E4EACA626C12ABDE602DA483BB39D0C5EE1BC00AB0AF4
                                                                                                                      SHA-512:FE3BAE36DDB67F6D7A90B7A91B6EC1A009CF26C0167C46635E5A9CEAEC9083E59DDF74447BF6F60399657EE9604A2314B170F78A921CF948B2985DDF02A89DA6
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Ttk widget set: Alternate theme..#....namespace eval ttk::theme::alt {.... variable colors.. array set colors {...-frame .."#d9d9d9"...-window.."#ffffff"...-darker ."#c3c3c3"...-border.."#414141"...-activebg ."#ececec"...-disabledfg."#a3a3a3"...-selectbg."#4a6984"...-selectfg."#ffffff"...-altindicator."#aaaaaa".. }.... ttk::style theme settings alt {.....ttk::style configure "." \... -background .$colors(-frame) \... -foreground .black \... -troughcolor.$colors(-darker) \... -bordercolor.$colors(-border) \... -selectbackground .$colors(-selectbg) \... -selectforeground .$colors(-selectfg) \... -font ..TkDefaultFont \... ;.....ttk::style map "." -background \... [list disabled $colors(-frame) active $colors(-activebg)] ;...ttk::style map "." -foreground [list disabled $colors(-disabledfg)] ;.. ttk::style map "." -embossed [list disabled 1] ;.....ttk::style configure TButton \... -anchor center -width -11 -padding "1 1" \... -reli

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\aquaTheme.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3838
                                                                                                                      Entropy (8bit):4.940737732832436
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:WdbclJFvlyLi+8OWXgQahpvAdNutdHrFBlCFBK2tdHkFBlhKgY1geAWUWeFVvtdp:C8EQPNeWgFeqdXj
                                                                                                                      MD5:F07A3A86362E9E253BE91F59714FE134
                                                                                                                      SHA1:84DE1AB2EAE62E4B114F0E613BD94955AFA9E6C7
                                                                                                                      SHA-256:E199CC9C429B35A09721D0A22543C3729E2B8462E68DFA158C0CEC9C70A0D79D
                                                                                                                      SHA-512:324EAF9F857076CA4FECB26D8DF76F8BB1D3F15EAE55D6B6C9689BF1682B306AC7A3592B6A518D23F9FE4DC21EFB6ACF1ECA948F889FA1ADFFA0E12C0BEAB57F
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Aqua theme (OSX native look and feel)..#....namespace eval ttk::theme::aqua {.. ttk::style theme settings aqua {.....ttk::style configure . \... -font TkDefaultFont \... -background systemWindowBackgroundColor \... -foreground systemLabelColor \... -selectbackground systemSelectedTextBackgroundColor \... -selectforeground systemSelectedTextColor \... -selectborderwidth 0 \... -insertwidth 1.....ttk::style map . \... -foreground {....disabled systemDisabledControlTextColor....background systemLabelColor} \... -selectbackground {....background systemSelectedTextBackgroundColor....!focus systemSelectedTextBackgroundColor} \... -selectforeground {....background systemSelectedTextColor....!focus systemSelectedTextColor}.....# Button...ttk::style configure TButton -anchor center -width -6 \... -foreground systemControlTextColor...ttk::style map TButton \... -foreground {....pressed white... {alternate !pressed !background} white}...ttk::styl

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\button.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3014
                                                                                                                      Entropy (8bit):4.917794267131833
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:A5N+EqJWR1eTC01cG61ELLgrDgk1JgQ6TQGvhV5giT6TUP+3JWMHTeJ:kN+RQfccG61ooDgQ6dNT6TUP+PHO
                                                                                                                      MD5:D4BF1AF5DCDD85E3BD11DBF52EB2C146
                                                                                                                      SHA1:B1691578041319E671D31473A1DD404855D2038B
                                                                                                                      SHA-256:E38A9D1F437981AA6BF0BDD074D57B769A4140C0F7D9AFF51743FE4ECC6DFDDF
                                                                                                                      SHA-512:25834B4B231F4FF1A88EEF67E1A102D1D0546EC3B0D46856258A6BE6BBC4B381389C28E2EB60A01FF895DF24D6450CD16CA449C71F82BA53BA438A4867A47DCD
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Bindings for Buttons, Checkbuttons, and Radiobuttons...#..# Notes: <Button1-Leave>, <Button1-Enter> only control the "pressed"..# state; widgets remain "active" if the pointer is dragged out...# This doesn't seem to be conventional, but it's a nice way..# to provide extra feedback while the grab is active...# (If the button is released off the widget, the grab deactivates and..# we get a <Leave> event then, which turns off the "active" state)..#..# Normally, <ButtonRelease> and <ButtonN-Enter/Leave> events are..# delivered to the widget which received the initial <Button>..# event. However, Tk [grab]s (#1223103) and menu interactions..# (#1222605) can interfere with this. To guard against spurious..# <Button1-Enter> events, the <Button1-Enter> binding only sets..# the pressed state if the button is currently active...#....namespace eval ttk::button {}....bind TButton <Enter> ..{ %W instate !disabled {%W state active} }..bind TButton <Leave>..{ %W state !active }..bind TButton <s

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\clamTheme.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4809
                                                                                                                      Entropy (8bit):4.905115353394083
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:KrS4se/XhW03cC7TxPp/uo1ZUb0WZvSoetCgV+tMWG3xT3xgNB4x76FAuoxVYuIJ:oS4sSjWwFAGkhiP3xT3xL6B2bbe
                                                                                                                      MD5:2B20E7B2E6BDDBEB14F5F63BF38DBF24
                                                                                                                      SHA1:43DB48094C4BD7DE3B76AFBC051D887FEFE9887E
                                                                                                                      SHA-256:CFFC59931FDD1683AD23895E92522CF49B099128753FCDFF34374024E42CF995
                                                                                                                      SHA-512:1EB5EA78D26D18EAD6563AFBF1798F71723001DCC945E7DB3E4368564D0563029BE3565876AD8CB97331CFE34B2A0A313FA1BF252B87049160FE5DCD65434775
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# "Clam" theme...#..# Inspired by the XFCE family of Gnome themes...#....namespace eval ttk::theme::clam {.. variable colors.. array set colors {...-disabledfg.."#999999"...-frame .."#dcdad5"...-window .."#ffffff"...-dark..."#cfcdc8"...-darker .."#bab5ab"...-darkest.."#9e9a91"...-lighter.."#eeebe7"...-lightest .."#ffffff"...-selectbg.."#4a6984"...-selectfg.."#ffffff"...-altindicator.."#5895bc"...-disabledaltindicator."#a0a0a0".. }.... ttk::style theme settings clam {.....ttk::style configure "." \... -background $colors(-frame) \... -foreground black \... -bordercolor $colors(-darkest) \... -darkcolor $colors(-dark) \... -lightcolor $colors(-lighter) \... -troughcolor $colors(-darker) \... -selectbackground $colors(-selectbg) \... -selectforeground $colors(-selectfg) \... -selectborderwidth 0 \... -font TkDefaultFont \... ;.....ttk::style map "." \... -background [list disabled $colors(-frame) \..... active $colors(-lighter)] \..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\classicTheme.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3864
                                                                                                                      Entropy (8bit):4.935603001745302
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:zcJZjdWs+WVB4ULsMF7tnvnuSuqo5DKxiFgG0FgGHx9FrGTtu/3Kt+iW2PbuAk38:zcJZEstB4UoituSm+VtYErY
                                                                                                                      MD5:0205663142775F4EF2EB104661D30979
                                                                                                                      SHA1:452A0D613288A1CC8A1181C3CC1167E02AA69A73
                                                                                                                      SHA-256:424BBA4FB6836FEEBE34F6C176ED666DCE51D2FBA9A8D7AA756ABCBBAD3FC1E3
                                                                                                                      SHA-512:FB4D212A73A6F5A8D2774F43D310328B029B52B35BEE133584D8326363B385AB7AA4AE25E98126324CC716962888321E0006E5F6EF8563919A1D719019B2D117
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# "classic" Tk theme...#..# Implements Tk's traditional Motif-like look and feel...#....namespace eval ttk::theme::classic {.... variable colors; array set colors {...-frame.."#d9d9d9"...-window.."#ffffff"...-activebg."#ececec"...-troughbg."#c3c3c3"...-selectbg."#c3c3c3"...-selectfg."#000000"...-disabledfg."#a3a3a3"...-indicator."#b03060"...-altindicator."#b05e5e".. }.... ttk::style theme settings classic {...ttk::style configure "." \... -font..TkDefaultFont \... -background..$colors(-frame) \... -foreground..black \... -selectbackground.$colors(-selectbg) \... -selectforeground.$colors(-selectfg) \... -troughcolor.$colors(-troughbg) \... -indicatorcolor.$colors(-frame) \... -highlightcolor.$colors(-frame) \... -highlightthickness.1 \... -selectborderwidth.1 \... -insertwidth.2 \... ;.....# To match pre-Xft X11 appearance, use:...#.ttk::style configure . -font {Helvetica 12 bold}.....ttk::style map "." -background \... [list disabled

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\combobox.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):12718
                                                                                                                      Entropy (8bit):5.063548300335668
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:otLzBJ9SfinaXUBLPYXlk7fKiLH+AzIoJdJwGknmyLsxoVEQGITse8g5sarkT32e:wB5aXmLPYXmrKxLL7A
                                                                                                                      MD5:F7065D345A4BFB3127C3689BF1947C30
                                                                                                                      SHA1:9631C05365B0F5A36E4CA5CBA83628CCD7FCBDE1
                                                                                                                      SHA-256:68EED4AF6D2EC5B3EA24B1122A704B040366CBE2F458103137479352FFA1475A
                                                                                                                      SHA-512:74B99B9E326680150DD5EC7263192691BCD8A71B2A4EE7F3177DEDDD43E924A7925085C6D372731A70570F96B3924450255B2F54CA3B9C44D1160CA37E715B00
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Combobox bindings...#..# <<NOTE-WM-TRANSIENT>>:..#..#.Need to set [wm transient] just before mapping the popdown..#.instead of when it's created, in case a containing frame..#.has been reparented [#1818441]...#..#.On Windows: setting [wm transient] prevents the parent..#.toplevel from becoming inactive when the popdown is posted..#.(Tk 8.4.8+)..#..#.On X11: WM_TRANSIENT_FOR on override-redirect windows..#.may be used by compositing managers and by EWMH-aware..#.window managers (even though the older ICCCM spec says..#.it's meaningless)...#..#.On OSX: [wm transient] does utterly the wrong thing...#.Instead, we use [MacWindowStyle "help" "noActivates hideOnSuspend"]...#.The "noActivates" attribute prevents the parent toplevel..#.from deactivating when the popdown is posted, and is also..#.necessary for "help" windows to receive mouse events...#."hideOnSuspend" makes the popdown disappear (resp. reappear)..#.when the parent toplevel is deactivated (resp. reactivated)...#.(see [#18147

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\cursors.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4674
                                                                                                                      Entropy (8bit):4.836935825704301
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:DRYEqfLDxGmxGUetobPT6t6brv0q3O4Uxz0:DWEqTDbxdKobPqe5PUxw
                                                                                                                      MD5:1A799FE3754307A5AADE98C367E2F5D7
                                                                                                                      SHA1:C64BE4B77F0D298610F4EE20FCEBBAEE3C8B5F22
                                                                                                                      SHA-256:5B33F32B0139663347D6CF70A5A838F8E4554E0E881E97C8478B77733162EA73
                                                                                                                      SHA-512:89F367F9A59730BCDFC5ABDE0E35A10B72A1F19C68A768BA4524C938EF5C5CAF094C1BFA8FC74173F65201F6617544223C2143252A9F691EE9AAA7543315179F
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Map symbolic cursor names to platform-appropriate cursors...#..# The following cursors are defined:..#..#.standard.-- default cursor for most controls..#.""..-- inherit cursor from parent window..#.none..-- no cursor..#..#.text..-- editable widgets (entry, text)..#.link..-- hyperlinks within text..#.crosshair.-- graphic selection, fine control..#.busy..-- operation in progress..#.forbidden.-- action not allowed..#..#.hresize..-- horizontal resizing..#.vresize..-- vertical resizing..#..# Also resize cursors for each of the compass points,..# {nw,n,ne,w,e,sw,s,se}resize...#..# Platform notes:..#..# Windows doesn't distinguish resizing at the 8 compass points,..# only horizontal, vertical, and the two diagonals...#..# OSX doesn't have resize cursors for nw, ne, sw, or se corners...# We use the Tk-defined X11 fallbacks for these...#..# X11 doesn't have a "forbidden" cursor (usually a slashed circle);..# "pirate" seems to be the conventional cursor for this purpose...#..# Windows has a

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\defaults.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4553
                                                                                                                      Entropy (8bit):4.933885986949396
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:lNl3u3lCFUeuMGN3xbVJU+N3xbVJh3IwxkxlBqatUrtY:zl3ZUe9GN3NVC+N3NVjqntUZY
                                                                                                                      MD5:FC79F42761D63172163C08F0F5C94436
                                                                                                                      SHA1:AABAB4061597D0D6DC371F46D14AAA1A859096DF
                                                                                                                      SHA-256:49AE8FAF169165BDDAF01D50B52943EBAB3656E9468292B7890BE143D0FCBC91
                                                                                                                      SHA-512:F619834A95C9DEB93F8184BCC437D701A961C77E24A831ADBD5C145556D26986BFDA2A6ACB9E8784F8B2380E122D12AC893EB1B6ACF03098922889497E1FF9EA
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Settings for default theme...#....namespace eval ttk::theme::default {.. variable colors.. array set colors {...-frame..."#d9d9d9"...-foreground.."#000000"...-window..."#ffffff"...-text .."#000000"...-activebg.."#ececec"...-selectbg.."#4a6984"...-selectfg.."#ffffff"...-darker .."#c3c3c3"...-disabledfg.."#a3a3a3"...-indicator.."#4a6984"...-disabledindicator."#a3a3a3"...-altindicator.."#9fbdd8"...-disabledaltindicator."#c0c0c0".. }.... ttk::style theme settings default {.....ttk::style configure "." \... -borderwidth .1 \... -background .$colors(-frame) \... -foreground .$colors(-foreground) \... -troughcolor .$colors(-darker) \... -font ..TkDefaultFont \... -selectborderwidth.1 \... -selectbackground.$colors(-selectbg) \... -selectforeground.$colors(-selectfg) \... -insertwidth .1 \... -indicatordiameter.10 \... ;.....ttk::style map "." -background \... [list disabled $colors(-frame) active $colors(-activebg)]...ttk::style map "."

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\entry.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):17658
                                                                                                                      Entropy (8bit):5.026830367336785
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:sca9Jzcyzf6yzwO+v+iPT3vKof8q3YIuR13a:sT9Jzcy76wiV3YNa
                                                                                                                      MD5:7FFD7A32C7F8E234763E99E3357DB624
                                                                                                                      SHA1:67C67557F3A6DC8B240E85D46F6B733FEE45A013
                                                                                                                      SHA-256:266553EB9EED333DD836BA96204AE008F10686F4F12C404187F1E01CAB65D246
                                                                                                                      SHA-512:D18B73E44F37ED92B9FD7C1F6510285D1280EB5BC665B46996E538924E9D1CAD63337279BF92587132C3AEA497325A17CCE671EA59537B350F6D921C25346F39
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# DERIVED FROM: tk/library/entry.tcl r1.22..#..# Copyright (c) 1992-1994 The Regents of the University of California...# Copyright (c) 1994-1997 Sun Microsystems, Inc...# Copyright (c) 2004, Joe English..#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES...#....namespace eval ttk {.. namespace eval entry {...variable State.....set State(x) 0...set State(selectMode) none...set State(anchor) 0...set State(scanX) 0...set State(scanIndex) 0...set State(scanMoved) 0.....# Button-2 scan speed is (scanNum/scanDen) characters...# per pixel of mouse movement....# The standard Tk entry widget uses the equivalent of...# scanNum = 10, scanDen = average character width....# I don't know why that was chosen....#...set State(scanNum) 1...set State(scanDen) 1...set State(deadband) 3.;# #pixels for mouse-moved deadband... }..}....### Option database settings...#..option add *TEntry.cursor [ttk::cursor text] widg

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\fonts.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5732
                                                                                                                      Entropy (8bit):5.001928619185109
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:NzEh94ntnVU8Z/1LkAKgW22SeLMQR8hzcksejmOF4ytZm:Sh9ahV3ZWAKgWDfktm
                                                                                                                      MD5:80331FCBE4C049FF1A0D0B879CB208DE
                                                                                                                      SHA1:4EB3EFDFE3731BD1AE9FD52CE32B1359241F13CF
                                                                                                                      SHA-256:B94C319E5A557A5665B1676D602B6495C0887C5BACF7FA5B776200112978BB7B
                                                                                                                      SHA-512:A4BD2D91801C121A880225F1F3D0C4E30BF127190CF375F6F7A49EB4239A35C49C44F453D6D3610DF0D6A7B3CB15F4E79BD9C129025CC496CEB856FCC4B6DE87
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Font specifications...#..# This file, [source]d at initialization time, sets up the following..# symbolic fonts based on the current platform:..#..# TkDefaultFont.-- default for GUI items not otherwise specified..# TkTextFont.-- font for user text (entry, listbox, others)..# TkFixedFont.-- standard fixed width font..# TkHeadingFont.-- headings (column headings, etc)..# TkCaptionFont -- dialog captions (primary text in alert dialogs, etc.)..# TkTooltipFont.-- font to use for tooltip windows..# TkIconFont.-- font to use for icon captions..# TkMenuFont.-- used to use for menu items..#..# In Tk 8.5, some of these fonts may be provided by the TIP#145 implementation..# (On Windows and Mac OS X as of Oct 2007)...#..# +++ Platform notes:..#..# Windows:..#.The default system font changed from "MS Sans Serif" to "Tahoma"..# .in Windows XP/Windows 2000...#..#.MS documentation says to use "Tahoma 8" in Windows 2000/XP,..#.although many MS programs still use "MS Sans Serif 8"..#..#.Should use

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\menubutton.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):6443
                                                                                                                      Entropy (8bit):4.9213750923402735
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:toMcJQkmcE6fNuLyiCzSLSRwgppdT3kXdpK3dpKkSH2tOTjvAG:tRc6kFbcH2pyXz+zO2y
                                                                                                                      MD5:F11A76FBABF35E446A1200A5A7A6730A
                                                                                                                      SHA1:4CBAB3507C1EF275691C98620D2B5CEEB9043B3E
                                                                                                                      SHA-256:54663FBF524CAD9D74AB1EC44B7FDDE0B87F06E5347191962C97F51F714E29BB
                                                                                                                      SHA-512:95471D1519AE663EC7EB4639D847019E0C9F70DEA2B0680D81FB8BBE7CD1FF643A3DF5E06CA2CC54385BE094BDCC64AB0F1AA1652F91D16C4EF7B68CB670371E
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Bindings for Menubuttons...#..# Menubuttons have three interaction modes:..#..# Pulldown: Press menubutton, drag over menu, release to activate menu entry..# Popdown: Click menubutton to post menu..# Keyboard: <space> or accelerator key to post menu..#..# (In addition, when menu system is active, "dropdown" -- menu posts..# on mouse-over. Ttk menubuttons don't implement this)...#..# For keyboard and popdown mode, we hand off to tk_popup and let..# the built-in Tk bindings handle the rest of the interaction...#..# ON X11:..#..# Standard Tk menubuttons use a global grab on the menubutton...# This won't work for Ttk menubuttons in pulldown mode,..# since we need to process the final <ButtonRelease> event,..# and this might be delivered to the menu. So instead we..# rely on the passive grab that occurs on <Button> events,..# and transition to popdown mode when the mouse is released..# or dragged outside the menubutton...#..# ON WINDOWS:..#..# I'm not sure what the hell is going on h

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\notebook.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5825
                                                                                                                      Entropy (8bit):4.96378772387536
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:RErUhyi5JeUQBWdz6eP8ClR6/u6AsBmPNNiREUkheLY1EVL23sN2JJjQdD:6uyiyDQBP8q6/u6AUREUsNEVq3y2jkdD
                                                                                                                      MD5:F811F3E46A4EFA73292F40D1CDDD265D
                                                                                                                      SHA1:7FC70A1984555672653A0840499954B854F27920
                                                                                                                      SHA-256:22264D8D138E2C0E9A950305B4F08557C5A73F054F8215C0D8CE03854042BE76
                                                                                                                      SHA-512:4424B7C687EB9B1804ED3B1C685F19D4D349753B374D9046240F937785C9713E8A760ADA46CB628C15F9C7983CE4A7987691C968330478C9C1A9B74E953E40AC
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Bindings for TNotebook widget..#....namespace eval ttk::notebook {.. variable TLNotebooks ;# See enableTraversal..}....bind TNotebook <Button-1>..{ ttk::notebook::Press %W %x %y }..bind TNotebook <Right>...{ ttk::notebook::CycleTab %W 1; break }..bind TNotebook <Left>...{ ttk::notebook::CycleTab %W -1; break }..bind TNotebook <Control-Tab>..{ ttk::notebook::CycleTab %W 1; break }..bind TNotebook <Control-Shift-Tab>.{ ttk::notebook::CycleTab %W -1; break }..catch {..bind TNotebook <Control-ISO_Left_Tab>.{ ttk::notebook::CycleTab %W -1; break }..}..bind TNotebook <Destroy>..{ ttk::notebook::Cleanup %W }....# ActivateTab $nb $tab --..#.Select the specified tab and set focus...#..# Desired behavior:..#.+ take focus when reselecting the currently-selected tab;..#.+ keep focus if the notebook already has it;..#.+ otherwise set focus to the first traversable widget..#. in the newly-selected tab;..#.+ do not leave the focus in a deselected tab...#..proc ttk::notebook::ActivateTab {

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\panedwindow.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2274
                                                                                                                      Entropy (8bit):4.951790637542993
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:zVAqE3ZF8b4rXzsqAOAXsmCLFeNqkFeNXez:zLeU4bzSs1M
                                                                                                                      MD5:848A62BCF6ED3C16A8CFD26C43E1BC4E
                                                                                                                      SHA1:6F5E3EDF62716B511CF575BE2C6C997AFA2FA1E7
                                                                                                                      SHA-256:20EE6AD9D701709724292A926AF93C93784B254B48A656ECC140EF3A0FE10A11
                                                                                                                      SHA-512:AE78028EAF96E5B77DEFF0CD655360DB3A8058AC98B6753D9B77D629EDFFC582999A22A7075B9F5BA83EE65DA093E2CCB0EEAA4049898910D7AF517FDE60B28E
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Bindings for ttk::panedwindow widget...#....namespace eval ttk::panedwindow {.. variable State.. array set State {...pressed 0.. .pressX.-...pressY.-...sash .-...sashPos -.. }..}....## Bindings:..#..bind TPanedwindow <Button-1> ..{ ttk::panedwindow::Press %W %x %y }..bind TPanedwindow <B1-Motion>..{ ttk::panedwindow::Drag %W %x %y }..bind TPanedwindow <ButtonRelease-1> .{ ttk::panedwindow::Release %W %x %y }....bind TPanedwindow <Motion> ..{ ttk::panedwindow::SetCursor %W %x %y }..bind TPanedwindow <Enter> ..{ ttk::panedwindow::SetCursor %W %x %y }..bind TPanedwindow <Leave> ..{ ttk::panedwindow::ResetCursor %W }..# See <<NOTE-PW-LEAVE-NOTIFYINFERIOR>>..bind TPanedwindow <<EnteredChild>>.{ ttk::panedwindow::ResetCursor %W }....## Sash movement:..#..proc ttk::panedwindow::Press {w x y} {.. variable State.... set sash [$w identify $x $y].. if {$sash eq ""} {.. .set State(pressed) 0...return.. }.. set State(pressed) .1.. set State(pressX) .$x.. set

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\progress.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1138
                                                                                                                      Entropy (8bit):4.763501917862434
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:24:nJ8v3O0NSiio0pNFVkIks0ImxlnINgDImSgGINSyWghT:JFqS/o03fkxs0Rn+gD4v+S2F
                                                                                                                      MD5:DBF3BF0E8F04E9435E9561F740DFC700
                                                                                                                      SHA1:C7619A05A834EFB901C57DCFEC2C9E625F42428F
                                                                                                                      SHA-256:697CC0A75AE31FE9C2D85FB25DCA0AFA5D0DF9C523A2DFAD2E4A36893BE75FBA
                                                                                                                      SHA-512:D3B323DFB3EAC4A78DA2381405925C131A99C6806AF6FD8041102162A44E48BF166982A4AE4AA142A14601736716F1A628D9587E292FA8E4842BE984374CC192
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Ttk widget set: progress bar utilities...#....namespace eval ttk::progressbar {.. variable Timers.;# Map: widget name -> after ID..}....# Autoincrement --..#.Periodic callback procedure for autoincrement mode..#..proc ttk::progressbar::Autoincrement {pb steptime stepsize} {.. variable Timers.... if {![winfo exists $pb]} {.. .# widget has been destroyed -- cancel timer...unset -nocomplain Timers($pb)...return.. }.... set Timers($pb) [after $steptime \.. .[list ttk::progressbar::Autoincrement $pb $steptime $stepsize] ].... $pb step $stepsize..}....# ttk::progressbar::start --..#.Start autoincrement mode. Invoked by [$pb start] widget code...#..proc ttk::progressbar::start {pb {steptime 50} {stepsize 1}} {.. variable Timers.. if {![info exists Timers($pb)]} {...Autoincrement $pb $steptime $stepsize.. }..}....# ttk::progressbar::stop --..#.Cancel autoincrement mode. Invoked by [$pb stop] widget code...#..proc ttk::progressbar::stop {pb} {.. variabl

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\scale.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2787
                                                                                                                      Entropy (8bit):4.795451191784129
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:IKADAzizZIcAlRqucObmn4AzyVN2AJyhAzukPNP:IHIBRqupmLSZkklP
                                                                                                                      MD5:F1C33CC2D47115BBECD2E7C2FCB631A7
                                                                                                                      SHA1:0123A961242ED8049B37C77C726DB8DBD94C1023
                                                                                                                      SHA-256:B909ADD0B87FA8EE08FD731041907212A8A0939D37D2FF9B2F600CD67DABD4BB
                                                                                                                      SHA-512:96587A8C3555DA1D810010C10C516CE5CCAB071557A3C8D9BD65C647C7D4AD0E35CBED0788F1D72BAFAC8C84C7E2703FC747F70D9C95F720745A1FC4A701C544
                                                                                                                      Malicious:false
                                                                                                                      Preview:# scale.tcl - Copyright (C) 2004 Pat Thoyts <patthoyts@users.sourceforge.net>..#..# Bindings for the TScale widget....namespace eval ttk::scale {.. variable State.. array set State {...dragging 0.. }..}....bind TScale <Button-1> { ttk::scale::Press %W %x %y }..bind TScale <B1-Motion> { ttk::scale::Drag %W %x %y }..bind TScale <ButtonRelease-1> { ttk::scale::Release %W %x %y }....bind TScale <Button-2> { ttk::scale::Jump %W %x %y }..bind TScale <B2-Motion> { ttk::scale::Drag %W %x %y }..bind TScale <ButtonRelease-2> { ttk::scale::Release %W %x %y }....bind TScale <Button-3> { ttk::scale::Jump %W %x %y }..bind TScale <B3-Motion> { ttk::scale::Drag %W %x %y }..bind TScale <ButtonRelease-3> { ttk::scale::Release %W %x %y }....## Keyboard navigation bindings:..#..bind TScale <<LineStart>> { %W set [%W cget -from] }..bind TScale <<LineEnd>> { %W set [%W cget -to] }....bind TScale <<PrevChar>> { ttk::scale::Increment %W -1 }..bin

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\scrollbar.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):3285
                                                                                                                      Entropy (8bit):4.979174619784594
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:tyASEji8RYQ8FGD7BDos9Q1TBfvq/HKTh9lkHv8T/mAezeLEAAFULxZh4x:eIi8qFu2d11XlhfkPcczeLS4Zm
                                                                                                                      MD5:3FB31A225CEC64B720B8E579582F2749
                                                                                                                      SHA1:9C0151D9E2543C217CF8699FF5D4299A72E8F13C
                                                                                                                      SHA-256:6EAA336B13815A7FC18BCD6B9ADF722E794DA2888D053C229044784C8C8E9DE8
                                                                                                                      SHA-512:E6865655585E3D2D6839B56811F3FD86B454E8CD44E258BB1AC576AD245FF8A4D49FBB7F43458BA8A6C9DAAC8DFA923A176F0DD8A9976A11BEA09E6E2D17BF45
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Bindings for TScrollbar widget..#....namespace eval ttk::scrollbar {.. variable State.. # State(xPress).--.. # State(yPress).-- initial position of mouse at start of drag... # State(first).-- value of -first at start of drag...}....bind TScrollbar <Button-1> ..{ ttk::scrollbar::Press %W %x %y }..bind TScrollbar <B1-Motion>..{ ttk::scrollbar::Drag %W %x %y }..bind TScrollbar <ButtonRelease-1>.{ ttk::scrollbar::Release %W %x %y }....bind TScrollbar <Button-2> ..{ ttk::scrollbar::Jump %W %x %y }..bind TScrollbar <B2-Motion>..{ ttk::scrollbar::Drag %W %x %y }..bind TScrollbar <ButtonRelease-2>.{ ttk::scrollbar::Release %W %x %y }....# Redirect scrollwheel bindings to the scrollbar widget..#..# The shift-bindings scroll left/right (not up/down)..# if a widget has both possibilities..set eventList [list <MouseWheel> <Shift-MouseWheel>]..switch [tk windowingsystem] {.. aqua {.. lappend eventList <Option-MouseWheel> <Shift-Option-MouseWheel>.. }.. x11 {..

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\sizegrip.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2503
                                                                                                                      Entropy (8bit):4.830288003879418
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:naLvMnAqeYQWYh7FvBrrbnMCfY/aVAbAigWAuFM0PfWAX20:nWQapprPnJY/8A8iRFdPtj
                                                                                                                      MD5:DD6A1737B14D3F7B2A0B4F8BE99C30AF
                                                                                                                      SHA1:E6B06895317E73CD3DC78234DD74C74F3DB8C105
                                                                                                                      SHA-256:E92D77B5CDCA2206376DB2129E87E3D744B3D5E31FDE6C0BBD44A494A6845CE1
                                                                                                                      SHA-512:B74AE92EDD53652F8A3DB0D84C18F9CE9069805BCAB0D3C2DBB537D7C241AA2681DA69B699D88A10029798D7B5BC015682F64699BA475AE6A379EEF23B48DAAF
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Sizegrip widget bindings...#..# Dragging a sizegrip widget resizes the containing toplevel...#..# NOTE: the sizegrip widget must be in the lower right hand corner...#....switch -- [tk windowingsystem] {.. x11 -.. win32 {...option add *TSizegrip.cursor [ttk::cursor seresize] widgetDefault.. }.. aqua {.. .# Aqua sizegrips use default Arrow cursor... }..}....namespace eval ttk::sizegrip {.. variable State.. array set State {...pressed .0...pressX ..0...pressY ..0...width ..0...height ..0...widthInc.1...heightInc.1.. resizeX 1.. resizeY 1...toplevel .{}.. }..}....bind TSizegrip <Button-1> ..{ ttk::sizegrip::Press.%W %X %Y }..bind TSizegrip <B1-Motion> ..{ ttk::sizegrip::Drag .%W %X %Y }..bind TSizegrip <ButtonRelease-1> .{ ttk::sizegrip::Release %W %X %Y }....proc ttk::sizegrip::Press {W X Y} {.. variable State.... if {[$W instate disabled]} { return }.... set top [winfo toplevel $W].... # If the toplevel is not resi

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\spinbox.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):5003
                                                                                                                      Entropy (8bit):5.055050310142795
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:1qg/+yrjqA/K5ytxm1J1Ve6J1yQLUAzz/S76hrwxGGe2F:N/+yr2Gk1J1Ve6fxUAzDS76hrwxs2F
                                                                                                                      MD5:9C2833FAA9248F09BC2E6AB1BA326D59
                                                                                                                      SHA1:F13CF048FD706BBB1581DC80E33D1AAD910D93E8
                                                                                                                      SHA-256:DF286BB59F471AA1E19DF39AF0EF7AA84DF9F04DC4A439A747DD8BA43C300150
                                                                                                                      SHA-512:5FF3BE1E3D651C145950C3FC5B8C2E842211C937D1042173964383D4D59ECF5DD0EC39FF7771D029716F2D895F0B1A72591EF3BF7947FE64D4D6DB5F0B8ABFFB
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# ttk::spinbox bindings..#....namespace eval ttk::spinbox { }....### Spinbox bindings...#..# Duplicate the Entry bindings, override if needed:..#....ttk::copyBindings TEntry TSpinbox....bind TSpinbox <Motion>...{ ttk::spinbox::Motion %W %x %y }..bind TSpinbox <Button-1> ..{ ttk::spinbox::Press %W %x %y }..bind TSpinbox <ButtonRelease-1> .{ ttk::spinbox::Release %W }..bind TSpinbox <Double-Button-1> .{ ttk::spinbox::DoubleClick %W %x %y }..bind TSpinbox <Triple-Button-1> .{} ;# disable TEntry triple-click....bind TSpinbox <Up>...{ event generate %W <<Increment>> }..bind TSpinbox <Down> ...{ event generate %W <<Decrement>> }....bind TSpinbox <<Increment>>..{ ttk::spinbox::Spin %W +1 }..bind TSpinbox <<Decrement>> ..{ ttk::spinbox::Spin %W -1 }....ttk::bindMouseWheel TSpinbox ..[list ttk::spinbox::MouseWheel %W]....## Motion --..#.Sets cursor...#..proc ttk::spinbox::Motion {w x y} {.. variable State.. ttk::saveCursor $w State(userConfCursor) [ttk::cursor text].. if { [$w ide

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\treeview.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):10180
                                                                                                                      Entropy (8bit):4.886259798213254
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:FoTvMxHZZ1u2xj7+ZBHxjiXJv9IfwW+vr3UxjXEJDTF/MyLF3JcMzlsra2tYGa5P:mImAkRKYXMH59o4UbS30LWb
                                                                                                                      MD5:F705B3A292D02061DA0ABB4A8DD24077
                                                                                                                      SHA1:FD75C2250F6F66435444F7DEEF383C6397ED2368
                                                                                                                      SHA-256:C88B60FFB0F72E095F6FC9786930ADD7F9ED049EABC713F889F9A7DA516E188C
                                                                                                                      SHA-512:09817638DD3D3D5C57FA630C7EDF2F19C3956C9BD264DBF07627FA14A03AECD22D5A5319806E49EF1030204FADEF17C57CE8EAE4378A319AD2093321D9151C8F
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# ttk::treeview widget bindings and utilities...#....namespace eval ttk::treeview {.. variable State.... # Enter/Leave/Motion.. #.. set State(activeWidget) .{}.. set State(activeHeading) .{}.... # Press/drag/release:.. #.. set State(pressMode) .none.. set State(pressX)..0.... # For pressMode == "resize".. set State(resizeColumn).#0.... # For pressmode == "heading".. set State(heading) .{}..}....### Widget bindings...#....bind Treeview.<Motion> ..{ ttk::treeview::Motion %W %x %y }..bind Treeview.<B1-Leave>..{ #nothing }..bind Treeview.<Leave>...{ ttk::treeview::ActivateHeading {} {}}..bind Treeview.<Button-1> ..{ ttk::treeview::Press %W %x %y }..bind Treeview.<Double-Button-1> .{ ttk::treeview::DoubleClick %W %x %y }..bind Treeview.<ButtonRelease-1> .{ ttk::treeview::Release %W %x %y }..bind Treeview.<B1-Motion> ..{ ttk::treeview::Drag %W %x %y }..bind Treeview .<Up> ..{ ttk::treeview::Keynav %W up }..bind Treeview .<Down> ..{ ttk::treeview

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\ttk.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):4993
                                                                                                                      Entropy (8bit):4.954034141173847
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:96:lfxukTy5jPTq8LIgF2diyNTNR6nkrn4ijSSvNigyJ5612HtZG835MSvWOTRsHWU:BM+y5jrq8G/2nkEijSSvNigyJ5612Htw
                                                                                                                      MD5:AF45B2C8B43596D1BDECA5233126BD14
                                                                                                                      SHA1:A99E75D299C4579E10FCDD59389B98C662281A26
                                                                                                                      SHA-256:2C48343B1A47F472D1A6B9EE8D670CE7FB428DB0DB7244DC323FF4C7A8B4F64B
                                                                                                                      SHA-512:C8A8D01C61774321778AB149F6CA8DDA68DB69133CB5BA7C91938E4FD564160ECDCEC473222AFFB241304A9ACC73A36B134B3A602FD3587C711F2ADBB64AFA80
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Ttk widget set initialization script...#....### Source library scripts...#....namespace eval ::ttk {.. variable library.. if {![info exists library]} {...set library [file dirname [info script]].. }..}....source -encoding utf-8 [file join $::ttk::library fonts.tcl]..source -encoding utf-8 [file join $::ttk::library cursors.tcl]..source -encoding utf-8 [file join $::ttk::library utils.tcl]....## ttk::deprecated $old $new --..#.Define $old command as a deprecated alias for $new command..#.$old and $new must be fully namespace-qualified...#..proc ttk::deprecated {old new} {.. interp alias {} $old {} ttk::do'deprecate $old $new..}..## do'deprecate --..#.Implementation procedure for deprecated commands --..#.issue a warning (once), then re-alias old to new...#..proc ttk::do'deprecate {old new args} {.. deprecated'warning $old $new.. interp alias {} $old {} $new.. uplevel 1 [linsert $args 0 $new]..}....## deprecated'warning --..#.Gripe about use of deprecated comman

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\utils.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):8624
                                                                                                                      Entropy (8bit):5.001791071900077
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:e0ebpSp+IZwnmTmpx8xzaHfw8K7LlJWQl8p7M+R5:rw0+WmpWxa/w9nlJHu
                                                                                                                      MD5:51086BC3315A4AE4A8591A654CFC3CEA
                                                                                                                      SHA1:2AC08309C63575B7A01FA62D3C262643CD8C823A
                                                                                                                      SHA-256:4AA041C050758B3331DC395381F7FBCE81E387908FC7A3C6107C4E7140F56F2E
                                                                                                                      SHA-512:6D69F7EAC9D5AF3B3EA85AE3E74BDFA6278789502D5E35EFE94349BFC543503BE7540D783D2632E349DD53F21074C702AC1FC487EE70C74234A08397F7238723
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Utilities for widget implementations...#....### Focus management...#..# See also: #1516479..#....## ttk::takefocus --..#.This is the default value of the "-takefocus" option..#.for ttk::* widgets that participate in keyboard navigation...#..# NOTES:..#.tk::FocusOK (called by tk_focusNext) tests [winfo viewable]..#.if -takefocus is 1, empty, or missing; but not if it's a..#.script prefix, so we have to check that here as well...#..#..proc ttk::takefocus {w} {.. expr {[$w instate !disabled] && [winfo viewable $w]}..}....## ttk::GuessTakeFocus --..#.This routine is called as a fallback for widgets..#.with a missing or empty -takefocus option...#..#.It implements the same heuristics as tk::FocusOK...#..proc ttk::GuessTakeFocus {w} {.. # Don't traverse to widgets with '-state disabled':.. #.. if {![catch {$w cget -state} state] && $state eq "disabled"} {...return 0.. }.... # Allow traversal to widgets with explicit key or focus bindings:.. #.. if {[regexp {Key|F

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\vistaTheme.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):9710
                                                                                                                      Entropy (8bit):4.6639701588183895
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:BktY1F+qXd95WSZaHFHRE3GRKFh2oaoT/ezKpqvYMHab:V1F+cd95WSZuhRE34KbPmKmY2ab
                                                                                                                      MD5:0AA7F8B43C3E07F3A4DA07FC6DF9A1B0
                                                                                                                      SHA1:153AFB735B10BBA16CFBE161777232F983845D90
                                                                                                                      SHA-256:EC5F203C69DF390E9B99944CF3526D6E77DC6F68E9B1A029F326A41AFED1EF81
                                                                                                                      SHA-512:5406553211CD6714C98EF7765ABD46424CCB013343EFF693FDD3AE6E0AAE9B5983446E0E1CC706D6B2C285084BF83D397306D3D52028CBBCFB8F369857C5B69C
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Settings for Microsoft Windows Vista and Server 2008..#....# The Vista theme can only be defined on Windows Vista and above. The theme..# is created in C due to the need to assign a theme-enabled function for..# detecting when themeing is disabled. On systems that cannot support the..# Vista theme, there will be no such theme created and we must not..# evaluate this script.....if {"vista" ni [ttk::style theme names]} {.. return..}....namespace eval ttk::theme::vista {.... ttk::style theme settings vista {.... .ttk::style configure . \... -background SystemButtonFace \... -foreground SystemWindowText \... -selectforeground SystemHighlightText \... -selectbackground SystemHighlight \... -insertcolor SystemWindowText \... -font TkDefaultFont \... ;.....ttk::style map "." \... -foreground [list disabled SystemGrayText] \... ;.....ttk::style configure TButton -anchor center -padding {1 1} -width -11...ttk::style configure TRadiobutton -padding 2...ttk::

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\winTheme.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2865
                                                                                                                      Entropy (8bit):4.917847108902527
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:b69VhW2gL5FPVWRzQsVqrEuF3yYrf7rfJF8xUqBgLt6g3ktO5jo4+iZ6O2htYtCW:bbXl+CEqZNNSxU0Ht2MR7W
                                                                                                                      MD5:769C0719A4044F91E7D132A25291E473
                                                                                                                      SHA1:6FB07B0C887D443A43FB15D5728920B578171219
                                                                                                                      SHA-256:AE82BCCCE708FF9C303CBCB3D4CC3FF5577A60D5B23822EA79E3E07CCE3CBBD1
                                                                                                                      SHA-512:47FED061DDC6B4EB63EF77901D0094FF2EBB1BAFACB3F44FBF13FB59DEA1EC83985B2862086ECF1A7957819A88A0FAA144B35F16BEA9356BBD9775070D42E636
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Settings for 'winnative' theme...#....namespace eval ttk::theme::winnative {.. ttk::style theme settings winnative {.....ttk::style configure "." \... -background SystemButtonFace \... -foreground SystemWindowText \... -selectforeground SystemHighlightText \... -selectbackground SystemHighlight \... -fieldbackground SystemWindow \... -insertcolor SystemWindowText \... -troughcolor SystemScrollbar \... -font TkDefaultFont \... ;.....ttk::style map "." -foreground [list disabled SystemGrayText] ;.. ttk::style map "." -embossed [list disabled 1] ;.....ttk::style configure TButton \... -anchor center -width -11 -relief raised -shiftrelief 1...ttk::style configure TCheckbutton -padding "2 4"...ttk::style configure TRadiobutton -padding "2 4"...ttk::style configure TMenubutton \... -padding "8 4" -arrowsize 3 -relief raised.....ttk::style map TButton -relief {{!disabled pressed} sunken}.....ttk::style configure TEntry \... -padding 2 -select

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\ttk\xpTheme.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):2103
                                                                                                                      Entropy (8bit):4.9805308941424355
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:aaiIu89VhW2gLRWJyO514rf+rfzxTrf/MW+iZ6O2htYtCp:XoXAk21nxQ7p
                                                                                                                      MD5:162F30D2716438C75EA16B57E6F63088
                                                                                                                      SHA1:3F626FF0496BB16B27106BED7E38D1C72D1E3E27
                                                                                                                      SHA-256:AEDB21C6B2909A4BB4686837D2126E521A8CC2B38414A4540387B801EBD75466
                                                                                                                      SHA-512:6EBF9648F1381D04F351BB469B6E3A38F3D002189C92EAF80A18D65632037FF37D34EC8814BBF7FAE34553645BFC13985212F24684EE8C4E205729B975C88C97
                                                                                                                      Malicious:false
                                                                                                                      Preview:#..# Settings for 'xpnative' theme..#....namespace eval ttk::theme::xpnative {.... ttk::style theme settings xpnative {.....ttk::style configure . \... -background SystemButtonFace \... -foreground SystemWindowText \... -selectforeground SystemHighlightText \... -selectbackground SystemHighlight \... -insertcolor SystemWindowText \... -font TkDefaultFont \... ;.....ttk::style map "." \... -foreground [list disabled SystemGrayText] \... ;.....ttk::style configure TButton -anchor center -padding {1 1} -width -11...ttk::style configure TRadiobutton -padding 2...ttk::style configure TCheckbutton -padding 2...ttk::style configure TMenubutton -padding {8 4}.....ttk::style configure TNotebook -tabmargins {2 2 2 0}...ttk::style map TNotebook.Tab \... -expand [list selected {2 2 2 2}].....ttk::style configure TLabelframe.Label -foreground "#0046d5".....# OR: -padding {3 3 3 6}, which some apps seem to use....ttk::style configure TEntry -padding {2 2 2 4}...ttk::

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\unsupported.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):10521
                                                                                                                      Entropy (8bit):5.0647027375963996
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:192:1Y3uWEXm/swEePmJhRAXd1hTHsHG2ML/9Lm2daM0Hu:8hodMiM0Hu
                                                                                                                      MD5:508F7E258C04970FAE526990168CB773
                                                                                                                      SHA1:33785204B18C0E0F5CDCB5B49399B5907351FDB8
                                                                                                                      SHA-256:B463B366F139DDF7FED31F34C6D2341F9F27845A1A358011DFC801E1333B1828
                                                                                                                      SHA-512:A12985B58DD1D46297119CED47B7F44EF4139CED6C36FD028E66DD657E5ED0663B744C679A5BF7A39B39D17A32E1280D2945F6B9AD59AEF20436F68040F6070C
                                                                                                                      Malicious:false
                                                                                                                      Preview:# unsupported.tcl --..#..# Commands provided by Tk without official support. Use them at your..# own risk. They may change or go away without notice...#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES.....# ----------------------------------------------------------------------..# Unsupported compatibility interface for folks accessing Tk's private..# commands and variable against recommended usage...# ----------------------------------------------------------------------....namespace eval ::tk::unsupported {.... # Map from the old global names of Tk private commands to their.. # new namespace-encapsulated names..... variable PrivateCommands.. array set PrivateCommands {...tkButtonAutoInvoke..::tk::ButtonAutoInvoke...tkButtonDown...::tk::ButtonDown...tkButtonEnter...::tk::ButtonEnter...tkButtonInvoke...::tk::ButtonInvoke...tkButtonLeave...::tk::ButtonLeave...tkButtonUp...::tk::ButtonUp...tk

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\tk\xmfbox.tcl

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):26991
                                                                                                                      Entropy (8bit):4.974180990171971
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:384:0BLzjXhss64XKNFXm39QJ63nwFiHLgRIdNPCRE5phLtffsNP4XWdxWk+I5oP9jNR:0BvjXoFCB3flLCRE5phLCP3xWq8vWTod
                                                                                                                      MD5:FA99EF44FAA88A6BA1967A1257DEB97B
                                                                                                                      SHA1:CC99DBF678F4169A90ACC5A89C6F8DAB48052EC6
                                                                                                                      SHA-256:C4722EADEDE763FA52E7937D40067B0F8EB86B7A4B707F90212ED3E5289690D0
                                                                                                                      SHA-512:3AF16095784908A444CD61EEF178A30B9FED9C20AA91D94044A3AECB6047267FB80BCE790FC1F28FB19AEF664A6618FD832612F541FDADCC34B6C01E92E5EA40
                                                                                                                      Malicious:false
                                                                                                                      Preview:# xmfbox.tcl --..#..#.Implements the "Motif" style file selection dialog for the..#.Unix platform. This implementation is used only if the..#."::tk_strictMotif" flag is set...#..# Copyright (c) 1996 Sun Microsystems, Inc...# Copyright (c) 1998-2000 Scriptics Corporation..#..# See the file "license.terms" for information on usage and redistribution..# of this file, and for a DISCLAIMER OF ALL WARRANTIES.....namespace eval ::tk::dialog {}..namespace eval ::tk::dialog::file {}......# ::tk::MotifFDialog --..#..#.Implements a file dialog similar to the standard Motif file..#.selection box...#..# Arguments:..#.type.."open" or "save"..#.args..Options parsed by the procedure...#..# Results:..#.When -multiple is set to 0, this returns the absolute pathname..#.of the selected file. (NOTE: This is not the same as a single..#.element list.)..#..#.When -multiple is set to > 0, this returns a Tcl list of absolute..# pathnames. The argument for -multiple is ignored, but for consistency..#

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\unicodedata.pyd

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1137944
                                                                                                                      Entropy (8bit):5.462087550450309
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12288:/rEHdcM6hb4CjJ43w9hIpCQvb0QN8MdIEQ+U2BNNmD+99FfciQn:/rEXtCjfk7bPNfv42BN6yzUiQn
                                                                                                                      MD5:16BE9A6F941F1A2CB6B5FCA766309B2C
                                                                                                                      SHA1:17B23AE0E6A11D5B8159C748073E36A936F3316A
                                                                                                                      SHA-256:10FFD5207EEFF5A836B330B237D766365D746C30E01ABF0FD01F78548D1F1B04
                                                                                                                      SHA-512:64B7ECC58AE7CF128F03A0D5D5428AAA0D4AD4AE7E7D19BE0EA819BBBF99503836BFE4946DF8EE3AB8A92331FDD002AB9A9DE5146AF3E86FEF789CE46810796B
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........aM...#...#...#..x....#.."...#..&...#..'...#.. ...#..."...#..x"...#..."...#.......#...#...#......#...!...#.Rich..#.................PE..d....K.f.........." ...&.>..........\*.......................................p.......Q....`.........................................p...X............P.......@.........../...`......P^..T............................]..@............P..p............................text....=.......>.................. ..`.rdata..\....P.......B..............@..@.data........ ......................@....pdata.......@......................@..@.rsrc........P......."..............@..@.reloc.......`.......,..............@..B........................................................................................................................................................................................................................................

                                                                                                                      C:\Users\user\AppData\Local\Temp\_MEI73442\zlib1.dll

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):146712
                                                                                                                      Entropy (8bit):6.609130019215802
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:3072:xqLKjJj3yg1shVjm4OvfqnKAh2mrohmR5JHDbuC8:xqGEgSefI3roCDbi
                                                                                                                      MD5:297E845DD893E549146AE6826101E64F
                                                                                                                      SHA1:6C52876EA6EFB2BC8D630761752DF8C0A79542F1
                                                                                                                      SHA-256:837EFB838CB91428C8C0DFB65D5AF1E69823FF1594780EB8C8E9D78F7C4B2FC1
                                                                                                                      SHA-512:F6EFEF5E34BA13F1DFDDACFEA15F385DE91D310D73A6894CABB79C2186ACCC186C80CEF7405658D91517C3C10C66E1ACB93E8AD2450D4346F1AA85661B6074C3
                                                                                                                      Malicious:false
                                                                                                                      Antivirus:
                                                                                                                      • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                      • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                      Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...x.Oc..........."...'............P..........A....................................@.....`... ......................................@.......P..8......................../......................................(....................Q..p............................text...............................`..`.data...............................@....rdata...W.......X..................@..@.pdata..............................@..@.xdata....... ......................@..@.bss.........0...........................edata.......@......................@..@.idata..8....P......................@....CRT....X....`......................@....tls.........p......................@....rsrc...............................@....reloc..............................@..B................................................................................................................................

                                                                                                                      C:\Users\user\Desktop\private_key.pem

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:PEM RSA private key
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):1675
                                                                                                                      Entropy (8bit):6.014053254525517
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:48:LrdCoqK5CT8unQsNvzk7uS9Gx1RPBY/7sUIkv+f+NwfRQ:LrdCtJjN7kamGxO/7sUFv+fpRQ
                                                                                                                      MD5:5B50C71F52C92AEC694C402017C76819
                                                                                                                      SHA1:7B88DCBA2681618A725C06D4CC791DE2AFC8A08B
                                                                                                                      SHA-256:3EB1ACAFADD9DB41A2124161D2818BF1D6D842012C82F14C373F4C18998ADBC4
                                                                                                                      SHA-512:BF0114B4321C7625B145E3881C1A384B1F745F34B318F50DC5B23336E7A0C282375932A54C0BAE52668E31B8C27EF6913CF6AE17C0FC827B38A32213EB1EABBC
                                                                                                                      Malicious:false
                                                                                                                      Preview:-----BEGIN RSA PRIVATE KEY-----.MIIEowIBAAKCAQEAzYhfDBLCEKZrE0CQAJnjm4WWivTgjrOixf6LyFl+LMOH5bRp.48XIBlESFyFp6kE7SmT6zypxvODj4Oklqq4FANZDoqMM0yAsf8ueBxaBtF9eEEt2.xlolf+yr6rJTX3b5BnHb3jAX+t0fh1BhpmqvIH1t7A4LUxQbKDXN+NDdsbHZEgaD.xAX3eHEsjL/PwJSo9OuZo7cwbYEIja9b/3gMDT4GMP0289GlURugkGOu0zDnLEKj.AvZ+p+o8AIjjmQKtvNgAgRjNj3IOBGlXiwzXXAZRXTe3LFa8xDo43+4WnLcF3Ngj.eQC2YLB9Avpi2+SDfxB9WPl6Wjul2o3fbyp2JQIDAQABAoIBAA6Nn/FKaLxmFEHe.OfQY8XFjMagwM7BXDukHH521nIYN6FL/BdpveDzeQ7IolwfTy592a/38SuZtZCVa.TOT7gnYvNcXP1soiRpRb9hoZYWDEufPcbBIacvpOZ1PsgZPKaFKpAEEI1cHZI3Dg.47E1b6YUy5JB4lJlI5Ei0i1SmMgKp8wUDtBdjwh1SebAKcRj8H1oLZ3AQm4l9q6S.WfGFM0iV2GsBGDCNcMkXxkGx3923N64kcD4Lp9/SvTCHvpTi1/VbEaPqwXuBxSzK.E800Xeiqjt8Q4UzX/9Y8IqmhvU1pvlelHakYxX/CNT5zCAjHhgBem1ZM8LRA9eEv.iSAij+cCgYEA7R6zLAugw0wiQyyoylZOpVy96zujpojs+xLoaZVFcPbHo5i7/Yx+.ueaSIREGwMkXwU47GxawGIYp/+QGbN4LqmJ2nu8Jm3sZx8kD8JNo/UAeFoZj8Ucs.p2sKlIflnZuZpTIr/1F/KFepeh8qj7glysFq3NPxwOqTiO7Nig+zTh8CgYEA3eXR.WUv5ABhR+yoUEZqdkeCTPdDRFKRClMX+qgsjTtT5BOcdU+cqPkY7+ElD2n

                                                                                                                      C:\Users\user\Desktop\public_key.pem

                                                                                                                      Download File
                                                                                                                      Process:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      File Type:ASCII text
                                                                                                                      Category:dropped
                                                                                                                      Size (bytes):451
                                                                                                                      Entropy (8bit):5.83061688433348
                                                                                                                      Encrypted:false
                                                                                                                      SSDEEP:12:LrL48UI/Vpzd3bjful5Blg034gnPDlQmrCdAaQyneruqAW:LrLHUWDxLjmf34aPhQmrCdAaQynQuS
                                                                                                                      MD5:C59F4BE5D12793AEFBEA8CBACD77D4DC
                                                                                                                      SHA1:A761B02485F0FFE275B4D271B146BFE3B052D0B9
                                                                                                                      SHA-256:3F967432DF62F128742FF614036EBDCCFC42D387ED51945DB5C3807DF8BAD2A9
                                                                                                                      SHA-512:2F233305C0EE0AF9A5932921F7BFD533E4D97C718EE75B0D4A6F96E4704B167EF7F240B8C97638C6D060BF3F3536554621080C6894C4CD9312DA486E77067817
                                                                                                                      Malicious:false
                                                                                                                      Preview:-----BEGIN PUBLIC KEY-----.MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYhfDBLCEKZrE0CQAJnj.m4WWivTgjrOixf6LyFl+LMOH5bRp48XIBlESFyFp6kE7SmT6zypxvODj4Oklqq4F.ANZDoqMM0yAsf8ueBxaBtF9eEEt2xlolf+yr6rJTX3b5BnHb3jAX+t0fh1Bhpmqv.IH1t7A4LUxQbKDXN+NDdsbHZEgaDxAX3eHEsjL/PwJSo9OuZo7cwbYEIja9b/3gM.DT4GMP0289GlURugkGOu0zDnLEKjAvZ+p+o8AIjjmQKtvNgAgRjNj3IOBGlXiwzX.XAZRXTe3LFa8xDo43+4WnLcF3NgjeQC2YLB9Avpi2+SDfxB9WPl6Wjul2o3fbyp2.JQIDAQAB.-----END PUBLIC KEY-----.

                                                                                                                      Static File Info

                                                                                                                      General

                                                                                                                      File type:PE32+ executable (GUI) x86-64, for MS Windows
                                                                                                                      Entropy (8bit):7.991806150499824
                                                                                                                      TrID:
                                                                                                                      • Win64 Executable GUI (202006/5) 92.65%
                                                                                                                      • Win64 Executable (generic) (12005/4) 5.51%
                                                                                                                      • Generic Win/DOS Executable (2004/3) 0.92%
                                                                                                                      • DOS Executable Generic (2002/1) 0.92%
                                                                                                                      • Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
                                                                                                                      File name:Aimbot.exe
                                                                                                                      File size:13'439'784 bytes
                                                                                                                      MD5:b121a204d1da912895072b38471e6165
                                                                                                                      SHA1:4d0d7ae81f2b4713a313b16d48aaa89eedce9492
                                                                                                                      SHA256:54d1845b815984ae78d8dc18c6bb75b2249d49b60048fd8d3de4352c0f459b38
                                                                                                                      SHA512:0dc403279dddd6e091dc598ccd8acf2f2a2613ec764344201aa77c498168b54527003147b7d6aa5dddfa2c3b222e0d4beeb1b97e911d652af3b71711fa877f86
                                                                                                                      SSDEEP:393216:jlQbP8AxYDX1+TtIiEY9Z8D8CclyhCW8S61XD:JQAX71QtIla8DZczW8Su
                                                                                                                      TLSH:38D63354319104D8DBBA493FE5CAE57EA6AA74890F72828B13B42D301F476FE9E33711
                                                                                                                      File Content Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...................................-.....................,.............................................................Rich...........

                                                                                                                      File Icon

                                                                                                                      Icon Hash:a793d1fcedcac442

                                                                                                                      Static PE Info

                                                                                                                      General

                                                                                                                      Entrypoint:0x14000c540
                                                                                                                      Entrypoint Section:.text
                                                                                                                      Digitally signed:false
                                                                                                                      Imagebase:0x140000000
                                                                                                                      Subsystem:windows gui
                                                                                                                      Image File Characteristics:EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
                                                                                                                      DLL Characteristics:HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE
                                                                                                                      Time Stamp:0x662A2148 [Thu Apr 25 09:24:24 2024 UTC]
                                                                                                                      TLS Callbacks:
                                                                                                                      CLR (.Net) Version:
                                                                                                                      OS Version Major:5
                                                                                                                      OS Version Minor:2
                                                                                                                      File Version Major:5
                                                                                                                      File Version Minor:2
                                                                                                                      Subsystem Version Major:5
                                                                                                                      Subsystem Version Minor:2
                                                                                                                      Import Hash:f4f2e2b03fe5666a721620fcea3aea9b

                                                                                                                      Entrypoint Preview

                                                                                                                      Instruction
                                                                                                                      dec eax
                                                                                                                      sub esp, 28h
                                                                                                                      call 00007F76CC9AA6CCh
                                                                                                                      dec eax
                                                                                                                      add esp, 28h
                                                                                                                      jmp 00007F76CC9AA2EFh
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      dec eax
                                                                                                                      sub esp, 28h
                                                                                                                      call 00007F76CC9AAC44h
                                                                                                                      test eax, eax
                                                                                                                      je 00007F76CC9AA493h
                                                                                                                      dec eax
                                                                                                                      mov eax, dword ptr [00000030h]
                                                                                                                      dec eax
                                                                                                                      mov ecx, dword ptr [eax+08h]
                                                                                                                      jmp 00007F76CC9AA477h
                                                                                                                      dec eax
                                                                                                                      cmp ecx, eax
                                                                                                                      je 00007F76CC9AA486h
                                                                                                                      xor eax, eax
                                                                                                                      dec eax
                                                                                                                      cmpxchg dword ptr [00034FACh], ecx
                                                                                                                      jne 00007F76CC9AA460h
                                                                                                                      xor al, al
                                                                                                                      dec eax
                                                                                                                      add esp, 28h
                                                                                                                      ret
                                                                                                                      mov al, 01h
                                                                                                                      jmp 00007F76CC9AA469h
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      dec eax
                                                                                                                      sub esp, 28h
                                                                                                                      test ecx, ecx
                                                                                                                      jne 00007F76CC9AA479h
                                                                                                                      mov byte ptr [00034F95h], 00000001h
                                                                                                                      call 00007F76CC9AAA51h
                                                                                                                      call 00007F76CC9AB058h
                                                                                                                      test al, al
                                                                                                                      jne 00007F76CC9AA476h
                                                                                                                      xor al, al
                                                                                                                      jmp 00007F76CC9AA486h
                                                                                                                      call 00007F76CC9B8FEFh
                                                                                                                      test al, al
                                                                                                                      jne 00007F76CC9AA47Bh
                                                                                                                      xor ecx, ecx
                                                                                                                      call 00007F76CC9AB068h
                                                                                                                      jmp 00007F76CC9AA45Ch
                                                                                                                      mov al, 01h
                                                                                                                      dec eax
                                                                                                                      add esp, 28h
                                                                                                                      ret
                                                                                                                      int3
                                                                                                                      int3
                                                                                                                      inc eax
                                                                                                                      push ebx
                                                                                                                      dec eax
                                                                                                                      sub esp, 20h
                                                                                                                      cmp byte ptr [00034F5Ch], 00000000h
                                                                                                                      mov ebx, ecx
                                                                                                                      jne 00007F76CC9AA4D9h
                                                                                                                      cmp ecx, 01h
                                                                                                                      jnbe 00007F76CC9AA4DCh
                                                                                                                      call 00007F76CC9AABBAh
                                                                                                                      test eax, eax
                                                                                                                      je 00007F76CC9AA49Ah
                                                                                                                      test ebx, ebx
                                                                                                                      jne 00007F76CC9AA496h
                                                                                                                      dec eax
                                                                                                                      lea ecx, dword ptr [00034F46h]
                                                                                                                      call 00007F76CC9B8DE2h

                                                                                                                      Data Directories

                                                                                                                      NameVirtual AddressVirtual Size Is in Section
                                                                                                                      IMAGE_DIRECTORY_ENTRY_EXPORT0x00x0
                                                                                                                      IMAGE_DIRECTORY_ENTRY_IMPORT0x3e0bc0x78.rdata
                                                                                                                      IMAGE_DIRECTORY_ENTRY_RESOURCE0x470000x2c794.rsrc
                                                                                                                      IMAGE_DIRECTORY_ENTRY_EXCEPTION0x430000x231c.pdata
                                                                                                                      IMAGE_DIRECTORY_ENTRY_SECURITY0x00x0
                                                                                                                      IMAGE_DIRECTORY_ENTRY_BASERELOC0x740000x758.reloc
                                                                                                                      IMAGE_DIRECTORY_ENTRY_DEBUG0x3b4600x1c.rdata
                                                                                                                      IMAGE_DIRECTORY_ENTRY_COPYRIGHT0x00x0
                                                                                                                      IMAGE_DIRECTORY_ENTRY_GLOBALPTR0x00x0
                                                                                                                      IMAGE_DIRECTORY_ENTRY_TLS0x00x0
                                                                                                                      IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG0x3b3200x140.rdata
                                                                                                                      IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT0x00x0
                                                                                                                      IMAGE_DIRECTORY_ENTRY_IAT0x2c0000x438.rdata
                                                                                                                      IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT0x00x0
                                                                                                                      IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR0x00x0
                                                                                                                      IMAGE_DIRECTORY_ENTRY_RESERVED0x00x0

                                                                                                                      Sections

                                                                                                                      NameVirtual AddressVirtual SizeRaw SizeMD5Xored PEZLIB ComplexityFile TypeEntropyCharacteristics
                                                                                                                      .text0x10000x2afb00x2b00040bf1edebd1304ce1b08c50cb556d4dbFalse0.5458416606104651data6.5002315273868IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
                                                                                                                      .rdata0x2c0000x12f360x13000f6781e34a76897dcc76bd871bb986a44False0.5160747327302632data5.827940973181075IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
                                                                                                                      .data0x3f0000x33b80xe00ae0f42b168987b17129506ccc4960b21False0.13392857142857142firmware 32a2 vdf2d (revision 2569732096) \377\377\377\377 , version 256.0.512, 0 bytes or less, at 0xcd5d20d2 1725235199 bytes , at 0 0 bytes , at 0xffffffff 16777216 bytes1.8264700601019173IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                      .pdata0x430000x231c0x2400ffc5390666982cab67e3c9bf8e263bc3False0.4784071180555556data5.382434020909434IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
                                                                                                                      _RDATA0x460000x1f40x200771f0b097891d31289bb68f0eb426e66False0.529296875data3.713242247775091IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
                                                                                                                      .rsrc0x470000x2c7940x2c8000cc72d4cc5f603d8e1b3b9cda0ae3f07False0.6193491046348315data6.27918966743365IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
                                                                                                                      .reloc0x740000x7580x8007ecf18b15822e1aa4c79b9a361f07c79False0.546875data5.250941834312499IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

                                                                                                                      Resources

                                                                                                                      NameRVASizeTypeLanguageCountryZLIB Complexity
                                                                                                                      RT_ICON0x470e80x2c188Device independent bitmap graphic, 256 x 342 x 32, image size 175104, resolution 39 x 39 px/m0.620111175089693
                                                                                                                      RT_GROUP_ICON0x732700x14data1.2
                                                                                                                      RT_MANIFEST0x732840x50dXML 1.0 document, ASCII text0.4694508894044857

                                                                                                                      Imports

                                                                                                                      DLLImport
                                                                                                                      USER32.dllCreateWindowExW, PostMessageW, GetMessageW, MessageBoxW, MessageBoxA, SystemParametersInfoW, DestroyIcon, SetWindowLongPtrW, GetWindowLongPtrW, GetClientRect, InvalidateRect, ReleaseDC, GetDC, DrawTextW, GetDialogBaseUnits, EndDialog, DialogBoxIndirectParamW, MoveWindow, SendMessageW
                                                                                                                      COMCTL32.dll
                                                                                                                      KERNEL32.dllIsValidCodePage, GetStringTypeW, GetFileAttributesExW, HeapReAlloc, FlushFileBuffers, GetCurrentDirectoryW, GetACP, GetOEMCP, GetModuleHandleW, MulDiv, GetLastError, SetDllDirectoryW, CreateFileW, GetFinalPathNameByHandleW, CloseHandle, GetModuleFileNameW, CreateSymbolicLinkW, GetCPInfo, GetCommandLineW, GetEnvironmentVariableW, SetEnvironmentVariableW, ExpandEnvironmentStringsW, CreateDirectoryW, GetTempPathW, WaitForSingleObject, Sleep, GetExitCodeProcess, CreateProcessW, GetStartupInfoW, FreeLibrary, LoadLibraryExW, SetConsoleCtrlHandler, FindClose, FindFirstFileExW, GetCurrentProcess, LocalFree, FormatMessageW, MultiByteToWideChar, WideCharToMultiByte, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetProcessHeap, GetTimeZoneInformation, HeapSize, WriteConsoleW, SetEndOfFile, GetProcAddress, GetSystemTimeAsFileTime, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, TerminateProcess, IsProcessorFeaturePresent, QueryPerformanceCounter, GetCurrentProcessId, GetCurrentThreadId, InitializeSListHead, IsDebuggerPresent, RtlUnwindEx, SetLastError, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, EncodePointer, RaiseException, RtlPcToFileHeader, GetCommandLineA, GetDriveTypeW, GetFileInformationByHandle, GetFileType, PeekNamedPipe, SystemTimeToTzSpecificLocalTime, FileTimeToSystemTime, GetFullPathNameW, RemoveDirectoryW, FindNextFileW, SetStdHandle, DeleteFileW, ReadFile, GetStdHandle, WriteFile, ExitProcess, GetModuleHandleExW, HeapFree, GetConsoleMode, ReadConsoleW, SetFilePointerEx, GetConsoleOutputCP, GetFileSizeEx, HeapAlloc, FlsAlloc, FlsGetValue, FlsSetValue, FlsFree, CompareStringW, LCMapStringW
                                                                                                                      ADVAPI32.dllOpenProcessToken, GetTokenInformation, ConvertStringSecurityDescriptorToSecurityDescriptorW, ConvertSidToStringSidW
                                                                                                                      GDI32.dllSelectObject, DeleteObject, CreateFontIndirectW

                                                                                                                      Network Behavior

                                                                                                                      ⊘No network behavior found

                                                                                                                      Statistics

                                                                                                                      CPU Usage

                                                                                                                      Click to jump to process

                                                                                                                      Memory Usage

                                                                                                                      Click to jump to process

                                                                                                                      Behavior

                                                                                                                      Click to jump to process

                                                                                                                      System Behavior

                                                                                                                      General

                                                                                                                      Target ID:0
                                                                                                                      Start time:13:22:55
                                                                                                                      Start date:25/04/2024
                                                                                                                      Path:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      Wow64 process (32bit):false
                                                                                                                      Commandline:"C:\Users\user\Desktop\Aimbot.exe"
                                                                                                                      Imagebase:0x7ff74b4d0000
                                                                                                                      File size:13'439'784 bytes
                                                                                                                      MD5 hash:B121A204D1DA912895072B38471E6165
                                                                                                                      Has elevated privileges:true
                                                                                                                      Has administrator privileges:true
                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                      Reputation:low
                                                                                                                      Has exited:false

                                                                                                                      General

                                                                                                                      Target ID:1
                                                                                                                      Start time:13:23:02
                                                                                                                      Start date:25/04/2024
                                                                                                                      Path:C:\Users\user\Desktop\Aimbot.exe
                                                                                                                      Wow64 process (32bit):false
                                                                                                                      Commandline:"C:\Users\user\Desktop\Aimbot.exe"
                                                                                                                      Imagebase:0x7ff74b4d0000
                                                                                                                      File size:13'439'784 bytes
                                                                                                                      MD5 hash:B121A204D1DA912895072B38471E6165
                                                                                                                      Has elevated privileges:true
                                                                                                                      Has administrator privileges:true
                                                                                                                      Programmed in:C, C++ or other language
                                                                                                                      Reputation:low
                                                                                                                      Has exited:false

                                                                                                                      Disassembly

                                                                                                                      Reset < >

                                                                                                                        Execution Graph

                                                                                                                        Execution Coverage:9.3%
                                                                                                                        Dynamic/Decrypted Code Coverage:0%
                                                                                                                        Signature Coverage:16.4%
                                                                                                                        Total number of Nodes:2000
                                                                                                                        Total number of Limit Nodes:33
                                                                                                                        execution_graph 20131 7ff74b4da76d 20133 7ff74b4da772 20131->20133 20132 7ff74b4da8da 20137 7ff74b4db960 12 API calls 20132->20137 20140 7ff74b4da443 20132->20140 20133->20132 20133->20133 20133->20140 20141 7ff74b4db960 20133->20141 20134 7ff74b4db850 12 API calls 20136 7ff74b4da656 20134->20136 20138 7ff74b4dabe8 20137->20138 20139 7ff74b4db960 12 API calls 20138->20139 20139->20140 20140->20134 20140->20136 20142 7ff74b4db9c0 20141->20142 20143 7ff74b4dbefa 20142->20143 20148 7ff74b4db9df 20142->20148 20144 7ff74b4dc144 8 API calls 20143->20144 20145 7ff74b4dbeff 20144->20145 20146 7ff74b4dc010 _wfindfirst32i64 8 API calls 20147 7ff74b4dbedc 20146->20147 20147->20132 20148->20146 19624 7ff74b4dc2e0 19625 7ff74b4dc2f0 19624->19625 19641 7ff74b4ea95c 19625->19641 19627 7ff74b4dc2fc 19647 7ff74b4dc5d8 19627->19647 19629 7ff74b4dc8bc 7 API calls 19631 7ff74b4dc395 19629->19631 19630 7ff74b4dc314 _RTC_Initialize 19639 7ff74b4dc369 19630->19639 19652 7ff74b4dc788 19630->19652 19633 7ff74b4dc329 19655 7ff74b4e9dc8 19633->19655 19639->19629 19640 7ff74b4dc385 19639->19640 19642 7ff74b4ea96d 19641->19642 19643 7ff74b4ea975 19642->19643 19644 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 19642->19644 19643->19627 19645 7ff74b4ea984 19644->19645 19646 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 19645->19646 19646->19643 19648 7ff74b4dc5e9 19647->19648 19651 7ff74b4dc5ee __scrt_acquire_startup_lock 19647->19651 19649 7ff74b4dc8bc 7 API calls 19648->19649 19648->19651 19650 7ff74b4dc662 19649->19650 19651->19630 19680 7ff74b4dc74c 19652->19680 19654 7ff74b4dc791 19654->19633 19656 7ff74b4e9de8 19655->19656 19678 7ff74b4dc335 19655->19678 19657 7ff74b4e9e06 GetModuleFileNameW 19656->19657 19658 7ff74b4e9df0 19656->19658 19662 7ff74b4e9e31 19657->19662 19659 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 19658->19659 19660 7ff74b4e9df5 19659->19660 19661 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 19660->19661 19661->19678 19695 7ff74b4e9d68 19662->19695 19665 7ff74b4e9e79 19666 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 19665->19666 19667 7ff74b4e9e7e 19666->19667 19669 7ff74b4eb700 __free_lconv_mon 11 API calls 19667->19669 19668 7ff74b4e9eb3 19670 7ff74b4eb700 __free_lconv_mon 11 API calls 19668->19670 19669->19678 19670->19678 19671 7ff74b4e9e91 19671->19668 19672 7ff74b4e9edf 19671->19672 19673 7ff74b4e9ef8 19671->19673 19674 7ff74b4eb700 __free_lconv_mon 11 API calls 19672->19674 19676 7ff74b4eb700 __free_lconv_mon 11 API calls 19673->19676 19675 7ff74b4e9ee8 19674->19675 19677 7ff74b4eb700 __free_lconv_mon 11 API calls 19675->19677 19676->19668 19677->19678 19678->19639 19679 7ff74b4dc85c InitializeSListHead 19678->19679 19681 7ff74b4dc766 19680->19681 19683 7ff74b4dc75f 19680->19683 19684 7ff74b4eaf9c 19681->19684 19683->19654 19687 7ff74b4eabd8 19684->19687 19694 7ff74b4f11a8 EnterCriticalSection 19687->19694 19696 7ff74b4e9d80 19695->19696 19697 7ff74b4e9db8 19695->19697 19696->19697 19698 7ff74b4ef948 _wfindfirst32i64 11 API calls 19696->19698 19697->19665 19697->19671 19699 7ff74b4e9dae 19698->19699 19700 7ff74b4eb700 __free_lconv_mon 11 API calls 19699->19700 19700->19697 16296 7ff74b4db2dc 16297 7ff74b4da5da 16296->16297 16299 7ff74b4da656 16297->16299 16300 7ff74b4db850 16297->16300 16301 7ff74b4db873 16300->16301 16302 7ff74b4db88f memcpy_s 16300->16302 16303 7ff74b4ee3ac 12 API calls 16301->16303 16302->16299 16303->16302 19332 7ff74b4f04dc 19333 7ff74b4f06ce 19332->19333 19335 7ff74b4f051e _isindst 19332->19335 19334 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 19333->19334 19352 7ff74b4f06be 19334->19352 19335->19333 19338 7ff74b4f059e _isindst 19335->19338 19336 7ff74b4dc010 _wfindfirst32i64 8 API calls 19337 7ff74b4f06e9 19336->19337 19353 7ff74b4f70e4 19338->19353 19343 7ff74b4f06fa 19344 7ff74b4eb6b8 _wfindfirst32i64 17 API calls 19343->19344 19347 7ff74b4f070e 19344->19347 19350 7ff74b4f05fb 19350->19352 19378 7ff74b4f7128 19350->19378 19352->19336 19354 7ff74b4f70f3 19353->19354 19355 7ff74b4f05bc 19353->19355 19385 7ff74b4f11a8 EnterCriticalSection 19354->19385 19360 7ff74b4f64e8 19355->19360 19361 7ff74b4f64f1 19360->19361 19365 7ff74b4f05d1 19360->19365 19362 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 19361->19362 19363 7ff74b4f64f6 19362->19363 19364 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 19363->19364 19364->19365 19365->19343 19366 7ff74b4f6518 19365->19366 19367 7ff74b4f6521 19366->19367 19368 7ff74b4f05e2 19366->19368 19369 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 19367->19369 19368->19343 19372 7ff74b4f6548 19368->19372 19370 7ff74b4f6526 19369->19370 19371 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 19370->19371 19371->19368 19373 7ff74b4f6551 19372->19373 19374 7ff74b4f05f3 19372->19374 19375 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 19373->19375 19374->19343 19374->19350 19376 7ff74b4f6556 19375->19376 19377 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 19376->19377 19377->19374 19386 7ff74b4f11a8 EnterCriticalSection 19378->19386 20722 7ff74b4fbe14 20725 7ff74b4e5b68 LeaveCriticalSection 20722->20725 19462 7ff74b4fbc8e 19463 7ff74b4fbc9e 19462->19463 19466 7ff74b4e5b68 LeaveCriticalSection 19463->19466 19786 7ff74b4e5b00 19787 7ff74b4e5b0b 19786->19787 19795 7ff74b4eff54 19787->19795 19808 7ff74b4f11a8 EnterCriticalSection 19795->19808 19809 7ff74b4f2500 19820 7ff74b4f8494 19809->19820 19821 7ff74b4f84a1 19820->19821 19822 7ff74b4eb700 __free_lconv_mon 11 API calls 19821->19822 19823 7ff74b4f84bd 19821->19823 19822->19821 19824 7ff74b4eb700 __free_lconv_mon 11 API calls 19823->19824 19825 7ff74b4f2509 19823->19825 19824->19823 19826 7ff74b4f11a8 EnterCriticalSection 19825->19826 19827 7ff74b4eab00 19830 7ff74b4eaa80 19827->19830 19837 7ff74b4f11a8 EnterCriticalSection 19830->19837 20186 7ff74b4ebd80 20187 7ff74b4ebd85 20186->20187 20188 7ff74b4ebd9a 20186->20188 20192 7ff74b4ebda0 20187->20192 20193 7ff74b4ebde2 20192->20193 20194 7ff74b4ebdea 20192->20194 20195 7ff74b4eb700 __free_lconv_mon 11 API calls 20193->20195 20196 7ff74b4eb700 __free_lconv_mon 11 API calls 20194->20196 20195->20194 20197 7ff74b4ebdf7 20196->20197 20198 7ff74b4eb700 __free_lconv_mon 11 API calls 20197->20198 20199 7ff74b4ebe04 20198->20199 20200 7ff74b4eb700 __free_lconv_mon 11 API calls 20199->20200 20201 7ff74b4ebe11 20200->20201 20202 7ff74b4eb700 __free_lconv_mon 11 API calls 20201->20202 20203 7ff74b4ebe1e 20202->20203 20204 7ff74b4eb700 __free_lconv_mon 11 API calls 20203->20204 20205 7ff74b4ebe2b 20204->20205 20206 7ff74b4eb700 __free_lconv_mon 11 API calls 20205->20206 20207 7ff74b4ebe38 20206->20207 20208 7ff74b4eb700 __free_lconv_mon 11 API calls 20207->20208 20209 7ff74b4ebe45 20208->20209 20210 7ff74b4eb700 __free_lconv_mon 11 API calls 20209->20210 20211 7ff74b4ebe55 20210->20211 20212 7ff74b4eb700 __free_lconv_mon 11 API calls 20211->20212 20213 7ff74b4ebe65 20212->20213 20218 7ff74b4ebc4c 20213->20218 20232 7ff74b4f11a8 EnterCriticalSection 20218->20232 19853 7ff74b4fbea9 19854 7ff74b4fbec2 19853->19854 19855 7ff74b4fbeb8 19853->19855 19857 7ff74b4f1208 LeaveCriticalSection 19855->19857 16223 7ff74b4db5a0 16224 7ff74b4db5ce 16223->16224 16225 7ff74b4db5b5 16223->16225 16225->16224 16228 7ff74b4ee3ac 16225->16228 16229 7ff74b4ee3f7 16228->16229 16233 7ff74b4ee3bb _wfindfirst32i64 16228->16233 16238 7ff74b4e5cb4 16229->16238 16230 7ff74b4ee3de RtlAllocateHeap 16232 7ff74b4db62c 16230->16232 16230->16233 16233->16229 16233->16230 16235 7ff74b4f43e0 16233->16235 16241 7ff74b4f4420 16235->16241 16247 7ff74b4ec078 GetLastError 16238->16247 16240 7ff74b4e5cbd 16240->16232 16246 7ff74b4f11a8 EnterCriticalSection 16241->16246 16248 7ff74b4ec0b9 FlsSetValue 16247->16248 16250 7ff74b4ec09c 16247->16250 16249 7ff74b4ec0cb 16248->16249 16262 7ff74b4ec0a9 SetLastError 16248->16262 16264 7ff74b4ef948 16249->16264 16250->16248 16250->16262 16254 7ff74b4ec0f8 FlsSetValue 16257 7ff74b4ec116 16254->16257 16258 7ff74b4ec104 FlsSetValue 16254->16258 16255 7ff74b4ec0e8 FlsSetValue 16256 7ff74b4ec0f1 16255->16256 16271 7ff74b4eb700 16256->16271 16277 7ff74b4ebcac 16257->16277 16258->16256 16262->16240 16269 7ff74b4ef959 _wfindfirst32i64 16264->16269 16265 7ff74b4ef9aa 16267 7ff74b4e5cb4 _wfindfirst32i64 10 API calls 16265->16267 16266 7ff74b4ef98e RtlAllocateHeap 16268 7ff74b4ec0da 16266->16268 16266->16269 16267->16268 16268->16254 16268->16255 16269->16265 16269->16266 16270 7ff74b4f43e0 _wfindfirst32i64 2 API calls 16269->16270 16270->16269 16272 7ff74b4eb705 RtlRestoreThreadPreferredUILanguages 16271->16272 16273 7ff74b4eb734 16271->16273 16272->16273 16274 7ff74b4eb720 GetLastError 16272->16274 16273->16262 16275 7ff74b4eb72d __free_lconv_mon 16274->16275 16276 7ff74b4e5cb4 _wfindfirst32i64 9 API calls 16275->16276 16276->16273 16282 7ff74b4ebb84 16277->16282 16294 7ff74b4f11a8 EnterCriticalSection 16282->16294 21004 7ff74b4d9d9b 21005 7ff74b4d9da1 21004->21005 21006 7ff74b4db850 12 API calls 21005->21006 21007 7ff74b4da656 21005->21007 21006->21007 19862 7ff74b4f8cd0 19865 7ff74b4f3440 19862->19865 19866 7ff74b4f344d 19865->19866 19867 7ff74b4f3492 19865->19867 19871 7ff74b4ebfd4 19866->19871 19872 7ff74b4ebfe5 FlsGetValue 19871->19872 19873 7ff74b4ec000 FlsSetValue 19871->19873 19874 7ff74b4ebff2 19872->19874 19875 7ff74b4ebffa 19872->19875 19873->19874 19876 7ff74b4ec00d 19873->19876 19877 7ff74b4ebff8 19874->19877 19878 7ff74b4eb2bc __CxxCallCatchBlock 45 API calls 19874->19878 19875->19873 19879 7ff74b4ef948 _wfindfirst32i64 11 API calls 19876->19879 19891 7ff74b4f3114 19877->19891 19880 7ff74b4ec075 19878->19880 19881 7ff74b4ec01c 19879->19881 19882 7ff74b4ec03a FlsSetValue 19881->19882 19883 7ff74b4ec02a FlsSetValue 19881->19883 19885 7ff74b4ec046 FlsSetValue 19882->19885 19886 7ff74b4ec058 19882->19886 19884 7ff74b4ec033 19883->19884 19887 7ff74b4eb700 __free_lconv_mon 11 API calls 19884->19887 19885->19884 19888 7ff74b4ebcac _wfindfirst32i64 11 API calls 19886->19888 19887->19874 19889 7ff74b4ec060 19888->19889 19890 7ff74b4eb700 __free_lconv_mon 11 API calls 19889->19890 19890->19877 19914 7ff74b4f3384 19891->19914 19893 7ff74b4f3149 19929 7ff74b4f2e14 19893->19929 19896 7ff74b4f3166 19896->19867 19897 7ff74b4ee3ac _fread_nolock 12 API calls 19898 7ff74b4f3177 19897->19898 19899 7ff74b4f317f 19898->19899 19901 7ff74b4f318e 19898->19901 19900 7ff74b4eb700 __free_lconv_mon 11 API calls 19899->19900 19900->19896 19901->19901 19936 7ff74b4f34bc 19901->19936 19904 7ff74b4f328a 19905 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 19904->19905 19906 7ff74b4f328f 19905->19906 19908 7ff74b4eb700 __free_lconv_mon 11 API calls 19906->19908 19907 7ff74b4f32e5 19910 7ff74b4f334c 19907->19910 19947 7ff74b4f2c44 19907->19947 19908->19896 19909 7ff74b4f32a4 19909->19907 19912 7ff74b4eb700 __free_lconv_mon 11 API calls 19909->19912 19911 7ff74b4eb700 __free_lconv_mon 11 API calls 19910->19911 19911->19896 19912->19907 19915 7ff74b4f33a7 19914->19915 19917 7ff74b4f33b1 19915->19917 19962 7ff74b4f11a8 EnterCriticalSection 19915->19962 19920 7ff74b4f3423 19917->19920 19922 7ff74b4eb2bc __CxxCallCatchBlock 45 API calls 19917->19922 19920->19893 19923 7ff74b4f343b 19922->19923 19925 7ff74b4f3492 19923->19925 19926 7ff74b4ebfd4 50 API calls 19923->19926 19925->19893 19927 7ff74b4f347c 19926->19927 19928 7ff74b4f3114 65 API calls 19927->19928 19928->19925 19930 7ff74b4e5788 45 API calls 19929->19930 19931 7ff74b4f2e28 19930->19931 19932 7ff74b4f2e46 19931->19932 19933 7ff74b4f2e34 GetOEMCP 19931->19933 19934 7ff74b4f2e5b 19932->19934 19935 7ff74b4f2e4b GetACP 19932->19935 19933->19934 19934->19896 19934->19897 19935->19934 19937 7ff74b4f2e14 47 API calls 19936->19937 19938 7ff74b4f34e9 19937->19938 19939 7ff74b4f363f 19938->19939 19941 7ff74b4f3526 IsValidCodePage 19938->19941 19946 7ff74b4f3540 __scrt_get_show_window_mode 19938->19946 19940 7ff74b4dc010 _wfindfirst32i64 8 API calls 19939->19940 19942 7ff74b4f3281 19940->19942 19941->19939 19943 7ff74b4f3537 19941->19943 19942->19904 19942->19909 19944 7ff74b4f3566 GetCPInfo 19943->19944 19943->19946 19944->19939 19944->19946 19963 7ff74b4f2f2c 19946->19963 20019 7ff74b4f11a8 EnterCriticalSection 19947->20019 19964 7ff74b4f2f69 GetCPInfo 19963->19964 19973 7ff74b4f305f 19963->19973 19965 7ff74b4f2f7c 19964->19965 19964->19973 19967 7ff74b4f3c90 48 API calls 19965->19967 19966 7ff74b4dc010 _wfindfirst32i64 8 API calls 19968 7ff74b4f30fe 19966->19968 19969 7ff74b4f2ff3 19967->19969 19968->19939 19974 7ff74b4f8c34 19969->19974 19972 7ff74b4f8c34 54 API calls 19972->19973 19973->19966 19975 7ff74b4e5788 45 API calls 19974->19975 19976 7ff74b4f8c59 19975->19976 19979 7ff74b4f8900 19976->19979 19980 7ff74b4f8941 19979->19980 19981 7ff74b4f03f0 _fread_nolock MultiByteToWideChar 19980->19981 19984 7ff74b4f898b 19981->19984 19982 7ff74b4f8c09 19983 7ff74b4dc010 _wfindfirst32i64 8 API calls 19982->19983 19985 7ff74b4f3026 19983->19985 19984->19982 19986 7ff74b4ee3ac _fread_nolock 12 API calls 19984->19986 19987 7ff74b4f8ac1 19984->19987 19989 7ff74b4f89c3 19984->19989 19985->19972 19986->19989 19987->19982 19988 7ff74b4eb700 __free_lconv_mon 11 API calls 19987->19988 19988->19982 19989->19987 19990 7ff74b4f03f0 _fread_nolock MultiByteToWideChar 19989->19990 19991 7ff74b4f8a36 19990->19991 19991->19987 20010 7ff74b4efd94 19991->20010 19994 7ff74b4f8ad2 19996 7ff74b4ee3ac _fread_nolock 12 API calls 19994->19996 19998 7ff74b4f8ba4 19994->19998 20000 7ff74b4f8af0 19994->20000 19995 7ff74b4f8a81 19995->19987 19997 7ff74b4efd94 __crtLCMapStringW 6 API calls 19995->19997 19996->20000 19997->19987 19998->19987 19999 7ff74b4eb700 __free_lconv_mon 11 API calls 19998->19999 19999->19987 20000->19987 20001 7ff74b4efd94 __crtLCMapStringW 6 API calls 20000->20001 20002 7ff74b4f8b70 20001->20002 20002->19998 20003 7ff74b4f8ba6 20002->20003 20004 7ff74b4f8b90 20002->20004 20006 7ff74b4f1640 WideCharToMultiByte 20003->20006 20005 7ff74b4f1640 WideCharToMultiByte 20004->20005 20007 7ff74b4f8b9e 20005->20007 20006->20007 20007->19998 20008 7ff74b4f8bbe 20007->20008 20008->19987 20009 7ff74b4eb700 __free_lconv_mon 11 API calls 20008->20009 20009->19987 20011 7ff74b4ef9c0 __crtLCMapStringW 5 API calls 20010->20011 20012 7ff74b4efdd2 20011->20012 20013 7ff74b4efdda 20012->20013 20016 7ff74b4efe80 20012->20016 20013->19987 20013->19994 20013->19995 20015 7ff74b4efe43 LCMapStringW 20015->20013 20017 7ff74b4ef9c0 __crtLCMapStringW 5 API calls 20016->20017 20018 7ff74b4efeae __crtLCMapStringW 20017->20018 20018->20015 20020 7ff74b4ed2d0 20031 7ff74b4f11a8 EnterCriticalSection 20020->20031 16304 7ff74b4dc3cc 16325 7ff74b4dc59c 16304->16325 16307 7ff74b4dc518 16429 7ff74b4dc8bc IsProcessorFeaturePresent 16307->16429 16308 7ff74b4dc3e8 __scrt_acquire_startup_lock 16310 7ff74b4dc522 16308->16310 16317 7ff74b4dc406 __scrt_release_startup_lock 16308->16317 16311 7ff74b4dc8bc 7 API calls 16310->16311 16313 7ff74b4dc52d __CxxCallCatchBlock 16311->16313 16312 7ff74b4dc42b 16314 7ff74b4dc4b1 16331 7ff74b4dca04 16314->16331 16316 7ff74b4dc4b6 16334 7ff74b4d1000 16316->16334 16317->16312 16317->16314 16418 7ff74b4ea8e0 16317->16418 16322 7ff74b4dc4d9 16322->16313 16425 7ff74b4dc720 16322->16425 16326 7ff74b4dc5a4 16325->16326 16327 7ff74b4dc5b0 __scrt_dllmain_crt_thread_attach 16326->16327 16328 7ff74b4dc3e0 16327->16328 16329 7ff74b4dc5bd 16327->16329 16328->16307 16328->16308 16329->16328 16436 7ff74b4dd1c0 16329->16436 16463 7ff74b4fb580 16331->16463 16335 7ff74b4d100b 16334->16335 16465 7ff74b4d89b0 16335->16465 16337 7ff74b4d101d 16472 7ff74b4e66e8 16337->16472 16339 7ff74b4d39ab 16479 7ff74b4d1ea0 16339->16479 16345 7ff74b4d39ca 16412 7ff74b4d3ab2 16345->16412 16504 7ff74b4d7d70 16345->16504 16347 7ff74b4d39ff 16348 7ff74b4d3a4b 16347->16348 16349 7ff74b4d7d70 61 API calls 16347->16349 16519 7ff74b4d8250 16348->16519 16355 7ff74b4d3a20 __std_exception_copy 16349->16355 16351 7ff74b4d3a60 16523 7ff74b4d1ca0 16351->16523 16354 7ff74b4d3b2d 16357 7ff74b4d3b8d 16354->16357 16542 7ff74b4d8b80 16354->16542 16355->16348 16359 7ff74b4d8250 58 API calls 16355->16359 16356 7ff74b4d1ca0 121 API calls 16358 7ff74b4d3a96 16356->16358 16362 7ff74b4d3bdb 16357->16362 16357->16412 16566 7ff74b4d8de0 16357->16566 16360 7ff74b4d3ab7 16358->16360 16361 7ff74b4d3a9a 16358->16361 16359->16348 16360->16354 16635 7ff74b4d4060 16360->16635 16622 7ff74b4d2b10 16361->16622 16580 7ff74b4d6ff0 16362->16580 16366 7ff74b4d3bc0 16370 7ff74b4d3b53 16366->16370 16371 7ff74b4d3bce SetDllDirectoryW 16366->16371 16377 7ff74b4d2b10 59 API calls 16370->16377 16371->16362 16376 7ff74b4d3ad5 16381 7ff74b4d2b10 59 API calls 16376->16381 16377->16412 16378 7ff74b4d3bf5 16406 7ff74b4d3c27 16378->16406 16676 7ff74b4d6800 16378->16676 16380 7ff74b4d3d11 16584 7ff74b4d34a0 16380->16584 16381->16412 16382 7ff74b4d3b03 16382->16354 16383 7ff74b4d3b08 16382->16383 16654 7ff74b4e097c 16383->16654 16389 7ff74b4d3c46 16397 7ff74b4d3c88 16389->16397 16718 7ff74b4d1ee0 16389->16718 16390 7ff74b4d3c29 16712 7ff74b4d6a50 16390->16712 16393 7ff74b4d3cdc 16722 7ff74b4d3440 16393->16722 16394 7ff74b4d3cb9 PostMessageW GetMessageW 16394->16393 16397->16393 16397->16394 16397->16412 16399 7ff74b4d3d2b 16592 7ff74b4d81e0 16399->16592 16400 7ff74b4d3c18 16706 7ff74b4d6e40 16400->16706 16403 7ff74b4d3d3e 16407 7ff74b4d7d70 61 API calls 16403->16407 16405 7ff74b4d3cec 16409 7ff74b4d6a50 FreeLibrary 16405->16409 16406->16380 16406->16389 16408 7ff74b4d3d4a 16407->16408 16410 7ff74b4d3d57 PostMessageW GetMessageW 16408->16410 16411 7ff74b4d3d7a 16408->16411 16409->16412 16410->16411 16599 7ff74b4d8290 16411->16599 16658 7ff74b4dc010 16412->16658 16419 7ff74b4ea8f7 16418->16419 16420 7ff74b4ea918 16418->16420 16419->16314 19327 7ff74b4eb188 16420->19327 16423 7ff74b4dca48 GetModuleHandleW 16424 7ff74b4dca59 16423->16424 16424->16322 16426 7ff74b4dc731 16425->16426 16427 7ff74b4dc4f0 16426->16427 16428 7ff74b4dd1c0 7 API calls 16426->16428 16427->16312 16428->16427 16430 7ff74b4dc8e2 _wfindfirst32i64 __scrt_get_show_window_mode 16429->16430 16431 7ff74b4dc901 RtlCaptureContext RtlLookupFunctionEntry 16430->16431 16432 7ff74b4dc966 __scrt_get_show_window_mode 16431->16432 16433 7ff74b4dc92a RtlVirtualUnwind 16431->16433 16434 7ff74b4dc998 IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter 16432->16434 16433->16432 16435 7ff74b4dc9e6 _wfindfirst32i64 16434->16435 16435->16310 16437 7ff74b4dd1d2 16436->16437 16438 7ff74b4dd1c8 16436->16438 16437->16328 16442 7ff74b4dd564 16438->16442 16443 7ff74b4dd573 16442->16443 16444 7ff74b4dd1cd 16442->16444 16450 7ff74b4de560 16443->16450 16446 7ff74b4dd5d0 16444->16446 16447 7ff74b4dd5fb 16446->16447 16448 7ff74b4dd5ff 16447->16448 16449 7ff74b4dd5de DeleteCriticalSection 16447->16449 16448->16437 16449->16447 16454 7ff74b4de3c8 16450->16454 16455 7ff74b4de4b2 TlsFree 16454->16455 16456 7ff74b4de40c __vcrt_FlsAlloc 16454->16456 16456->16455 16457 7ff74b4de43a LoadLibraryExW 16456->16457 16458 7ff74b4de4f9 GetProcAddress 16456->16458 16462 7ff74b4de47d LoadLibraryExW 16456->16462 16459 7ff74b4de45b GetLastError 16457->16459 16460 7ff74b4de4d9 16457->16460 16458->16455 16459->16456 16460->16458 16461 7ff74b4de4f0 FreeLibrary 16460->16461 16461->16458 16462->16456 16462->16460 16464 7ff74b4dca1b GetStartupInfoW 16463->16464 16464->16316 16467 7ff74b4d89cf 16465->16467 16466 7ff74b4d8a20 WideCharToMultiByte 16466->16467 16470 7ff74b4d8ac6 16466->16470 16467->16466 16469 7ff74b4d8a74 WideCharToMultiByte 16467->16469 16467->16470 16471 7ff74b4d89d7 __std_exception_copy 16467->16471 16469->16467 16469->16470 16770 7ff74b4d29c0 16470->16770 16471->16337 16475 7ff74b4f0840 16472->16475 16473 7ff74b4f0893 16474 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 16473->16474 16478 7ff74b4f08bc 16474->16478 16475->16473 16476 7ff74b4f08e6 16475->16476 17208 7ff74b4f0718 16476->17208 16478->16339 16480 7ff74b4d1eb5 16479->16480 16481 7ff74b4d1ed0 16480->16481 17216 7ff74b4d2870 16480->17216 16481->16412 16483 7ff74b4d3f00 16481->16483 16484 7ff74b4dbfb0 16483->16484 16485 7ff74b4d3f0c GetModuleFileNameW 16484->16485 16486 7ff74b4d3f55 16485->16486 16487 7ff74b4d3f3e 16485->16487 17256 7ff74b4d8ef0 16486->17256 16488 7ff74b4d29c0 57 API calls 16487->16488 16490 7ff74b4d3f51 16488->16490 16494 7ff74b4dc010 _wfindfirst32i64 8 API calls 16490->16494 16492 7ff74b4d3f80 17267 7ff74b4d40e0 16492->17267 16493 7ff74b4d3f70 16495 7ff74b4d2b10 59 API calls 16493->16495 16497 7ff74b4d3fd9 16494->16497 16495->16490 16497->16345 16499 7ff74b4d1ee0 49 API calls 16500 7ff74b4d3fa5 16499->16500 16500->16490 16501 7ff74b4d3fac 16500->16501 17275 7ff74b4d4340 16501->17275 16505 7ff74b4d7d7a 16504->16505 16506 7ff74b4d8de0 57 API calls 16505->16506 16507 7ff74b4d7d9c GetEnvironmentVariableW 16506->16507 16508 7ff74b4d7db4 ExpandEnvironmentStringsW 16507->16508 16509 7ff74b4d7e06 16507->16509 16511 7ff74b4d8ef0 59 API calls 16508->16511 16510 7ff74b4dc010 _wfindfirst32i64 8 API calls 16509->16510 16512 7ff74b4d7e18 16510->16512 16513 7ff74b4d7ddc 16511->16513 16512->16347 16513->16509 16514 7ff74b4d7de6 16513->16514 17290 7ff74b4eb1bc 16514->17290 16517 7ff74b4dc010 _wfindfirst32i64 8 API calls 16518 7ff74b4d7dfe 16517->16518 16518->16347 16520 7ff74b4d8de0 57 API calls 16519->16520 16521 7ff74b4d8267 SetEnvironmentVariableW 16520->16521 16522 7ff74b4d827f __std_exception_copy 16521->16522 16522->16351 16524 7ff74b4d1cae 16523->16524 16525 7ff74b4d1ee0 49 API calls 16524->16525 16526 7ff74b4d1ce4 16525->16526 16527 7ff74b4d1ee0 49 API calls 16526->16527 16537 7ff74b4d1dce 16526->16537 16528 7ff74b4d1d0a 16527->16528 16528->16537 17297 7ff74b4d1a90 16528->17297 16529 7ff74b4dc010 _wfindfirst32i64 8 API calls 16530 7ff74b4d1e5c 16529->16530 16530->16354 16530->16356 16534 7ff74b4d1dbc 16535 7ff74b4d3e80 49 API calls 16534->16535 16535->16537 16536 7ff74b4d1d7f 16536->16534 16538 7ff74b4d1e24 16536->16538 16537->16529 16539 7ff74b4d3e80 49 API calls 16538->16539 16540 7ff74b4d1e31 16539->16540 17333 7ff74b4d4140 16540->17333 16543 7ff74b4d8b95 16542->16543 17375 7ff74b4d8860 GetCurrentProcess OpenProcessToken 16543->17375 16546 7ff74b4d8860 7 API calls 16547 7ff74b4d8bc1 16546->16547 16548 7ff74b4d8bf4 16547->16548 16549 7ff74b4d8bda 16547->16549 16550 7ff74b4d8950 48 API calls 16548->16550 17385 7ff74b4d8950 16549->17385 16552 7ff74b4d8c07 LocalFree LocalFree 16550->16552 16554 7ff74b4d8c23 16552->16554 16556 7ff74b4d8c2f 16552->16556 17389 7ff74b4d2c30 16554->17389 16557 7ff74b4dc010 _wfindfirst32i64 8 API calls 16556->16557 16558 7ff74b4d3b4e 16557->16558 16558->16370 16559 7ff74b4d14e0 16558->16559 16560 7ff74b4d14f6 16559->16560 16561 7ff74b4d156f 16559->16561 17596 7ff74b4d7b60 16560->17596 16561->16357 16564 7ff74b4d2b10 59 API calls 16565 7ff74b4d1554 16564->16565 16565->16357 16567 7ff74b4d8e01 MultiByteToWideChar 16566->16567 16568 7ff74b4d8e87 MultiByteToWideChar 16566->16568 16571 7ff74b4d8e27 16567->16571 16574 7ff74b4d8e4c 16567->16574 16569 7ff74b4d8ecf 16568->16569 16570 7ff74b4d8eaa 16568->16570 16569->16366 16572 7ff74b4d29c0 55 API calls 16570->16572 16573 7ff74b4d29c0 55 API calls 16571->16573 16575 7ff74b4d8ebd 16572->16575 16576 7ff74b4d8e3a 16573->16576 16574->16568 16577 7ff74b4d8e62 16574->16577 16575->16366 16576->16366 16578 7ff74b4d29c0 55 API calls 16577->16578 16579 7ff74b4d8e75 16578->16579 16579->16366 16581 7ff74b4d7005 16580->16581 16582 7ff74b4d3be0 16581->16582 16583 7ff74b4d2870 59 API calls 16581->16583 16582->16406 16667 7ff74b4d6ca0 16582->16667 16583->16582 16585 7ff74b4d3554 16584->16585 16589 7ff74b4d3513 16584->16589 16586 7ff74b4dc010 _wfindfirst32i64 8 API calls 16585->16586 16587 7ff74b4d35a5 16586->16587 16587->16412 16591 7ff74b4d8b50 LocalFree 16587->16591 16589->16585 17928 7ff74b4d1700 16589->17928 17970 7ff74b4d2d50 16589->17970 16591->16399 16593 7ff74b4d8de0 57 API calls 16592->16593 16594 7ff74b4d81ff 16593->16594 16595 7ff74b4d8de0 57 API calls 16594->16595 16596 7ff74b4d820f 16595->16596 16597 7ff74b4e8610 38 API calls 16596->16597 16598 7ff74b4d821d __std_exception_copy 16597->16598 16598->16403 16600 7ff74b4d82a0 16599->16600 16601 7ff74b4d8de0 57 API calls 16600->16601 16602 7ff74b4d82d1 SetConsoleCtrlHandler GetStartupInfoW 16601->16602 16603 7ff74b4d8332 16602->16603 18452 7ff74b4eb234 16603->18452 16623 7ff74b4d2b30 16622->16623 16624 7ff74b4e52b4 49 API calls 16623->16624 16625 7ff74b4d2b7b __scrt_get_show_window_mode 16624->16625 16626 7ff74b4d8de0 57 API calls 16625->16626 16627 7ff74b4d2bb0 16626->16627 16628 7ff74b4d2bb5 16627->16628 16629 7ff74b4d2bed MessageBoxA 16627->16629 16630 7ff74b4d8de0 57 API calls 16628->16630 16631 7ff74b4d2c07 16629->16631 16632 7ff74b4d2bcf MessageBoxW 16630->16632 16633 7ff74b4dc010 _wfindfirst32i64 8 API calls 16631->16633 16632->16631 16634 7ff74b4d2c17 16633->16634 16634->16412 16636 7ff74b4d406c 16635->16636 16637 7ff74b4d8de0 57 API calls 16636->16637 16638 7ff74b4d4097 16637->16638 16639 7ff74b4d8de0 57 API calls 16638->16639 16640 7ff74b4d40aa 16639->16640 18470 7ff74b4e69e4 16640->18470 16643 7ff74b4dc010 _wfindfirst32i64 8 API calls 16644 7ff74b4d3acd 16643->16644 16644->16376 16645 7ff74b4d84c0 16644->16645 16646 7ff74b4d84e4 16645->16646 16647 7ff74b4e1004 73 API calls 16646->16647 16652 7ff74b4d85bb __std_exception_copy 16646->16652 16648 7ff74b4d84fe 16647->16648 16648->16652 18849 7ff74b4e9894 16648->18849 16650 7ff74b4e1004 73 API calls 16653 7ff74b4d8513 16650->16653 16651 7ff74b4e0ccc _fread_nolock 53 API calls 16651->16653 16652->16382 16653->16650 16653->16651 16653->16652 16655 7ff74b4e09ac 16654->16655 18864 7ff74b4e0758 16655->18864 16657 7ff74b4e09c5 16657->16376 16660 7ff74b4dc019 16658->16660 16659 7ff74b4d3b73 16659->16423 16660->16659 16661 7ff74b4dc070 IsProcessorFeaturePresent 16660->16661 16662 7ff74b4dc088 16661->16662 18875 7ff74b4dc264 RtlCaptureContext 16662->18875 16668 7ff74b4d6cc3 16667->16668 16669 7ff74b4d6cda 16667->16669 16668->16669 18880 7ff74b4d1590 16668->18880 16669->16378 16671 7ff74b4d6ce4 16671->16669 16672 7ff74b4d4140 49 API calls 16671->16672 16673 7ff74b4d6d45 16672->16673 16674 7ff74b4d2b10 59 API calls 16673->16674 16675 7ff74b4d6db5 __std_exception_copy memcpy_s 16673->16675 16674->16669 16675->16378 16689 7ff74b4d681a memcpy_s 16676->16689 16678 7ff74b4d693f 16680 7ff74b4d4140 49 API calls 16678->16680 16679 7ff74b4d695b 16681 7ff74b4d2b10 59 API calls 16679->16681 16682 7ff74b4d69b8 16680->16682 16686 7ff74b4d6951 __std_exception_copy 16681->16686 16685 7ff74b4d4140 49 API calls 16682->16685 16683 7ff74b4d4140 49 API calls 16683->16689 16684 7ff74b4d6920 16684->16678 16687 7ff74b4d4140 49 API calls 16684->16687 16688 7ff74b4d69e8 16685->16688 16690 7ff74b4dc010 _wfindfirst32i64 8 API calls 16686->16690 16687->16678 16692 7ff74b4d4140 49 API calls 16688->16692 16689->16678 16689->16679 16689->16683 16689->16684 16689->16689 16693 7ff74b4d1700 135 API calls 16689->16693 16694 7ff74b4d6941 16689->16694 18904 7ff74b4d1940 16689->18904 16691 7ff74b4d3c06 16690->16691 16691->16390 16696 7ff74b4d6780 16691->16696 16692->16686 16693->16689 16695 7ff74b4d2b10 59 API calls 16694->16695 16695->16686 18908 7ff74b4d8470 16696->18908 16698 7ff74b4d679c 16699 7ff74b4d8470 58 API calls 16698->16699 16700 7ff74b4d67af 16699->16700 16701 7ff74b4d67e5 16700->16701 16702 7ff74b4d67c7 16700->16702 16703 7ff74b4d2b10 59 API calls 16701->16703 18912 7ff74b4d7100 GetProcAddress 16702->18912 16705 7ff74b4d3c14 16703->16705 16705->16390 16705->16400 16707 7ff74b4d6e64 16706->16707 16708 7ff74b4d6eda 16707->16708 16709 7ff74b4d2b10 59 API calls 16707->16709 16708->16406 16710 7ff74b4d6ebe 16709->16710 16711 7ff74b4d6a50 FreeLibrary 16710->16711 16711->16708 16716 7ff74b4d6a62 16712->16716 16717 7ff74b4d6a8d 16712->16717 16713 7ff74b4d6b4b 16713->16717 18972 7ff74b4d8450 FreeLibrary 16713->18972 16716->16713 16716->16717 18971 7ff74b4d8450 FreeLibrary 16716->18971 16717->16406 16719 7ff74b4d1f05 16718->16719 16720 7ff74b4e52b4 49 API calls 16719->16720 16721 7ff74b4d1f28 16720->16721 16721->16397 18973 7ff74b4d5dd0 16722->18973 16725 7ff74b4d348d 16725->16405 16727 7ff74b4d3464 16727->16725 19042 7ff74b4d5b30 16727->19042 16729 7ff74b4d3470 16729->16725 16789 7ff74b4dbfb0 16770->16789 16772 7ff74b4d29dc GetLastError 16773 7ff74b4d2a09 16772->16773 16791 7ff74b4e52b4 16773->16791 16778 7ff74b4d1ee0 49 API calls 16779 7ff74b4d2a66 __scrt_get_show_window_mode 16778->16779 16780 7ff74b4d8de0 54 API calls 16779->16780 16781 7ff74b4d2a9b 16780->16781 16782 7ff74b4d2aa0 16781->16782 16783 7ff74b4d2ad8 MessageBoxA 16781->16783 16784 7ff74b4d8de0 54 API calls 16782->16784 16785 7ff74b4d2af2 16783->16785 16786 7ff74b4d2aba MessageBoxW 16784->16786 16787 7ff74b4dc010 _wfindfirst32i64 8 API calls 16785->16787 16786->16785 16788 7ff74b4d2b02 16787->16788 16788->16471 16790 7ff74b4dbfda 16789->16790 16790->16772 16790->16790 16794 7ff74b4e530e 16791->16794 16792 7ff74b4e5333 16821 7ff74b4eb5cc 16792->16821 16793 7ff74b4e536f 16829 7ff74b4e3540 16793->16829 16794->16792 16794->16793 16797 7ff74b4e535d 16799 7ff74b4dc010 _wfindfirst32i64 8 API calls 16797->16799 16798 7ff74b4e544c 16800 7ff74b4eb700 __free_lconv_mon 11 API calls 16798->16800 16802 7ff74b4d2a37 16799->16802 16800->16797 16809 7ff74b4d8770 16802->16809 16803 7ff74b4e5470 16803->16798 16806 7ff74b4e547a 16803->16806 16804 7ff74b4e5421 16807 7ff74b4eb700 __free_lconv_mon 11 API calls 16804->16807 16805 7ff74b4e5418 16805->16798 16805->16804 16808 7ff74b4eb700 __free_lconv_mon 11 API calls 16806->16808 16807->16797 16808->16797 16810 7ff74b4d877c 16809->16810 16811 7ff74b4d879d FormatMessageW 16810->16811 16812 7ff74b4d8797 GetLastError 16810->16812 16813 7ff74b4d87d0 16811->16813 16814 7ff74b4d87ec WideCharToMultiByte 16811->16814 16812->16811 16817 7ff74b4d29c0 54 API calls 16813->16817 16815 7ff74b4d8826 16814->16815 16816 7ff74b4d87e3 16814->16816 16818 7ff74b4d29c0 54 API calls 16815->16818 16819 7ff74b4dc010 _wfindfirst32i64 8 API calls 16816->16819 16817->16816 16818->16816 16820 7ff74b4d2a3e 16819->16820 16820->16778 16843 7ff74b4eb314 16821->16843 16824 7ff74b4eb607 16824->16797 16830 7ff74b4e357e 16829->16830 16831 7ff74b4e356e 16829->16831 16832 7ff74b4e3587 16830->16832 16839 7ff74b4e35b5 16830->16839 16834 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 16831->16834 16835 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 16832->16835 16833 7ff74b4e35ad 16833->16798 16833->16803 16833->16804 16833->16805 16834->16833 16835->16833 16838 7ff74b4e3864 16841 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 16838->16841 16839->16831 16839->16833 16839->16838 16881 7ff74b4e3ed0 16839->16881 16907 7ff74b4e3b98 16839->16907 16937 7ff74b4e3420 16839->16937 16940 7ff74b4e50f0 16839->16940 16841->16831 16844 7ff74b4eb330 GetLastError 16843->16844 16845 7ff74b4eb36b 16843->16845 16846 7ff74b4eb340 16844->16846 16845->16824 16849 7ff74b4eb380 16845->16849 16856 7ff74b4ec140 16846->16856 16850 7ff74b4eb3b4 16849->16850 16851 7ff74b4eb39c GetLastError SetLastError 16849->16851 16850->16824 16852 7ff74b4eb6b8 IsProcessorFeaturePresent 16850->16852 16851->16850 16853 7ff74b4eb6cb 16852->16853 16873 7ff74b4eb3cc 16853->16873 16857 7ff74b4ec15f FlsGetValue 16856->16857 16858 7ff74b4ec17a FlsSetValue 16856->16858 16860 7ff74b4ec174 16857->16860 16863 7ff74b4eb35b SetLastError 16857->16863 16859 7ff74b4ec187 16858->16859 16858->16863 16861 7ff74b4ef948 _wfindfirst32i64 11 API calls 16859->16861 16860->16858 16862 7ff74b4ec196 16861->16862 16864 7ff74b4ec1b4 FlsSetValue 16862->16864 16865 7ff74b4ec1a4 FlsSetValue 16862->16865 16863->16845 16867 7ff74b4ec1d2 16864->16867 16868 7ff74b4ec1c0 FlsSetValue 16864->16868 16866 7ff74b4ec1ad 16865->16866 16869 7ff74b4eb700 __free_lconv_mon 11 API calls 16866->16869 16870 7ff74b4ebcac _wfindfirst32i64 11 API calls 16867->16870 16868->16866 16869->16863 16871 7ff74b4ec1da 16870->16871 16872 7ff74b4eb700 __free_lconv_mon 11 API calls 16871->16872 16872->16863 16874 7ff74b4eb406 _wfindfirst32i64 __scrt_get_show_window_mode 16873->16874 16875 7ff74b4eb42e RtlCaptureContext RtlLookupFunctionEntry 16874->16875 16876 7ff74b4eb49e IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter 16875->16876 16877 7ff74b4eb468 RtlVirtualUnwind 16875->16877 16880 7ff74b4eb4f0 _wfindfirst32i64 16876->16880 16877->16876 16878 7ff74b4dc010 _wfindfirst32i64 8 API calls 16879 7ff74b4eb50f GetCurrentProcess TerminateProcess 16878->16879 16880->16878 16882 7ff74b4e3f85 16881->16882 16883 7ff74b4e3f12 16881->16883 16884 7ff74b4e3fdf 16882->16884 16885 7ff74b4e3f8a 16882->16885 16886 7ff74b4e3faf 16883->16886 16887 7ff74b4e3f18 16883->16887 16884->16886 16898 7ff74b4e3fee 16884->16898 16905 7ff74b4e3f48 16884->16905 16888 7ff74b4e3fbf 16885->16888 16889 7ff74b4e3f8c 16885->16889 16964 7ff74b4e2480 16886->16964 16894 7ff74b4e3f1d 16887->16894 16887->16898 16971 7ff74b4e2070 16888->16971 16890 7ff74b4e3f2d 16889->16890 16897 7ff74b4e3f9b 16889->16897 16906 7ff74b4e401d 16890->16906 16946 7ff74b4e4834 16890->16946 16894->16890 16896 7ff74b4e3f60 16894->16896 16894->16905 16896->16906 16956 7ff74b4e4cf0 16896->16956 16897->16886 16899 7ff74b4e3fa0 16897->16899 16898->16906 16978 7ff74b4e2890 16898->16978 16899->16906 16960 7ff74b4e4e88 16899->16960 16901 7ff74b4dc010 _wfindfirst32i64 8 API calls 16903 7ff74b4e42b3 16901->16903 16903->16839 16905->16906 16985 7ff74b4ef608 16905->16985 16906->16901 16908 7ff74b4e3ba3 16907->16908 16909 7ff74b4e3bb9 16907->16909 16910 7ff74b4e3bf7 16908->16910 16912 7ff74b4e3f85 16908->16912 16913 7ff74b4e3f12 16908->16913 16909->16910 16911 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 16909->16911 16910->16839 16911->16910 16914 7ff74b4e3f8a 16912->16914 16920 7ff74b4e3fdf 16912->16920 16915 7ff74b4e3faf 16913->16915 16916 7ff74b4e3f18 16913->16916 16917 7ff74b4e3fbf 16914->16917 16919 7ff74b4e3f8c 16914->16919 16921 7ff74b4e2480 38 API calls 16915->16921 16922 7ff74b4e3f1d 16916->16922 16925 7ff74b4e3fee 16916->16925 16923 7ff74b4e2070 38 API calls 16917->16923 16918 7ff74b4e3f2d 16924 7ff74b4e4834 47 API calls 16918->16924 16936 7ff74b4e401d 16918->16936 16919->16918 16927 7ff74b4e3f9b 16919->16927 16920->16915 16920->16925 16935 7ff74b4e3f48 16920->16935 16921->16935 16922->16918 16928 7ff74b4e3f60 16922->16928 16922->16935 16923->16935 16924->16935 16926 7ff74b4e2890 38 API calls 16925->16926 16925->16936 16926->16935 16927->16915 16929 7ff74b4e3fa0 16927->16929 16930 7ff74b4e4cf0 47 API calls 16928->16930 16928->16936 16932 7ff74b4e4e88 37 API calls 16929->16932 16929->16936 16930->16935 16931 7ff74b4dc010 _wfindfirst32i64 8 API calls 16933 7ff74b4e42b3 16931->16933 16932->16935 16933->16839 16934 7ff74b4ef608 47 API calls 16934->16935 16935->16934 16935->16936 16936->16931 17136 7ff74b4e1644 16937->17136 16941 7ff74b4e5107 16940->16941 17153 7ff74b4ee768 16941->17153 16947 7ff74b4e4856 16946->16947 16995 7ff74b4e14b0 16947->16995 16952 7ff74b4e4993 16954 7ff74b4e50f0 45 API calls 16952->16954 16955 7ff74b4e4a1c 16952->16955 16953 7ff74b4e50f0 45 API calls 16953->16952 16954->16955 16955->16905 16957 7ff74b4e4d70 16956->16957 16958 7ff74b4e4d08 16956->16958 16957->16905 16958->16957 16959 7ff74b4ef608 47 API calls 16958->16959 16959->16957 16961 7ff74b4e4ea9 16960->16961 16962 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 16961->16962 16963 7ff74b4e4eda 16961->16963 16962->16963 16963->16905 16965 7ff74b4e24b3 16964->16965 16966 7ff74b4e24e2 16965->16966 16968 7ff74b4e259f 16965->16968 16967 7ff74b4e14b0 12 API calls 16966->16967 16970 7ff74b4e251f 16966->16970 16967->16970 16969 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 16968->16969 16969->16970 16970->16905 16972 7ff74b4e20a3 16971->16972 16973 7ff74b4e20d2 16972->16973 16975 7ff74b4e218f 16972->16975 16974 7ff74b4e14b0 12 API calls 16973->16974 16977 7ff74b4e210f 16973->16977 16974->16977 16976 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 16975->16976 16976->16977 16977->16905 16979 7ff74b4e28c3 16978->16979 16980 7ff74b4e28f2 16979->16980 16982 7ff74b4e29af 16979->16982 16981 7ff74b4e14b0 12 API calls 16980->16981 16984 7ff74b4e292f 16980->16984 16981->16984 16983 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 16982->16983 16983->16984 16984->16905 16986 7ff74b4ef630 16985->16986 16987 7ff74b4ef675 16986->16987 16988 7ff74b4e50f0 45 API calls 16986->16988 16990 7ff74b4ef65e __scrt_get_show_window_mode 16986->16990 16993 7ff74b4ef635 __scrt_get_show_window_mode 16986->16993 16987->16990 16987->16993 17133 7ff74b4f1640 16987->17133 16988->16987 16989 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 16989->16993 16990->16989 16990->16993 16993->16905 16996 7ff74b4e14e7 16995->16996 17002 7ff74b4e14d6 16995->17002 16997 7ff74b4ee3ac _fread_nolock 12 API calls 16996->16997 16996->17002 16998 7ff74b4e1514 16997->16998 16999 7ff74b4e1528 16998->16999 17001 7ff74b4eb700 __free_lconv_mon 11 API calls 16998->17001 17000 7ff74b4eb700 __free_lconv_mon 11 API calls 16999->17000 17000->17002 17001->16999 17003 7ff74b4ef320 17002->17003 17004 7ff74b4ef33d 17003->17004 17006 7ff74b4ef370 17003->17006 17005 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17004->17005 17015 7ff74b4e4971 17005->17015 17006->17004 17007 7ff74b4ef3a2 17006->17007 17013 7ff74b4ef4b5 17007->17013 17018 7ff74b4ef3ea 17007->17018 17008 7ff74b4ef5a7 17058 7ff74b4ee80c 17008->17058 17010 7ff74b4ef56d 17051 7ff74b4eeba4 17010->17051 17012 7ff74b4ef53c 17044 7ff74b4eee84 17012->17044 17013->17008 17013->17010 17013->17012 17014 7ff74b4ef4ff 17013->17014 17017 7ff74b4ef4f5 17013->17017 17034 7ff74b4ef0b4 17014->17034 17015->16952 17015->16953 17017->17010 17020 7ff74b4ef4fa 17017->17020 17018->17015 17025 7ff74b4eb25c 17018->17025 17020->17012 17020->17014 17023 7ff74b4eb6b8 _wfindfirst32i64 17 API calls 17024 7ff74b4ef604 17023->17024 17027 7ff74b4eb269 17025->17027 17029 7ff74b4eb273 17025->17029 17026 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17028 7ff74b4eb27a 17026->17028 17027->17029 17032 7ff74b4eb28e 17027->17032 17067 7ff74b4eb698 17028->17067 17029->17026 17031 7ff74b4eb286 17031->17015 17031->17023 17032->17031 17033 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17032->17033 17033->17028 17069 7ff74b4f4efc 17034->17069 17038 7ff74b4ef160 17038->17015 17039 7ff74b4ef15c 17039->17038 17040 7ff74b4ef1b1 17039->17040 17041 7ff74b4ef17c 17039->17041 17122 7ff74b4eeca0 17040->17122 17118 7ff74b4eef5c 17041->17118 17045 7ff74b4f4efc 38 API calls 17044->17045 17046 7ff74b4eeece 17045->17046 17047 7ff74b4f4944 37 API calls 17046->17047 17048 7ff74b4eef1e 17047->17048 17049 7ff74b4eef22 17048->17049 17050 7ff74b4eef5c 45 API calls 17048->17050 17049->17015 17050->17049 17052 7ff74b4f4efc 38 API calls 17051->17052 17053 7ff74b4eebef 17052->17053 17054 7ff74b4f4944 37 API calls 17053->17054 17055 7ff74b4eec47 17054->17055 17056 7ff74b4eec4b 17055->17056 17057 7ff74b4eeca0 45 API calls 17055->17057 17056->17015 17057->17056 17059 7ff74b4ee884 17058->17059 17060 7ff74b4ee851 17058->17060 17062 7ff74b4ee91d 17059->17062 17063 7ff74b4ee89c 17059->17063 17061 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17060->17061 17066 7ff74b4ee87d __scrt_get_show_window_mode 17061->17066 17065 7ff74b4e50f0 45 API calls 17062->17065 17062->17066 17064 7ff74b4eeba4 46 API calls 17063->17064 17064->17066 17065->17066 17066->17015 17068 7ff74b4eb530 _invalid_parameter_noinfo 37 API calls 17067->17068 17070 7ff74b4f4f4f fegetenv 17069->17070 17071 7ff74b4f8e5c 37 API calls 17070->17071 17074 7ff74b4f4fa2 17071->17074 17072 7ff74b4f4fcf 17076 7ff74b4eb25c __std_exception_copy 37 API calls 17072->17076 17073 7ff74b4f5092 17075 7ff74b4f8e5c 37 API calls 17073->17075 17074->17073 17079 7ff74b4f506c 17074->17079 17080 7ff74b4f4fbd 17074->17080 17077 7ff74b4f50bc 17075->17077 17078 7ff74b4f504d 17076->17078 17081 7ff74b4f8e5c 37 API calls 17077->17081 17082 7ff74b4f6174 17078->17082 17088 7ff74b4f5055 17078->17088 17083 7ff74b4eb25c __std_exception_copy 37 API calls 17079->17083 17080->17072 17080->17073 17084 7ff74b4f50cd 17081->17084 17086 7ff74b4eb6b8 _wfindfirst32i64 17 API calls 17082->17086 17083->17078 17085 7ff74b4f9050 20 API calls 17084->17085 17095 7ff74b4f5136 __scrt_get_show_window_mode 17085->17095 17087 7ff74b4f6189 17086->17087 17089 7ff74b4dc010 _wfindfirst32i64 8 API calls 17088->17089 17090 7ff74b4ef101 17089->17090 17114 7ff74b4f4944 17090->17114 17091 7ff74b4f54df __scrt_get_show_window_mode 17092 7ff74b4f581f 17094 7ff74b4f4a60 37 API calls 17092->17094 17093 7ff74b4f5177 memcpy_s 17108 7ff74b4f5abb memcpy_s __scrt_get_show_window_mode 17093->17108 17111 7ff74b4f55d3 memcpy_s __scrt_get_show_window_mode 17093->17111 17100 7ff74b4f5f37 17094->17100 17095->17091 17095->17093 17098 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17095->17098 17096 7ff74b4f57cb 17096->17092 17097 7ff74b4f618c memcpy_s 37 API calls 17096->17097 17097->17092 17099 7ff74b4f55b0 17098->17099 17101 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 17099->17101 17102 7ff74b4f618c memcpy_s 37 API calls 17100->17102 17113 7ff74b4f5f92 17100->17113 17101->17093 17102->17113 17103 7ff74b4f6118 17104 7ff74b4f8e5c 37 API calls 17103->17104 17104->17088 17105 7ff74b4e5cb4 11 API calls _wfindfirst32i64 17105->17108 17106 7ff74b4e5cb4 11 API calls _wfindfirst32i64 17106->17111 17107 7ff74b4f4a60 37 API calls 17107->17113 17108->17092 17108->17096 17108->17105 17109 7ff74b4eb698 37 API calls _invalid_parameter_noinfo 17108->17109 17109->17108 17110 7ff74b4eb698 37 API calls _invalid_parameter_noinfo 17110->17111 17111->17096 17111->17106 17111->17110 17112 7ff74b4f618c memcpy_s 37 API calls 17112->17113 17113->17103 17113->17107 17113->17112 17115 7ff74b4f4963 17114->17115 17116 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17115->17116 17117 7ff74b4f498e memcpy_s 17115->17117 17116->17117 17117->17039 17119 7ff74b4eef88 memcpy_s 17118->17119 17120 7ff74b4e50f0 45 API calls 17119->17120 17121 7ff74b4ef042 memcpy_s __scrt_get_show_window_mode 17119->17121 17120->17121 17121->17038 17123 7ff74b4eecdb 17122->17123 17127 7ff74b4eed28 memcpy_s 17122->17127 17124 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17123->17124 17125 7ff74b4eed07 17124->17125 17125->17038 17126 7ff74b4eed93 17128 7ff74b4eb25c __std_exception_copy 37 API calls 17126->17128 17127->17126 17129 7ff74b4e50f0 45 API calls 17127->17129 17132 7ff74b4eedd5 memcpy_s 17128->17132 17129->17126 17130 7ff74b4eb6b8 _wfindfirst32i64 17 API calls 17131 7ff74b4eee80 17130->17131 17132->17130 17135 7ff74b4f1664 WideCharToMultiByte 17133->17135 17137 7ff74b4e1683 17136->17137 17138 7ff74b4e1671 17136->17138 17141 7ff74b4e1690 17137->17141 17144 7ff74b4e16cd 17137->17144 17139 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17138->17139 17140 7ff74b4e1676 17139->17140 17142 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 17140->17142 17143 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17141->17143 17150 7ff74b4e1681 17142->17150 17143->17150 17145 7ff74b4e1776 17144->17145 17147 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17144->17147 17146 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17145->17146 17145->17150 17149 7ff74b4e1820 17146->17149 17148 7ff74b4e176b 17147->17148 17151 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 17148->17151 17152 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 17149->17152 17150->16839 17151->17145 17152->17150 17154 7ff74b4ee781 17153->17154 17156 7ff74b4e512f 17153->17156 17154->17156 17161 7ff74b4f4154 17154->17161 17157 7ff74b4ee7d4 17156->17157 17158 7ff74b4e513f 17157->17158 17159 7ff74b4ee7ed 17157->17159 17158->16839 17159->17158 17205 7ff74b4f34a0 17159->17205 17173 7ff74b4ebf00 GetLastError 17161->17173 17165 7ff74b4f41ae 17165->17156 17174 7ff74b4ebf24 FlsGetValue 17173->17174 17175 7ff74b4ebf41 FlsSetValue 17173->17175 17176 7ff74b4ebf3b 17174->17176 17193 7ff74b4ebf31 17174->17193 17177 7ff74b4ebf53 17175->17177 17175->17193 17176->17175 17179 7ff74b4ef948 _wfindfirst32i64 11 API calls 17177->17179 17178 7ff74b4ebfad SetLastError 17180 7ff74b4ebfcd 17178->17180 17181 7ff74b4ebfba 17178->17181 17182 7ff74b4ebf62 17179->17182 17196 7ff74b4eb2bc 17180->17196 17181->17165 17195 7ff74b4f11a8 EnterCriticalSection 17181->17195 17184 7ff74b4ebf80 FlsSetValue 17182->17184 17185 7ff74b4ebf70 FlsSetValue 17182->17185 17186 7ff74b4ebf9e 17184->17186 17187 7ff74b4ebf8c FlsSetValue 17184->17187 17189 7ff74b4ebf79 17185->17189 17190 7ff74b4ebcac _wfindfirst32i64 11 API calls 17186->17190 17187->17189 17191 7ff74b4eb700 __free_lconv_mon 11 API calls 17189->17191 17192 7ff74b4ebfa6 17190->17192 17191->17193 17194 7ff74b4eb700 __free_lconv_mon 11 API calls 17192->17194 17193->17178 17194->17178 17197 7ff74b4f44a0 __CxxCallCatchBlock EnterCriticalSection LeaveCriticalSection 17196->17197 17198 7ff74b4eb2c5 17197->17198 17199 7ff74b4eb2d4 17198->17199 17200 7ff74b4f44f0 __CxxCallCatchBlock 44 API calls 17198->17200 17201 7ff74b4eb2dd IsProcessorFeaturePresent 17199->17201 17202 7ff74b4eb307 __CxxCallCatchBlock 17199->17202 17200->17199 17203 7ff74b4eb2ec 17201->17203 17204 7ff74b4eb3cc _wfindfirst32i64 14 API calls 17203->17204 17204->17202 17206 7ff74b4ebf00 __CxxCallCatchBlock 45 API calls 17205->17206 17207 7ff74b4f34a9 17206->17207 17215 7ff74b4e5b5c EnterCriticalSection 17208->17215 17217 7ff74b4d288c 17216->17217 17218 7ff74b4e52b4 49 API calls 17217->17218 17219 7ff74b4d28dd 17218->17219 17220 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17219->17220 17221 7ff74b4d28e2 17220->17221 17235 7ff74b4e5cd4 17221->17235 17224 7ff74b4d1ee0 49 API calls 17225 7ff74b4d2911 __scrt_get_show_window_mode 17224->17225 17226 7ff74b4d8de0 57 API calls 17225->17226 17227 7ff74b4d2946 17226->17227 17228 7ff74b4d2983 MessageBoxA 17227->17228 17229 7ff74b4d294b 17227->17229 17231 7ff74b4d299d 17228->17231 17230 7ff74b4d8de0 57 API calls 17229->17230 17232 7ff74b4d2965 MessageBoxW 17230->17232 17233 7ff74b4dc010 _wfindfirst32i64 8 API calls 17231->17233 17232->17231 17234 7ff74b4d29ad 17233->17234 17234->16481 17236 7ff74b4ec078 _wfindfirst32i64 11 API calls 17235->17236 17237 7ff74b4e5ceb 17236->17237 17238 7ff74b4ef948 _wfindfirst32i64 11 API calls 17237->17238 17240 7ff74b4e5d2b 17237->17240 17244 7ff74b4d28e9 17237->17244 17239 7ff74b4e5d20 17238->17239 17241 7ff74b4eb700 __free_lconv_mon 11 API calls 17239->17241 17240->17244 17247 7ff74b4f0018 17240->17247 17241->17240 17244->17224 17245 7ff74b4eb6b8 _wfindfirst32i64 17 API calls 17246 7ff74b4e5d70 17245->17246 17250 7ff74b4f0035 17247->17250 17248 7ff74b4e5d51 17248->17244 17248->17245 17249 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17251 7ff74b4f0044 17249->17251 17250->17248 17252 7ff74b4f003a 17250->17252 17254 7ff74b4f0084 17250->17254 17253 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 17251->17253 17252->17248 17252->17249 17253->17248 17254->17248 17255 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17254->17255 17255->17251 17257 7ff74b4d8f14 WideCharToMultiByte 17256->17257 17258 7ff74b4d8f82 WideCharToMultiByte 17256->17258 17260 7ff74b4d8f3e 17257->17260 17261 7ff74b4d8f55 17257->17261 17259 7ff74b4d8faf 17258->17259 17263 7ff74b4d3f6b 17258->17263 17262 7ff74b4d29c0 57 API calls 17259->17262 17264 7ff74b4d29c0 57 API calls 17260->17264 17261->17258 17265 7ff74b4d8f6b 17261->17265 17262->17263 17263->16492 17263->16493 17264->17263 17266 7ff74b4d29c0 57 API calls 17265->17266 17266->17263 17268 7ff74b4d40ea 17267->17268 17269 7ff74b4d8de0 57 API calls 17268->17269 17270 7ff74b4d4112 17269->17270 17285 7ff74b4d8d00 FindFirstFileExW 17270->17285 17273 7ff74b4dc010 _wfindfirst32i64 8 API calls 17274 7ff74b4d3f88 17273->17274 17274->16490 17274->16499 17276 7ff74b4d4352 17275->17276 17277 7ff74b4d8de0 57 API calls 17276->17277 17278 7ff74b4d4380 CreateFileW 17277->17278 17279 7ff74b4d43b7 GetFinalPathNameByHandleW CloseHandle 17278->17279 17284 7ff74b4d441f 17278->17284 17283 7ff74b4d43e3 __vcrt_FlsAlloc 17279->17283 17279->17284 17280 7ff74b4dc010 _wfindfirst32i64 8 API calls 17282 7ff74b4d3fb9 17280->17282 17281 7ff74b4d8ef0 59 API calls 17281->17284 17282->16490 17283->17281 17284->17280 17286 7ff74b4d8d50 17285->17286 17287 7ff74b4d8d3d FindClose 17285->17287 17288 7ff74b4dc010 _wfindfirst32i64 8 API calls 17286->17288 17287->17286 17289 7ff74b4d411c 17288->17289 17289->17273 17291 7ff74b4d7dee 17290->17291 17292 7ff74b4eb1d3 17290->17292 17291->16517 17292->17291 17293 7ff74b4eb25c __std_exception_copy 37 API calls 17292->17293 17294 7ff74b4eb200 17293->17294 17294->17291 17295 7ff74b4eb6b8 _wfindfirst32i64 17 API calls 17294->17295 17296 7ff74b4eb230 17295->17296 17298 7ff74b4d4060 116 API calls 17297->17298 17299 7ff74b4d1ac6 17298->17299 17300 7ff74b4d1c74 17299->17300 17302 7ff74b4d84c0 83 API calls 17299->17302 17301 7ff74b4dc010 _wfindfirst32i64 8 API calls 17300->17301 17303 7ff74b4d1c88 17301->17303 17304 7ff74b4d1afe 17302->17304 17303->16537 17330 7ff74b4d3e80 17303->17330 17328 7ff74b4d1b2f 17304->17328 17336 7ff74b4e1004 17304->17336 17306 7ff74b4e097c 74 API calls 17306->17300 17307 7ff74b4d1b18 17308 7ff74b4d1b34 17307->17308 17309 7ff74b4d1b1c 17307->17309 17340 7ff74b4e0ccc 17308->17340 17311 7ff74b4d2870 59 API calls 17309->17311 17311->17328 17313 7ff74b4d1b4f 17315 7ff74b4d2870 59 API calls 17313->17315 17314 7ff74b4d1b67 17316 7ff74b4e1004 73 API calls 17314->17316 17315->17328 17317 7ff74b4d1bb4 17316->17317 17318 7ff74b4d1bc6 17317->17318 17319 7ff74b4d1bde 17317->17319 17320 7ff74b4d2870 59 API calls 17318->17320 17321 7ff74b4e0ccc _fread_nolock 53 API calls 17319->17321 17320->17328 17322 7ff74b4d1bf3 17321->17322 17323 7ff74b4d1c0e 17322->17323 17324 7ff74b4d1bf9 17322->17324 17343 7ff74b4e0a40 17323->17343 17325 7ff74b4d2870 59 API calls 17324->17325 17325->17328 17328->17306 17329 7ff74b4d2b10 59 API calls 17329->17328 17331 7ff74b4d1ee0 49 API calls 17330->17331 17332 7ff74b4d3e9d 17331->17332 17332->16536 17334 7ff74b4d1ee0 49 API calls 17333->17334 17335 7ff74b4d4170 17334->17335 17335->16537 17337 7ff74b4e1034 17336->17337 17349 7ff74b4e0d94 17337->17349 17339 7ff74b4e104d 17339->17307 17361 7ff74b4e0cec 17340->17361 17344 7ff74b4d1c22 17343->17344 17345 7ff74b4e0a49 17343->17345 17344->17328 17344->17329 17346 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17345->17346 17347 7ff74b4e0a4e 17346->17347 17348 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 17347->17348 17348->17344 17350 7ff74b4e0dfe 17349->17350 17351 7ff74b4e0dbe 17349->17351 17350->17351 17353 7ff74b4e0e0a 17350->17353 17352 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17351->17352 17355 7ff74b4e0de5 17352->17355 17360 7ff74b4e5b5c EnterCriticalSection 17353->17360 17355->17339 17362 7ff74b4e0d16 17361->17362 17373 7ff74b4d1b49 17361->17373 17363 7ff74b4e0d62 17362->17363 17364 7ff74b4e0d25 __scrt_get_show_window_mode 17362->17364 17362->17373 17374 7ff74b4e5b5c EnterCriticalSection 17363->17374 17366 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17364->17366 17368 7ff74b4e0d3a 17366->17368 17370 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 17368->17370 17370->17373 17373->17313 17373->17314 17376 7ff74b4d889f GetTokenInformation 17375->17376 17377 7ff74b4d8921 __std_exception_copy 17375->17377 17378 7ff74b4d88c0 GetLastError 17376->17378 17379 7ff74b4d88cb 17376->17379 17380 7ff74b4d8934 CloseHandle 17377->17380 17381 7ff74b4d893a 17377->17381 17378->17377 17378->17379 17379->17377 17382 7ff74b4d88e7 GetTokenInformation 17379->17382 17380->17381 17381->16546 17382->17377 17383 7ff74b4d890a 17382->17383 17383->17377 17384 7ff74b4d8914 ConvertSidToStringSidW 17383->17384 17384->17377 17386 7ff74b4d8975 17385->17386 17402 7ff74b4e5508 17386->17402 17390 7ff74b4d2c50 17389->17390 17391 7ff74b4e52b4 49 API calls 17390->17391 17392 7ff74b4d2c9b __scrt_get_show_window_mode 17391->17392 17393 7ff74b4d8de0 57 API calls 17392->17393 17394 7ff74b4d2cd0 17393->17394 17395 7ff74b4d2cd5 17394->17395 17396 7ff74b4d2d0d MessageBoxA 17394->17396 17397 7ff74b4d8de0 57 API calls 17395->17397 17398 7ff74b4d2d27 17396->17398 17399 7ff74b4d2cef MessageBoxW 17397->17399 17400 7ff74b4dc010 _wfindfirst32i64 8 API calls 17398->17400 17399->17398 17401 7ff74b4d2d37 17400->17401 17401->16556 17404 7ff74b4e5562 17402->17404 17403 7ff74b4e5587 17405 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17403->17405 17404->17403 17406 7ff74b4e55c3 17404->17406 17408 7ff74b4e55b1 17405->17408 17420 7ff74b4e38c0 17406->17420 17410 7ff74b4dc010 _wfindfirst32i64 8 API calls 17408->17410 17409 7ff74b4e56a4 17411 7ff74b4eb700 __free_lconv_mon 11 API calls 17409->17411 17412 7ff74b4d8998 17410->17412 17411->17408 17412->16552 17414 7ff74b4e56ca 17414->17409 17416 7ff74b4e56d4 17414->17416 17415 7ff74b4e5679 17417 7ff74b4eb700 __free_lconv_mon 11 API calls 17415->17417 17419 7ff74b4eb700 __free_lconv_mon 11 API calls 17416->17419 17417->17408 17418 7ff74b4e5670 17418->17409 17418->17415 17419->17408 17421 7ff74b4e38fe 17420->17421 17422 7ff74b4e38ee 17420->17422 17423 7ff74b4e3907 17421->17423 17428 7ff74b4e3935 17421->17428 17426 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17422->17426 17424 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17423->17424 17425 7ff74b4e392d 17424->17425 17425->17409 17425->17414 17425->17415 17425->17418 17426->17425 17428->17422 17428->17425 17431 7ff74b4e42d4 17428->17431 17464 7ff74b4e3d20 17428->17464 17501 7ff74b4e34b0 17428->17501 17432 7ff74b4e4316 17431->17432 17433 7ff74b4e4387 17431->17433 17434 7ff74b4e43b1 17432->17434 17435 7ff74b4e431c 17432->17435 17436 7ff74b4e43e0 17433->17436 17437 7ff74b4e438c 17433->17437 17520 7ff74b4e2684 17434->17520 17438 7ff74b4e4350 17435->17438 17439 7ff74b4e4321 17435->17439 17442 7ff74b4e43f7 17436->17442 17443 7ff74b4e43ea 17436->17443 17445 7ff74b4e43ef 17436->17445 17440 7ff74b4e43c1 17437->17440 17449 7ff74b4e438e 17437->17449 17438->17445 17446 7ff74b4e4327 17438->17446 17439->17442 17439->17446 17527 7ff74b4e2274 17440->17527 17534 7ff74b4e4fdc 17442->17534 17443->17434 17443->17445 17463 7ff74b4e4420 17445->17463 17538 7ff74b4e2a94 17445->17538 17450 7ff74b4e4362 17446->17450 17452 7ff74b4e4330 17446->17452 17459 7ff74b4e434b 17446->17459 17449->17452 17453 7ff74b4e439d 17449->17453 17450->17463 17514 7ff74b4e4dc4 17450->17514 17452->17463 17504 7ff74b4e4a88 17452->17504 17453->17434 17455 7ff74b4e43a2 17453->17455 17457 7ff74b4e4e88 37 API calls 17455->17457 17455->17463 17456 7ff74b4dc010 _wfindfirst32i64 8 API calls 17458 7ff74b4e471a 17456->17458 17457->17459 17458->17428 17460 7ff74b4e50f0 45 API calls 17459->17460 17462 7ff74b4e460c 17459->17462 17459->17463 17460->17462 17462->17463 17545 7ff74b4ef7b8 17462->17545 17463->17456 17465 7ff74b4e3d44 17464->17465 17466 7ff74b4e3d2e 17464->17466 17469 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17465->17469 17470 7ff74b4e3d84 17465->17470 17467 7ff74b4e4316 17466->17467 17468 7ff74b4e4387 17466->17468 17466->17470 17471 7ff74b4e43b1 17467->17471 17472 7ff74b4e431c 17467->17472 17473 7ff74b4e43e0 17468->17473 17474 7ff74b4e438c 17468->17474 17469->17470 17470->17428 17479 7ff74b4e2684 38 API calls 17471->17479 17475 7ff74b4e4350 17472->17475 17476 7ff74b4e4321 17472->17476 17480 7ff74b4e43f7 17473->17480 17482 7ff74b4e43ea 17473->17482 17487 7ff74b4e43ef 17473->17487 17477 7ff74b4e43c1 17474->17477 17478 7ff74b4e438e 17474->17478 17483 7ff74b4e4327 17475->17483 17475->17487 17476->17480 17476->17483 17485 7ff74b4e2274 38 API calls 17477->17485 17481 7ff74b4e4330 17478->17481 17490 7ff74b4e439d 17478->17490 17496 7ff74b4e434b 17479->17496 17484 7ff74b4e4fdc 45 API calls 17480->17484 17486 7ff74b4e4a88 47 API calls 17481->17486 17499 7ff74b4e4420 17481->17499 17482->17471 17482->17487 17483->17481 17488 7ff74b4e4362 17483->17488 17483->17496 17484->17496 17485->17496 17486->17496 17489 7ff74b4e2a94 38 API calls 17487->17489 17487->17499 17491 7ff74b4e4dc4 46 API calls 17488->17491 17488->17499 17489->17496 17490->17471 17492 7ff74b4e43a2 17490->17492 17491->17496 17494 7ff74b4e4e88 37 API calls 17492->17494 17492->17499 17493 7ff74b4dc010 _wfindfirst32i64 8 API calls 17495 7ff74b4e471a 17493->17495 17494->17496 17495->17428 17497 7ff74b4e50f0 45 API calls 17496->17497 17496->17499 17500 7ff74b4e460c 17496->17500 17497->17500 17498 7ff74b4ef7b8 46 API calls 17498->17500 17499->17493 17500->17498 17500->17499 17579 7ff74b4e18f8 17501->17579 17505 7ff74b4e4aae 17504->17505 17506 7ff74b4e14b0 12 API calls 17505->17506 17507 7ff74b4e4afe 17506->17507 17508 7ff74b4ef320 46 API calls 17507->17508 17509 7ff74b4e4bd1 17508->17509 17510 7ff74b4e50f0 45 API calls 17509->17510 17512 7ff74b4e4bf3 17509->17512 17510->17512 17511 7ff74b4e50f0 45 API calls 17513 7ff74b4e4c81 17511->17513 17512->17511 17512->17512 17512->17513 17513->17459 17516 7ff74b4e4df9 17514->17516 17515 7ff74b4e4e3e 17515->17459 17516->17515 17517 7ff74b4e4e17 17516->17517 17518 7ff74b4e50f0 45 API calls 17516->17518 17519 7ff74b4ef7b8 46 API calls 17517->17519 17518->17517 17519->17515 17521 7ff74b4e26b7 17520->17521 17522 7ff74b4e26e6 17521->17522 17524 7ff74b4e27a3 17521->17524 17526 7ff74b4e2723 17522->17526 17557 7ff74b4e1558 17522->17557 17525 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17524->17525 17525->17526 17526->17459 17528 7ff74b4e22a7 17527->17528 17529 7ff74b4e22d6 17528->17529 17531 7ff74b4e2393 17528->17531 17530 7ff74b4e1558 12 API calls 17529->17530 17533 7ff74b4e2313 17529->17533 17530->17533 17532 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17531->17532 17532->17533 17533->17459 17535 7ff74b4e501f 17534->17535 17537 7ff74b4e5023 __crtLCMapStringW 17535->17537 17565 7ff74b4e5078 17535->17565 17537->17459 17539 7ff74b4e2ac7 17538->17539 17540 7ff74b4e2af6 17539->17540 17542 7ff74b4e2bb3 17539->17542 17541 7ff74b4e1558 12 API calls 17540->17541 17544 7ff74b4e2b33 17540->17544 17541->17544 17543 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17542->17543 17543->17544 17544->17459 17546 7ff74b4ef7e9 17545->17546 17555 7ff74b4ef7f7 17545->17555 17547 7ff74b4ef817 17546->17547 17548 7ff74b4e50f0 45 API calls 17546->17548 17546->17555 17549 7ff74b4ef84f 17547->17549 17550 7ff74b4ef828 17547->17550 17548->17547 17552 7ff74b4ef879 17549->17552 17553 7ff74b4ef8da 17549->17553 17549->17555 17569 7ff74b4f0f78 17550->17569 17552->17555 17572 7ff74b4f03f0 17552->17572 17554 7ff74b4f03f0 _fread_nolock MultiByteToWideChar 17553->17554 17554->17555 17555->17462 17558 7ff74b4e158f 17557->17558 17559 7ff74b4e157e 17557->17559 17558->17559 17560 7ff74b4ee3ac _fread_nolock 12 API calls 17558->17560 17559->17526 17561 7ff74b4e15c0 17560->17561 17562 7ff74b4e15d4 17561->17562 17563 7ff74b4eb700 __free_lconv_mon 11 API calls 17561->17563 17564 7ff74b4eb700 __free_lconv_mon 11 API calls 17562->17564 17563->17562 17564->17559 17566 7ff74b4e5096 17565->17566 17567 7ff74b4e509e 17565->17567 17568 7ff74b4e50f0 45 API calls 17566->17568 17567->17537 17568->17567 17575 7ff74b4f7ec0 17569->17575 17574 7ff74b4f03f9 MultiByteToWideChar 17572->17574 17578 7ff74b4f7f24 17575->17578 17576 7ff74b4dc010 _wfindfirst32i64 8 API calls 17577 7ff74b4f0f95 17576->17577 17577->17555 17578->17576 17580 7ff74b4e193f 17579->17580 17581 7ff74b4e192d 17579->17581 17583 7ff74b4e194d 17580->17583 17588 7ff74b4e1989 17580->17588 17582 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17581->17582 17584 7ff74b4e1932 17582->17584 17585 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 17583->17585 17586 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 17584->17586 17593 7ff74b4e193d 17585->17593 17586->17593 17587 7ff74b4e1d05 17589 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17587->17589 17587->17593 17588->17587 17590 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17588->17590 17591 7ff74b4e1f99 17589->17591 17592 7ff74b4e1cfa 17590->17592 17594 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 17591->17594 17595 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 17592->17595 17593->17428 17594->17593 17595->17587 17597 7ff74b4d7b76 17596->17597 17598 7ff74b4d7bed GetTempPathW 17597->17598 17599 7ff74b4d7b9a 17597->17599 17600 7ff74b4d7c02 17598->17600 17601 7ff74b4d7d70 61 API calls 17599->17601 17635 7ff74b4d2810 17600->17635 17602 7ff74b4d7ba6 17601->17602 17647 7ff74b4d7630 17602->17647 17609 7ff74b4dc010 _wfindfirst32i64 8 API calls 17610 7ff74b4d153f 17609->17610 17610->16561 17610->16564 17612 7ff74b4d7cc6 17616 7ff74b4d8ef0 59 API calls 17612->17616 17613 7ff74b4d7c1b __std_exception_copy 17613->17612 17618 7ff74b4d7c51 17613->17618 17639 7ff74b4e92c8 17613->17639 17642 7ff74b4d8d80 17613->17642 17620 7ff74b4d7cd7 __std_exception_copy 17616->17620 17619 7ff74b4d8de0 57 API calls 17618->17619 17630 7ff74b4d7c8a __std_exception_copy 17618->17630 17621 7ff74b4d7c67 17619->17621 17622 7ff74b4d8de0 57 API calls 17620->17622 17620->17630 17624 7ff74b4d7c6c 17621->17624 17625 7ff74b4d7ca9 SetEnvironmentVariableW 17621->17625 17623 7ff74b4d7cf5 17622->17623 17626 7ff74b4d7d2d SetEnvironmentVariableW 17623->17626 17627 7ff74b4d7cfa 17623->17627 17628 7ff74b4d8de0 57 API calls 17624->17628 17625->17630 17626->17630 17629 7ff74b4d8de0 57 API calls 17627->17629 17631 7ff74b4d7c7c 17628->17631 17632 7ff74b4d7d0a 17629->17632 17630->17609 17633 7ff74b4e8610 38 API calls 17631->17633 17634 7ff74b4e8610 38 API calls 17632->17634 17633->17630 17634->17630 17636 7ff74b4d2835 17635->17636 17637 7ff74b4e5508 48 API calls 17636->17637 17638 7ff74b4d2854 17637->17638 17638->17613 17681 7ff74b4e8ef4 17639->17681 17643 7ff74b4d8da6 CreateDirectoryW 17642->17643 17644 7ff74b4d8d90 17642->17644 17643->17613 17645 7ff74b4d2c30 59 API calls 17644->17645 17646 7ff74b4d8d9c 17645->17646 17646->17613 17648 7ff74b4d763c 17647->17648 17649 7ff74b4d8de0 57 API calls 17648->17649 17650 7ff74b4d765e 17649->17650 17651 7ff74b4d7666 17650->17651 17652 7ff74b4d7679 ExpandEnvironmentStringsW 17650->17652 17653 7ff74b4d2b10 59 API calls 17651->17653 17654 7ff74b4d769f __std_exception_copy 17652->17654 17655 7ff74b4d7672 17653->17655 17656 7ff74b4d76a3 17654->17656 17657 7ff74b4d76b6 17654->17657 17658 7ff74b4dc010 _wfindfirst32i64 8 API calls 17655->17658 17659 7ff74b4d2b10 59 API calls 17656->17659 17661 7ff74b4d76c4 17657->17661 17662 7ff74b4d76d0 17657->17662 17660 7ff74b4d7798 17658->17660 17659->17655 17660->17630 17671 7ff74b4e8610 17660->17671 17812 7ff74b4e7ee4 17661->17812 17819 7ff74b4e81e0 17662->17819 17665 7ff74b4d76ce 17666 7ff74b4d76ea 17665->17666 17669 7ff74b4d76fd __scrt_get_show_window_mode 17665->17669 17667 7ff74b4d2b10 59 API calls 17666->17667 17667->17655 17668 7ff74b4d7772 CreateDirectoryW 17668->17655 17669->17668 17670 7ff74b4d774c CreateDirectoryW 17669->17670 17670->17669 17672 7ff74b4e8630 17671->17672 17673 7ff74b4e861d 17671->17673 17920 7ff74b4e8294 17672->17920 17674 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17673->17674 17676 7ff74b4e8622 17674->17676 17677 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 17676->17677 17722 7ff74b4f23b0 17681->17722 17781 7ff74b4f2128 17722->17781 17802 7ff74b4f11a8 EnterCriticalSection 17781->17802 17813 7ff74b4e7f02 17812->17813 17816 7ff74b4e7f35 17812->17816 17813->17816 17831 7ff74b4f1344 17813->17831 17816->17665 17820 7ff74b4e81fc 17819->17820 17821 7ff74b4e826a 17819->17821 17820->17821 17822 7ff74b4e8201 17820->17822 17865 7ff74b4f1618 17821->17865 17824 7ff74b4e8236 17822->17824 17825 7ff74b4e8219 17822->17825 17848 7ff74b4e8024 GetFullPathNameW 17824->17848 17840 7ff74b4e7fb0 GetFullPathNameW 17825->17840 17832 7ff74b4f1351 17831->17832 17834 7ff74b4f135b 17831->17834 17832->17834 17838 7ff74b4f1377 17832->17838 17833 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17835 7ff74b4f1363 17833->17835 17834->17833 17836 7ff74b4e7f31 17836->17816 17838->17836 17839 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17838->17839 17839->17835 17841 7ff74b4e7fd6 GetLastError 17840->17841 17842 7ff74b4e7fec 17840->17842 17849 7ff74b4e8057 GetLastError 17848->17849 17853 7ff74b4e806d __std_exception_copy 17848->17853 17868 7ff74b4f1428 17865->17868 17869 7ff74b4f1453 17868->17869 17870 7ff74b4f146a 17868->17870 17871 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 17869->17871 17927 7ff74b4f11a8 EnterCriticalSection 17920->17927 17929 7ff74b4d1716 17928->17929 17930 7ff74b4d172e 17928->17930 17931 7ff74b4d2b10 59 API calls 17929->17931 17932 7ff74b4d1734 17930->17932 17933 7ff74b4d1758 17930->17933 17935 7ff74b4d1722 17931->17935 18060 7ff74b4d12a0 17932->18060 18021 7ff74b4d7e20 17933->18021 17935->16589 17939 7ff74b4d177d 17942 7ff74b4d2870 59 API calls 17939->17942 17940 7ff74b4d17a9 17943 7ff74b4d4060 116 API calls 17940->17943 17941 7ff74b4d174f 17941->16589 17945 7ff74b4d1793 17942->17945 17946 7ff74b4d17be 17943->17946 17944 7ff74b4d2b10 59 API calls 17944->17941 17945->16589 17947 7ff74b4d17c6 17946->17947 17948 7ff74b4d17de 17946->17948 17949 7ff74b4d2b10 59 API calls 17947->17949 17950 7ff74b4e1004 73 API calls 17948->17950 17951 7ff74b4d17d5 17949->17951 17952 7ff74b4d17ef 17950->17952 17956 7ff74b4e097c 74 API calls 17951->17956 17953 7ff74b4d1813 17952->17953 17954 7ff74b4d17f3 17952->17954 17957 7ff74b4d1831 17953->17957 17958 7ff74b4d1819 17953->17958 17955 7ff74b4d2870 59 API calls 17954->17955 17969 7ff74b4d1809 __std_exception_copy 17955->17969 17959 7ff74b4d1927 17956->17959 17962 7ff74b4d1853 17957->17962 17967 7ff74b4d1872 17957->17967 18040 7ff74b4d1050 17958->18040 17959->16589 17961 7ff74b4e097c 74 API calls 17961->17951 17963 7ff74b4d2870 59 API calls 17962->17963 17963->17969 17964 7ff74b4e0ccc _fread_nolock 53 API calls 17964->17967 17965 7ff74b4d18d5 17968 7ff74b4d2870 59 API calls 17965->17968 17967->17964 17967->17965 17967->17969 18099 7ff74b4e140c 17967->18099 17968->17969 17969->17961 17971 7ff74b4d2d66 17970->17971 17972 7ff74b4d1ee0 49 API calls 17971->17972 17974 7ff74b4d2d99 17972->17974 17973 7ff74b4d30ca 17974->17973 17975 7ff74b4d3e80 49 API calls 17974->17975 17976 7ff74b4d2e07 17975->17976 17977 7ff74b4d3e80 49 API calls 17976->17977 17978 7ff74b4d2e18 17977->17978 17979 7ff74b4d2e75 17978->17979 17980 7ff74b4d2e39 17978->17980 17982 7ff74b4d3190 75 API calls 17979->17982 18186 7ff74b4d3190 17980->18186 17983 7ff74b4d2e73 17982->17983 17984 7ff74b4d2eb4 17983->17984 17985 7ff74b4d2ef6 17983->17985 18194 7ff74b4d77b0 17984->18194 17987 7ff74b4d3190 75 API calls 17985->17987 17989 7ff74b4d2f20 17987->17989 17993 7ff74b4d3190 75 API calls 17989->17993 17998 7ff74b4d2fbc 17989->17998 17990 7ff74b4d3151 17997 7ff74b4d2b10 59 API calls 17990->17997 17991 7ff74b4d2ed7 17992 7ff74b4d2b10 59 API calls 17991->17992 17994 7ff74b4d2ef1 17992->17994 17995 7ff74b4d2f52 17993->17995 18000 7ff74b4dc010 _wfindfirst32i64 8 API calls 17994->18000 17995->17998 18001 7ff74b4d3190 75 API calls 17995->18001 17996 7ff74b4d1ea0 59 API calls 17999 7ff74b4d300f 17996->17999 17997->17973 17998->17996 18014 7ff74b4d30cf 17998->18014 17999->17973 18002 7ff74b4d1ee0 49 API calls 17999->18002 18003 7ff74b4d2fb1 18000->18003 18004 7ff74b4d2f80 18001->18004 18006 7ff74b4d3037 18002->18006 18003->16589 18004->17998 18005 7ff74b4d2f84 18004->18005 18007 7ff74b4d2b10 59 API calls 18005->18007 18006->17990 18008 7ff74b4d1ee0 49 API calls 18006->18008 18007->17994 18010 7ff74b4d3064 18008->18010 18009 7ff74b4d2b10 59 API calls 18013 7ff74b4d3128 18009->18013 18010->17990 18012 7ff74b4d1ee0 49 API calls 18010->18012 18015 7ff74b4d3091 18012->18015 18013->17990 18013->18009 18016 7ff74b4d1700 135 API calls 18013->18016 18014->18013 18231 7ff74b4e5860 18014->18231 18015->17990 18017 7ff74b4d1a90 121 API calls 18015->18017 18016->18013 18022 7ff74b4d7e30 18021->18022 18023 7ff74b4d1ee0 49 API calls 18022->18023 18024 7ff74b4d7e71 18023->18024 18039 7ff74b4d7ef1 18024->18039 18103 7ff74b4d3ff0 18024->18103 18026 7ff74b4dc010 _wfindfirst32i64 8 API calls 18027 7ff74b4d1775 18026->18027 18027->17939 18027->17940 18028 7ff74b4d7f2b 18109 7ff74b4d79d0 18028->18109 18031 7ff74b4d7d70 61 API calls 18036 7ff74b4d7ea2 __std_exception_copy 18031->18036 18033 7ff74b4d7ee0 18037 7ff74b4d2c30 59 API calls 18033->18037 18034 7ff74b4d7f14 18035 7ff74b4d2c30 59 API calls 18034->18035 18035->18028 18036->18033 18036->18034 18037->18039 18038 7ff74b4d4060 116 API calls 18038->18039 18039->18026 18041 7ff74b4d10a6 18040->18041 18042 7ff74b4d10ad 18041->18042 18045 7ff74b4d10d3 18041->18045 18043 7ff74b4d2b10 59 API calls 18042->18043 18044 7ff74b4d10c0 18043->18044 18044->17969 18046 7ff74b4d10ed 18045->18046 18047 7ff74b4d1109 18045->18047 18048 7ff74b4d2870 59 API calls 18046->18048 18049 7ff74b4d111b 18047->18049 18057 7ff74b4d1137 memcpy_s 18047->18057 18058 7ff74b4d1104 18048->18058 18050 7ff74b4d2870 59 API calls 18049->18050 18050->18058 18052 7ff74b4e0ccc _fread_nolock 53 API calls 18052->18057 18054 7ff74b4d11fe 18055 7ff74b4d2b10 59 API calls 18054->18055 18055->18058 18056 7ff74b4e140c 76 API calls 18056->18057 18057->18052 18057->18054 18057->18056 18057->18058 18059 7ff74b4e0a40 37 API calls 18057->18059 18153 7ff74b4db520 18058->18153 18059->18057 18061 7ff74b4d12b2 18060->18061 18062 7ff74b4d4060 116 API calls 18061->18062 18063 7ff74b4d12e2 18062->18063 18064 7ff74b4d1301 18063->18064 18065 7ff74b4d12ea 18063->18065 18067 7ff74b4e1004 73 API calls 18064->18067 18066 7ff74b4d2b10 59 API calls 18065->18066 18072 7ff74b4d12fa __std_exception_copy 18066->18072 18068 7ff74b4d1313 18067->18068 18069 7ff74b4d133d 18068->18069 18070 7ff74b4d1317 18068->18070 18076 7ff74b4d1380 18069->18076 18077 7ff74b4d1358 18069->18077 18071 7ff74b4d2870 59 API calls 18070->18071 18073 7ff74b4d132e 18071->18073 18074 7ff74b4dc010 _wfindfirst32i64 8 API calls 18072->18074 18075 7ff74b4e097c 74 API calls 18073->18075 18080 7ff74b4d1444 18074->18080 18075->18072 18079 7ff74b4d139a 18076->18079 18086 7ff74b4d1453 18076->18086 18078 7ff74b4d2870 59 API calls 18077->18078 18081 7ff74b4d1373 18078->18081 18082 7ff74b4d1050 98 API calls 18079->18082 18080->17941 18080->17944 18083 7ff74b4e097c 74 API calls 18081->18083 18084 7ff74b4d13ab 18082->18084 18083->18072 18087 7ff74b4d14c2 __std_exception_copy 18084->18087 18093 7ff74b4d13b3 18084->18093 18085 7ff74b4e097c 74 API calls 18088 7ff74b4d13bf 18085->18088 18089 7ff74b4e0ccc _fread_nolock 53 API calls 18086->18089 18092 7ff74b4d14ab 18086->18092 18086->18093 18095 7ff74b4e097c 74 API calls 18087->18095 18090 7ff74b4d79d0 64 API calls 18088->18090 18089->18086 18091 7ff74b4d13ce 18090->18091 18091->18072 18096 7ff74b4d1ee0 49 API calls 18091->18096 18094 7ff74b4d2870 59 API calls 18092->18094 18093->18085 18094->18087 18095->18072 18097 7ff74b4d13fc 18096->18097 18097->18072 18157 7ff74b4d4260 18097->18157 18100 7ff74b4e143c 18099->18100 18171 7ff74b4e115c 18100->18171 18102 7ff74b4e145a 18102->17967 18104 7ff74b4d3ffa 18103->18104 18105 7ff74b4d8de0 57 API calls 18104->18105 18106 7ff74b4d4022 18105->18106 18107 7ff74b4dc010 _wfindfirst32i64 8 API calls 18106->18107 18108 7ff74b4d404a 18107->18108 18108->18028 18108->18031 18108->18036 18110 7ff74b4d79e0 18109->18110 18111 7ff74b4d1ee0 49 API calls 18110->18111 18112 7ff74b4d7a11 18111->18112 18113 7ff74b4d7b29 18112->18113 18114 7ff74b4d1ee0 49 API calls 18112->18114 18115 7ff74b4dc010 _wfindfirst32i64 8 API calls 18113->18115 18117 7ff74b4d7a38 18114->18117 18116 7ff74b4d7b3e 18115->18116 18116->18038 18116->18039 18117->18113 18123 7ff74b4e68e8 18117->18123 18124 7ff74b4ebf00 __CxxCallCatchBlock 45 API calls 18123->18124 18126 7ff74b4e68fd 18124->18126 18125 7ff74b4f0a97 18140 7ff74b4dc144 18125->18140 18126->18125 18129 7ff74b4f09b6 18126->18129 18158 7ff74b4d4270 18157->18158 18159 7ff74b4d8de0 57 API calls 18158->18159 18160 7ff74b4d429e 18159->18160 18172 7ff74b4e117c 18171->18172 18177 7ff74b4e11a9 18171->18177 18173 7ff74b4e1186 18172->18173 18174 7ff74b4e11b1 18172->18174 18172->18177 18177->18102 18187 7ff74b4d31c4 18186->18187 18188 7ff74b4e52b4 49 API calls 18187->18188 18189 7ff74b4d31ea 18188->18189 18190 7ff74b4d31fb 18189->18190 18246 7ff74b4e65dc 18189->18246 18192 7ff74b4dc010 _wfindfirst32i64 8 API calls 18190->18192 18193 7ff74b4d3219 18192->18193 18193->17983 18195 7ff74b4d77be 18194->18195 18196 7ff74b4d4060 116 API calls 18195->18196 18197 7ff74b4d77ed 18196->18197 18198 7ff74b4d1ee0 49 API calls 18197->18198 18199 7ff74b4d7816 18198->18199 18200 7ff74b4d781d 18199->18200 18201 7ff74b4d3ff0 57 API calls 18199->18201 18203 7ff74b4d7999 18200->18203 18206 7ff74b4d78f9 18200->18206 18202 7ff74b4d7830 18201->18202 18204 7ff74b4d78b4 18202->18204 18211 7ff74b4d7d70 61 API calls 18202->18211 18216 7ff74b4d784e __std_exception_copy 18202->18216 18205 7ff74b4d7995 18203->18205 18208 7ff74b4e097c 74 API calls 18203->18208 18207 7ff74b4d79d0 64 API calls 18204->18207 18214 7ff74b4dc010 _wfindfirst32i64 8 API calls 18205->18214 18426 7ff74b4e0a14 18206->18426 18210 7ff74b4d78bf 18207->18210 18208->18205 18210->18200 18221 7ff74b4d4060 116 API calls 18210->18221 18211->18216 18212 7ff74b4d789d 18215 7ff74b4d2c30 59 API calls 18212->18215 18213 7ff74b4d7887 18217 7ff74b4d2c30 59 API calls 18213->18217 18219 7ff74b4d2ece 18214->18219 18215->18204 18216->18212 18216->18213 18217->18200 18218 7ff74b4d7976 18220 7ff74b4e097c 74 API calls 18218->18220 18219->17990 18219->17991 18221->18200 18223 7ff74b4e0ccc _fread_nolock 53 API calls 18230 7ff74b4d78fe 18223->18230 18225 7ff74b4e140c 76 API calls 18225->18230 18226 7ff74b4d793c 18432 7ff74b4e92e4 18226->18432 18227 7ff74b4e0a40 37 API calls 18227->18230 18228 7ff74b4e0a14 37 API calls 18228->18230 18230->18218 18230->18223 18230->18225 18230->18226 18230->18227 18230->18228 18232 7ff74b4e586d 18231->18232 18233 7ff74b4e589a 18231->18233 18234 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 18232->18234 18243 7ff74b4e5824 18232->18243 18235 7ff74b4e58bd 18233->18235 18236 7ff74b4e58d9 18233->18236 18237 7ff74b4e5877 18234->18237 18238 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 18235->18238 18239 7ff74b4e5788 45 API calls 18236->18239 18240 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 18237->18240 18241 7ff74b4e58c2 18238->18241 18245 7ff74b4e58cd 18239->18245 18242 7ff74b4e5882 18240->18242 18244 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 18241->18244 18242->18014 18243->18014 18244->18245 18245->18014 18247 7ff74b4e6605 18246->18247 18248 7ff74b4e65f9 18246->18248 18288 7ff74b4e5788 18247->18288 18263 7ff74b4e5ef0 18248->18263 18255 7ff74b4e663d 18299 7ff74b4e5d74 18255->18299 18256 7ff74b4e66ad 18258 7ff74b4e5ef0 69 API calls 18256->18258 18257 7ff74b4e6699 18259 7ff74b4e65fe 18257->18259 18261 7ff74b4eb700 __free_lconv_mon 11 API calls 18257->18261 18260 7ff74b4e66b9 18258->18260 18259->18190 18260->18259 18261->18259 18264 7ff74b4e5f27 18263->18264 18265 7ff74b4e5f0a 18263->18265 18264->18265 18266 7ff74b4e5f3a CreateFileW 18264->18266 18267 7ff74b4e5c94 _fread_nolock 11 API calls 18265->18267 18268 7ff74b4e5fa4 18266->18268 18269 7ff74b4e5f6e 18266->18269 18270 7ff74b4e5f0f 18267->18270 18347 7ff74b4e64cc 18268->18347 18321 7ff74b4e6044 GetFileType 18269->18321 18271 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 18270->18271 18274 7ff74b4e5f17 18271->18274 18277 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 18274->18277 18283 7ff74b4e5f22 18277->18283 18280 7ff74b4e5fad 18281 7ff74b4e5fd8 18283->18259 18289 7ff74b4e57ac 18288->18289 18290 7ff74b4e57a7 18288->18290 18289->18290 18291 7ff74b4ebf00 __CxxCallCatchBlock 45 API calls 18289->18291 18290->18255 18296 7ff74b4efbd4 18290->18296 18292 7ff74b4e57c7 18291->18292 18409 7ff74b4ee734 18292->18409 18417 7ff74b4ef9c0 18296->18417 18300 7ff74b4e5dc2 18299->18300 18301 7ff74b4e5d9e 18299->18301 18302 7ff74b4e5e1c 18300->18302 18303 7ff74b4e5dc7 18300->18303 18305 7ff74b4eb700 __free_lconv_mon 11 API calls 18301->18305 18308 7ff74b4e5dad 18301->18308 18304 7ff74b4f03f0 _fread_nolock MultiByteToWideChar 18302->18304 18306 7ff74b4e5ddc 18303->18306 18303->18308 18309 7ff74b4eb700 __free_lconv_mon 11 API calls 18303->18309 18315 7ff74b4e5e38 18304->18315 18305->18308 18310 7ff74b4ee3ac _fread_nolock 12 API calls 18306->18310 18307 7ff74b4e5e3f GetLastError 18311 7ff74b4e5c28 _fread_nolock 11 API calls 18307->18311 18308->18256 18308->18257 18309->18306 18310->18308 18312 7ff74b4e5e7a 18312->18308 18313 7ff74b4f03f0 _fread_nolock MultiByteToWideChar 18312->18313 18315->18307 18315->18312 18316 7ff74b4e5e6d 18315->18316 18319 7ff74b4eb700 __free_lconv_mon 11 API calls 18315->18319 18320 7ff74b4ee3ac _fread_nolock 12 API calls 18316->18320 18319->18316 18320->18312 18322 7ff74b4e614f 18321->18322 18323 7ff74b4e6092 18321->18323 18325 7ff74b4e6157 18322->18325 18326 7ff74b4e6179 18322->18326 18324 7ff74b4e60be GetFileInformationByHandle 18323->18324 18329 7ff74b4e63c8 21 API calls 18323->18329 18330 7ff74b4e60e7 18324->18330 18331 7ff74b4e616a GetLastError 18324->18331 18325->18331 18332 7ff74b4e615b 18325->18332 18327 7ff74b4e613a 18326->18327 18328 7ff74b4e619c PeekNamedPipe 18326->18328 18337 7ff74b4dc010 _wfindfirst32i64 8 API calls 18327->18337 18328->18327 18334 7ff74b4e60ac 18329->18334 18335 7ff74b4e628c 51 API calls 18330->18335 18333 7ff74b4e5c28 _fread_nolock 11 API calls 18331->18333 18336 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 18332->18336 18333->18327 18334->18324 18334->18327 18338 7ff74b4e60f2 18335->18338 18336->18327 18339 7ff74b4e5f7c 18337->18339 18348 7ff74b4e6502 18347->18348 18349 7ff74b4e659a __std_exception_copy 18348->18349 18350 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 18348->18350 18351 7ff74b4dc010 _wfindfirst32i64 8 API calls 18349->18351 18352 7ff74b4e6514 18350->18352 18354 7ff74b4e5fa9 18351->18354 18353 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 18352->18353 18355 7ff74b4e651c 18353->18355 18354->18280 18354->18281 18410 7ff74b4ee749 18409->18410 18412 7ff74b4e57ea 18409->18412 18411 7ff74b4f4154 45 API calls 18410->18411 18410->18412 18411->18412 18413 7ff74b4ee7a0 18412->18413 18414 7ff74b4ee7b5 18413->18414 18415 7ff74b4ee7c8 18413->18415 18414->18415 18416 7ff74b4f34a0 45 API calls 18414->18416 18415->18290 18416->18415 18418 7ff74b4efa18 __vcrt_FlsAlloc 18417->18418 18419 7ff74b4efa1d 18417->18419 18418->18419 18420 7ff74b4efa4d LoadLibraryExW 18418->18420 18421 7ff74b4efb42 GetProcAddress 18418->18421 18425 7ff74b4efaac LoadLibraryExW 18418->18425 18419->18255 18422 7ff74b4efb22 18420->18422 18423 7ff74b4efa72 GetLastError 18420->18423 18421->18419 18422->18421 18424 7ff74b4efb39 FreeLibrary 18422->18424 18423->18418 18424->18421 18425->18418 18425->18422 18427 7ff74b4e0a2d 18426->18427 18428 7ff74b4e0a1d 18426->18428 18427->18230 18429 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 18428->18429 18430 7ff74b4e0a22 18429->18430 18453 7ff74b4d833a 18452->18453 18454 7ff74b4eb23d 18452->18454 18458 7ff74b4e8e54 18453->18458 18455 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 18454->18455 18456 7ff74b4eb242 18455->18456 18457 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 18456->18457 18457->18453 18459 7ff74b4e8e72 18458->18459 18460 7ff74b4e8e5d 18458->18460 18462 7ff74b4e5c94 _fread_nolock 11 API calls 18459->18462 18468 7ff74b4e8e6a 18459->18468 18461 7ff74b4e5c94 _fread_nolock 11 API calls 18460->18461 18471 7ff74b4e6918 18470->18471 18472 7ff74b4e693e 18471->18472 18475 7ff74b4e6971 18471->18475 18473 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 18472->18473 18474 7ff74b4e6943 18473->18474 18476 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 18474->18476 18477 7ff74b4e6984 18475->18477 18478 7ff74b4e6977 18475->18478 18481 7ff74b4d40b9 18476->18481 18489 7ff74b4eb9e0 18477->18489 18479 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 18478->18479 18479->18481 18481->16643 18502 7ff74b4f11a8 EnterCriticalSection 18489->18502 18850 7ff74b4e98c4 18849->18850 18853 7ff74b4e93a0 18850->18853 18852 7ff74b4e98dd 18852->16653 18854 7ff74b4e93bb 18853->18854 18855 7ff74b4e93ea 18853->18855 18857 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 18854->18857 18863 7ff74b4e5b5c EnterCriticalSection 18855->18863 18859 7ff74b4e93db 18857->18859 18859->18852 18865 7ff74b4e0773 18864->18865 18866 7ff74b4e07a1 18864->18866 18867 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 18865->18867 18873 7ff74b4e0793 18866->18873 18874 7ff74b4e5b5c EnterCriticalSection 18866->18874 18867->18873 18873->16657 18876 7ff74b4dc27e RtlLookupFunctionEntry 18875->18876 18877 7ff74b4dc294 RtlVirtualUnwind 18876->18877 18878 7ff74b4dc09b 18876->18878 18877->18876 18877->18878 18879 7ff74b4dc030 SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess 18878->18879 18881 7ff74b4d4060 116 API calls 18880->18881 18882 7ff74b4d15b7 18881->18882 18883 7ff74b4d15bf 18882->18883 18884 7ff74b4d15e0 18882->18884 18886 7ff74b4d2b10 59 API calls 18883->18886 18885 7ff74b4e1004 73 API calls 18884->18885 18887 7ff74b4d15f1 18885->18887 18888 7ff74b4d15cf 18886->18888 18889 7ff74b4d15f5 18887->18889 18890 7ff74b4d1611 18887->18890 18888->16671 18891 7ff74b4d2870 59 API calls 18889->18891 18892 7ff74b4d1641 18890->18892 18893 7ff74b4d1621 18890->18893 18902 7ff74b4d160c __std_exception_copy 18891->18902 18895 7ff74b4d1656 18892->18895 18900 7ff74b4d166d 18892->18900 18894 7ff74b4d2870 59 API calls 18893->18894 18894->18902 18897 7ff74b4d1050 98 API calls 18895->18897 18896 7ff74b4e097c 74 API calls 18898 7ff74b4d16e7 18896->18898 18897->18902 18898->16671 18899 7ff74b4e0ccc _fread_nolock 53 API calls 18899->18900 18900->18899 18901 7ff74b4d16ae 18900->18901 18900->18902 18903 7ff74b4d2870 59 API calls 18901->18903 18902->18896 18903->18902 18906 7ff74b4d19c3 18904->18906 18907 7ff74b4d195f 18904->18907 18905 7ff74b4e5860 45 API calls 18905->18907 18906->16689 18907->18905 18907->18906 18909 7ff74b4d8de0 57 API calls 18908->18909 18910 7ff74b4d8487 LoadLibraryExW 18909->18910 18911 7ff74b4d84a4 __std_exception_copy 18910->18911 18911->16698 18913 7ff74b4d714c GetProcAddress 18912->18913 18914 7ff74b4d7129 18912->18914 18913->18914 18915 7ff74b4d7171 GetProcAddress 18913->18915 18916 7ff74b4d29c0 57 API calls 18914->18916 18915->18914 18917 7ff74b4d7196 GetProcAddress 18915->18917 18918 7ff74b4d713c 18916->18918 18917->18914 18919 7ff74b4d71be GetProcAddress 18917->18919 18918->16705 18919->18914 18920 7ff74b4d71e6 GetProcAddress 18919->18920 18920->18914 18921 7ff74b4d720e GetProcAddress 18920->18921 18922 7ff74b4d7236 GetProcAddress 18921->18922 18923 7ff74b4d722a 18921->18923 18924 7ff74b4d7252 18922->18924 18925 7ff74b4d725e GetProcAddress 18922->18925 18923->18922 18924->18925 18971->16713 18972->16717 18974 7ff74b4d5de0 18973->18974 18975 7ff74b4d1ee0 49 API calls 18974->18975 18976 7ff74b4d5e12 18975->18976 18977 7ff74b4d5e3b 18976->18977 18978 7ff74b4d5e1b 18976->18978 18979 7ff74b4d5e92 18977->18979 18981 7ff74b4d4140 49 API calls 18977->18981 18980 7ff74b4d2b10 59 API calls 18978->18980 18982 7ff74b4d4140 49 API calls 18979->18982 19000 7ff74b4d5e31 18980->19000 18983 7ff74b4d5e5c 18981->18983 18986 7ff74b4d5eab 18982->18986 18984 7ff74b4d5e7a 18983->18984 18989 7ff74b4d2b10 59 API calls 18983->18989 18990 7ff74b4d3ff0 57 API calls 18984->18990 18985 7ff74b4dc010 _wfindfirst32i64 8 API calls 18991 7ff74b4d344e 18985->18991 18987 7ff74b4d5ec9 18986->18987 18992 7ff74b4d2b10 59 API calls 18986->18992 18988 7ff74b4d8470 58 API calls 18987->18988 18993 7ff74b4d5ed6 18988->18993 18989->18984 18994 7ff74b4d5e84 18990->18994 18991->16725 19001 7ff74b4d5f30 18991->19001 18992->18987 18995 7ff74b4d5edb 18993->18995 18996 7ff74b4d5efd 18993->18996 18994->18979 18999 7ff74b4d8470 58 API calls 18994->18999 18997 7ff74b4d29c0 57 API calls 18995->18997 19071 7ff74b4d53f0 GetProcAddress 18996->19071 18997->19000 18999->18979 19000->18985 19155 7ff74b4d4ff0 19001->19155 19003 7ff74b4d5f54 19004 7ff74b4d5f5c 19003->19004 19005 7ff74b4d5f6d 19003->19005 19006 7ff74b4d2b10 59 API calls 19004->19006 19162 7ff74b4d4730 19005->19162 19012 7ff74b4d5f68 19006->19012 19009 7ff74b4d5f79 19011 7ff74b4d2b10 59 API calls 19009->19011 19010 7ff74b4d5f8a 19013 7ff74b4d5f97 19010->19013 19014 7ff74b4d5fa8 19010->19014 19011->19012 19012->16727 19015 7ff74b4d2b10 59 API calls 19013->19015 19166 7ff74b4d4a80 19014->19166 19015->19012 19043 7ff74b4d5b47 19042->19043 19043->19043 19044 7ff74b4d5b70 19043->19044 19050 7ff74b4d5b87 __std_exception_copy 19043->19050 19045 7ff74b4d2b10 59 API calls 19044->19045 19046 7ff74b4d5b7c 19045->19046 19046->16729 19047 7ff74b4d5c75 19047->16729 19048 7ff74b4d1590 122 API calls 19048->19050 19049 7ff74b4d2b10 59 API calls 19049->19050 19050->19047 19050->19048 19050->19049 19072 7ff74b4d5430 GetProcAddress 19071->19072 19073 7ff74b4d5412 19071->19073 19072->19073 19074 7ff74b4d5455 GetProcAddress 19072->19074 19075 7ff74b4d29c0 57 API calls 19073->19075 19074->19073 19076 7ff74b4d547a GetProcAddress 19074->19076 19078 7ff74b4d5425 19075->19078 19076->19073 19077 7ff74b4d54a2 GetProcAddress 19076->19077 19077->19073 19079 7ff74b4d54ca GetProcAddress 19077->19079 19078->19000 19079->19073 19080 7ff74b4d54f2 GetProcAddress 19079->19080 19080->19073 19081 7ff74b4d551a GetProcAddress 19080->19081 19082 7ff74b4d5536 19081->19082 19083 7ff74b4d5542 GetProcAddress 19081->19083 19082->19083 19084 7ff74b4d555e 19083->19084 19085 7ff74b4d556a GetProcAddress 19083->19085 19084->19085 19086 7ff74b4d5586 19085->19086 19087 7ff74b4d5592 GetProcAddress 19085->19087 19086->19087 19088 7ff74b4d55ae 19087->19088 19089 7ff74b4d55ba GetProcAddress 19087->19089 19088->19089 19158 7ff74b4d5015 19155->19158 19156 7ff74b4d501d 19156->19003 19157 7ff74b4d535a __std_exception_copy 19157->19003 19158->19156 19160 7ff74b4d51af 19158->19160 19197 7ff74b4e74f4 19158->19197 19159 7ff74b4d4450 47 API calls 19159->19160 19160->19157 19160->19159 19163 7ff74b4d4760 19162->19163 19164 7ff74b4dc010 _wfindfirst32i64 8 API calls 19163->19164 19165 7ff74b4d47ca 19164->19165 19165->19009 19165->19010 19167 7ff74b4d4af1 19166->19167 19170 7ff74b4d4a94 19166->19170 19198 7ff74b4e7524 19197->19198 19201 7ff74b4e69f0 19198->19201 19200 7ff74b4e7554 19200->19158 19202 7ff74b4e6a33 19201->19202 19203 7ff74b4e6a21 19201->19203 19205 7ff74b4e6a7d 19202->19205 19206 7ff74b4e6a40 19202->19206 19204 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 19203->19204 19208 7ff74b4e6a26 19204->19208 19207 7ff74b4e6a98 19205->19207 19210 7ff74b4e50f0 45 API calls 19205->19210 19209 7ff74b4eb5cc _invalid_parameter_noinfo 37 API calls 19206->19209 19214 7ff74b4e6aba 19207->19214 19222 7ff74b4e747c 19207->19222 19212 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 19208->19212 19215 7ff74b4e6a31 19209->19215 19210->19207 19212->19215 19213 7ff74b4e6b5b 19213->19215 19217 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 19213->19217 19214->19213 19216 7ff74b4e5cb4 _wfindfirst32i64 11 API calls 19214->19216 19215->19200 19218 7ff74b4e6b50 19216->19218 19219 7ff74b4e6c06 19217->19219 19221 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 19218->19221 19220 7ff74b4eb698 _invalid_parameter_noinfo 37 API calls 19219->19220 19220->19215 19221->19213 19223 7ff74b4e749f 19222->19223 19225 7ff74b4e74b6 19222->19225 19228 7ff74b4f0e40 19223->19228 19226 7ff74b4e74a4 19225->19226 19233 7ff74b4f0e70 19225->19233 19226->19207 19229 7ff74b4ebf00 __CxxCallCatchBlock 45 API calls 19228->19229 19230 7ff74b4f0e49 19229->19230 19231 7ff74b4ee734 45 API calls 19230->19231 19234 7ff74b4e5788 45 API calls 19233->19234 19235 7ff74b4f0ea9 19234->19235 19238 7ff74b4f0eb5 19235->19238 19240 7ff74b4f3c90 19235->19240 19328 7ff74b4ebf00 __CxxCallCatchBlock 45 API calls 19327->19328 19329 7ff74b4eb191 19328->19329 19330 7ff74b4eb2bc __CxxCallCatchBlock 45 API calls 19329->19330 19331 7ff74b4eb1b1 19330->19331 21037 7ff74b4db1cc 21038 7ff74b4da5d3 21037->21038 21040 7ff74b4da656 21037->21040 21039 7ff74b4db850 12 API calls 21038->21039 21038->21040 21039->21040

                                                                                                                        Executed Functions

                                                                                                                        Function 00007FF74B4D1000 Relevance: 21.3, APIs: 5, Strings: 7, Instructions: 293windowCOMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 63 7ff74b4d1000-7ff74b4d39b6 call 7ff74b4e0750 call 7ff74b4e0748 call 7ff74b4d89b0 call 7ff74b4e0748 call 7ff74b4dbfb0 call 7ff74b4e5ae0 call 7ff74b4e66e8 call 7ff74b4d1ea0 81 7ff74b4d3b5f 63->81 82 7ff74b4d39bc-7ff74b4d39cc call 7ff74b4d3f00 63->82 84 7ff74b4d3b64-7ff74b4d3b84 call 7ff74b4dc010 81->84 82->81 88 7ff74b4d39d2-7ff74b4d39e5 call 7ff74b4d3dd0 82->88 88->81 91 7ff74b4d39eb-7ff74b4d3a12 call 7ff74b4d7d70 88->91 94 7ff74b4d3a54-7ff74b4d3a7c call 7ff74b4d8250 call 7ff74b4d1ca0 91->94 95 7ff74b4d3a14-7ff74b4d3a23 call 7ff74b4d7d70 91->95 105 7ff74b4d3a82-7ff74b4d3a98 call 7ff74b4d1ca0 94->105 106 7ff74b4d3b2d-7ff74b4d3b3e 94->106 95->94 101 7ff74b4d3a25-7ff74b4d3a2b 95->101 103 7ff74b4d3a2d-7ff74b4d3a35 101->103 104 7ff74b4d3a37-7ff74b4d3a51 call 7ff74b4e576c call 7ff74b4d8250 101->104 103->104 104->94 117 7ff74b4d3ab7-7ff74b4d3aba 105->117 118 7ff74b4d3a9a-7ff74b4d3ab2 call 7ff74b4d2b10 105->118 109 7ff74b4d3b40-7ff74b4d3b47 106->109 110 7ff74b4d3b92-7ff74b4d3b95 106->110 109->110 115 7ff74b4d3b49-7ff74b4d3b51 call 7ff74b4d8b80 109->115 113 7ff74b4d3bab-7ff74b4d3bc3 call 7ff74b4d8de0 110->113 114 7ff74b4d3b97-7ff74b4d3b9d 110->114 131 7ff74b4d3bc5-7ff74b4d3bcc 113->131 132 7ff74b4d3bce-7ff74b4d3bd5 SetDllDirectoryW 113->132 119 7ff74b4d3b9f-7ff74b4d3ba9 114->119 120 7ff74b4d3bdb-7ff74b4d3be8 call 7ff74b4d6ff0 114->120 133 7ff74b4d3b53 115->133 134 7ff74b4d3b85-7ff74b4d3b88 call 7ff74b4d14e0 115->134 117->106 125 7ff74b4d3abc-7ff74b4d3ad3 call 7ff74b4d4060 117->125 118->81 119->113 119->120 136 7ff74b4d3c33-7ff74b4d3c38 call 7ff74b4d6f70 120->136 137 7ff74b4d3bea-7ff74b4d3bf7 call 7ff74b4d6ca0 120->137 143 7ff74b4d3ad5-7ff74b4d3ad8 125->143 144 7ff74b4d3ada-7ff74b4d3b06 call 7ff74b4d84c0 125->144 140 7ff74b4d3b5a call 7ff74b4d2b10 131->140 132->120 133->140 142 7ff74b4d3b8d-7ff74b4d3b90 134->142 147 7ff74b4d3c3d-7ff74b4d3c40 136->147 137->136 153 7ff74b4d3bf9-7ff74b4d3c08 call 7ff74b4d6800 137->153 140->81 142->81 142->110 149 7ff74b4d3b15-7ff74b4d3b2b call 7ff74b4d2b10 143->149 144->106 156 7ff74b4d3b08-7ff74b4d3b10 call 7ff74b4e097c 144->156 151 7ff74b4d3c46-7ff74b4d3c50 147->151 152 7ff74b4d3d11-7ff74b4d3d20 call 7ff74b4d34a0 147->152 149->81 157 7ff74b4d3c53-7ff74b4d3c5d 151->157 152->81 171 7ff74b4d3d26-7ff74b4d3d55 call 7ff74b4d8b50 call 7ff74b4d81e0 call 7ff74b4d7d70 call 7ff74b4d3600 152->171 169 7ff74b4d3c29-7ff74b4d3c2e call 7ff74b4d6a50 153->169 170 7ff74b4d3c0a-7ff74b4d3c16 call 7ff74b4d6780 153->170 156->149 162 7ff74b4d3c66-7ff74b4d3c68 157->162 163 7ff74b4d3c5f-7ff74b4d3c64 157->163 167 7ff74b4d3cb1-7ff74b4d3cb7 162->167 168 7ff74b4d3c6a-7ff74b4d3c8d call 7ff74b4d1ee0 162->168 163->157 163->162 174 7ff74b4d3cdc-7ff74b4d3d0c call 7ff74b4d3600 call 7ff74b4d3440 call 7ff74b4d35f0 call 7ff74b4d6a50 call 7ff74b4d6f70 167->174 175 7ff74b4d3cb9-7ff74b4d3cd6 PostMessageW GetMessageW 167->175 168->81 182 7ff74b4d3c93-7ff74b4d3c9d 168->182 169->136 170->169 183 7ff74b4d3c18-7ff74b4d3c27 call 7ff74b4d6e40 170->183 199 7ff74b4d3d57-7ff74b4d3d74 PostMessageW GetMessageW 171->199 200 7ff74b4d3d7a-7ff74b4d3d88 call 7ff74b4d8290 171->200 174->84 175->174 186 7ff74b4d3ca0-7ff74b4d3caf 182->186 183->147 186->167 186->186 199->200 204 7ff74b4d3d8d-7ff74b4d3daa call 7ff74b4d6a50 call 7ff74b4d6f70 200->204 210 7ff74b4d3dac-7ff74b4d3db3 call 7ff74b4d7f50 204->210 211 7ff74b4d3db8-7ff74b4d3dc2 call 7ff74b4d1e70 204->211 210->211 211->84
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message$EnvironmentPost$DirectoryExpandFileModuleNameStringsVariable
                                                                                                                        • String ID: Cannot open PyInstaller archive from executable (%s) or external archive (%s)$Cannot side-load external archive %s (code %d)!$Failed to convert DLL search path!$Failed to initialize security descriptor for temporary directory!$MEI$_MEIPASS2$_PYI_ONEDIR_MODE
                                                                                                                        • API String ID: 2647325126-1544818733
                                                                                                                        • Opcode ID: a25e3f417c552a27ddeba7d09e9d7cd152d3ae131fac216694c9dd282895ab73
                                                                                                                        • Instruction ID: 7c865f464b310bd4fd4f8779b9218a114ade33bc7635d9c75ea6db01bd90d0a3
                                                                                                                        • Opcode Fuzzy Hash: a25e3f417c552a27ddeba7d09e9d7cd152d3ae131fac216694c9dd282895ab73
                                                                                                                        • Instruction Fuzzy Hash: DFC19F22B0C646C1EAA5FB2D94512BDE399BF84784FC00135EA6D476BADF2CFD058720
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F6B50 Relevance: 14.3, APIs: 6, Strings: 2, Instructions: 334timeCOMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 263 7ff74b4f6b50-7ff74b4f6b8b call 7ff74b4f64d8 call 7ff74b4f64e0 call 7ff74b4f6548 270 7ff74b4f6db5-7ff74b4f6e01 call 7ff74b4eb6b8 call 7ff74b4f64d8 call 7ff74b4f64e0 call 7ff74b4f6548 263->270 271 7ff74b4f6b91-7ff74b4f6b9c call 7ff74b4f64e8 263->271 296 7ff74b4f6f3f-7ff74b4f6fad call 7ff74b4eb6b8 call 7ff74b4f23d0 270->296 297 7ff74b4f6e07-7ff74b4f6e12 call 7ff74b4f64e8 270->297 271->270 276 7ff74b4f6ba2-7ff74b4f6bac 271->276 278 7ff74b4f6bce-7ff74b4f6bd2 276->278 279 7ff74b4f6bae-7ff74b4f6bb1 276->279 282 7ff74b4f6bd5-7ff74b4f6bdd 278->282 281 7ff74b4f6bb4-7ff74b4f6bbf 279->281 284 7ff74b4f6bc1-7ff74b4f6bc8 281->284 285 7ff74b4f6bca-7ff74b4f6bcc 281->285 282->282 286 7ff74b4f6bdf-7ff74b4f6bf2 call 7ff74b4ee3ac 282->286 284->281 284->285 285->278 288 7ff74b4f6bfb-7ff74b4f6c09 285->288 293 7ff74b4f6bf4-7ff74b4f6bf6 call 7ff74b4eb700 286->293 294 7ff74b4f6c0a-7ff74b4f6c16 call 7ff74b4eb700 286->294 293->288 304 7ff74b4f6c1d-7ff74b4f6c25 294->304 317 7ff74b4f6faf-7ff74b4f6fb6 296->317 318 7ff74b4f6fbb-7ff74b4f6fbe 296->318 297->296 306 7ff74b4f6e18-7ff74b4f6e23 call 7ff74b4f6518 297->306 304->304 307 7ff74b4f6c27-7ff74b4f6c38 call 7ff74b4f1344 304->307 306->296 315 7ff74b4f6e29-7ff74b4f6e4c call 7ff74b4eb700 GetTimeZoneInformation 306->315 307->270 316 7ff74b4f6c3e-7ff74b4f6c94 call 7ff74b4fb580 * 4 call 7ff74b4f6a6c 307->316 332 7ff74b4f6f14-7ff74b4f6f3e call 7ff74b4f64d0 call 7ff74b4f64c0 call 7ff74b4f64c8 315->332 333 7ff74b4f6e52-7ff74b4f6e73 315->333 375 7ff74b4f6c96-7ff74b4f6c9a 316->375 323 7ff74b4f704b-7ff74b4f704e 317->323 319 7ff74b4f6ff5-7ff74b4f7008 call 7ff74b4ee3ac 318->319 320 7ff74b4f6fc0 318->320 341 7ff74b4f7013-7ff74b4f702e call 7ff74b4f23d0 319->341 342 7ff74b4f700a 319->342 324 7ff74b4f6fc3 320->324 323->324 325 7ff74b4f7054-7ff74b4f705c call 7ff74b4f6b50 323->325 330 7ff74b4f6fc8-7ff74b4f6ff4 call 7ff74b4eb700 call 7ff74b4dc010 324->330 331 7ff74b4f6fc3 call 7ff74b4f6dcc 324->331 325->330 331->330 337 7ff74b4f6e75-7ff74b4f6e7b 333->337 338 7ff74b4f6e7e-7ff74b4f6e85 333->338 337->338 345 7ff74b4f6e99 338->345 346 7ff74b4f6e87-7ff74b4f6e8f 338->346 361 7ff74b4f7035-7ff74b4f7047 call 7ff74b4eb700 341->361 362 7ff74b4f7030-7ff74b4f7033 341->362 349 7ff74b4f700c-7ff74b4f7011 call 7ff74b4eb700 342->349 356 7ff74b4f6e9b-7ff74b4f6f0f call 7ff74b4fb580 * 4 call 7ff74b4f39ac call 7ff74b4f7064 * 2 345->356 346->345 353 7ff74b4f6e91-7ff74b4f6e97 346->353 349->320 353->356 356->332 361->323 362->349 377 7ff74b4f6ca0-7ff74b4f6ca4 375->377 378 7ff74b4f6c9c 375->378 377->375 380 7ff74b4f6ca6-7ff74b4f6ccb call 7ff74b4e75a8 377->380 378->377 386 7ff74b4f6cce-7ff74b4f6cd2 380->386 388 7ff74b4f6cd4-7ff74b4f6cdf 386->388 389 7ff74b4f6ce1-7ff74b4f6ce5 386->389 388->389 391 7ff74b4f6ce7-7ff74b4f6ceb 388->391 389->386 394 7ff74b4f6ced-7ff74b4f6d15 call 7ff74b4e75a8 391->394 395 7ff74b4f6d6c-7ff74b4f6d70 391->395 402 7ff74b4f6d33-7ff74b4f6d37 394->402 403 7ff74b4f6d17 394->403 396 7ff74b4f6d72-7ff74b4f6d74 395->396 397 7ff74b4f6d77-7ff74b4f6d84 395->397 396->397 399 7ff74b4f6d86-7ff74b4f6d9c call 7ff74b4f6a6c 397->399 400 7ff74b4f6d9f-7ff74b4f6dae call 7ff74b4f64d0 call 7ff74b4f64c0 397->400 399->400 400->270 402->395 408 7ff74b4f6d39-7ff74b4f6d57 call 7ff74b4e75a8 402->408 406 7ff74b4f6d1a-7ff74b4f6d21 403->406 406->402 410 7ff74b4f6d23-7ff74b4f6d31 406->410 415 7ff74b4f6d63-7ff74b4f6d6a 408->415 410->402 410->406 415->395 416 7ff74b4f6d59-7ff74b4f6d5d 415->416 416->395 417 7ff74b4f6d5f 416->417 417->415
                                                                                                                        APIs
                                                                                                                        • _get_daylight.LIBCMT ref: 00007FF74B4F6B95
                                                                                                                          • Part of subcall function 00007FF74B4F64E8: _invalid_parameter_noinfo.LIBCMT ref: 00007FF74B4F64FC
                                                                                                                          • Part of subcall function 00007FF74B4EB700: RtlRestoreThreadPreferredUILanguages.NTDLL(?,?,?,00007FF74B4F3B72,?,?,?,00007FF74B4F3BAF,?,?,00000000,00007FF74B4F4075,?,?,00000000,00007FF74B4F3FA7), ref: 00007FF74B4EB716
                                                                                                                          • Part of subcall function 00007FF74B4EB700: GetLastError.KERNEL32(?,?,?,00007FF74B4F3B72,?,?,?,00007FF74B4F3BAF,?,?,00000000,00007FF74B4F4075,?,?,00000000,00007FF74B4F3FA7), ref: 00007FF74B4EB720
                                                                                                                          • Part of subcall function 00007FF74B4EB6B8: IsProcessorFeaturePresent.KERNEL32(?,?,?,?,00007FF74B4EB697,?,?,?,?,?,00007FF74B4E38BC), ref: 00007FF74B4EB6C1
                                                                                                                          • Part of subcall function 00007FF74B4EB6B8: GetCurrentProcess.KERNEL32(?,?,?,?,00007FF74B4EB697,?,?,?,?,?,00007FF74B4E38BC), ref: 00007FF74B4EB6E6
                                                                                                                        • _get_daylight.LIBCMT ref: 00007FF74B4F6B84
                                                                                                                          • Part of subcall function 00007FF74B4F6548: _invalid_parameter_noinfo.LIBCMT ref: 00007FF74B4F655C
                                                                                                                        • _get_daylight.LIBCMT ref: 00007FF74B4F6DFA
                                                                                                                        • _get_daylight.LIBCMT ref: 00007FF74B4F6E0B
                                                                                                                        • _get_daylight.LIBCMT ref: 00007FF74B4F6E1C
                                                                                                                        • GetTimeZoneInformation.KERNELBASE(?,?,?,?,?,?,?,?,?,00000000,?,00007FF74B4F705C), ref: 00007FF74B4F6E43
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _get_daylight$_invalid_parameter_noinfo$CurrentErrorFeatureInformationLanguagesLastPreferredPresentProcessProcessorRestoreThreadTimeZone
                                                                                                                        • String ID: W. Europe Standard Time$W. Europe Summer Time
                                                                                                                        • API String ID: 1458651798-690618308
                                                                                                                        • Opcode ID: 011d4974f3e124412289dc327b2b40947a146d65b03f6d5f747eb19bebd0a963
                                                                                                                        • Instruction ID: 631a63e002398ad96a5461d7b506b3eab2dda61e28e09b16396ac3fa56723e5b
                                                                                                                        • Opcode Fuzzy Hash: 011d4974f3e124412289dc327b2b40947a146d65b03f6d5f747eb19bebd0a963
                                                                                                                        • Instruction Fuzzy Hash: 84D19C22E0C252C6EB60BF2DD4511B9E661EF88794FC48135EA5D47AA6DE3CFC41C760
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F7A9C Relevance: 13.8, APIs: 9, Instructions: 276fileCOMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 448 7ff74b4f7a9c-7ff74b4f7b0f call 7ff74b4f77d0 451 7ff74b4f7b11-7ff74b4f7b1a call 7ff74b4e5c94 448->451 452 7ff74b4f7b29-7ff74b4f7b33 call 7ff74b4e8c58 448->452 457 7ff74b4f7b1d-7ff74b4f7b24 call 7ff74b4e5cb4 451->457 458 7ff74b4f7b35-7ff74b4f7b4c call 7ff74b4e5c94 call 7ff74b4e5cb4 452->458 459 7ff74b4f7b4e-7ff74b4f7bb7 CreateFileW 452->459 475 7ff74b4f7e6a-7ff74b4f7e8a 457->475 458->457 460 7ff74b4f7c34-7ff74b4f7c3f GetFileType 459->460 461 7ff74b4f7bb9-7ff74b4f7bbf 459->461 468 7ff74b4f7c41-7ff74b4f7c7c GetLastError call 7ff74b4e5c28 CloseHandle 460->468 469 7ff74b4f7c92-7ff74b4f7c99 460->469 465 7ff74b4f7c01-7ff74b4f7c2f GetLastError call 7ff74b4e5c28 461->465 466 7ff74b4f7bc1-7ff74b4f7bc5 461->466 465->457 466->465 473 7ff74b4f7bc7-7ff74b4f7bff CreateFileW 466->473 468->457 483 7ff74b4f7c82-7ff74b4f7c8d call 7ff74b4e5cb4 468->483 471 7ff74b4f7ca1-7ff74b4f7ca4 469->471 472 7ff74b4f7c9b-7ff74b4f7c9f 469->472 478 7ff74b4f7caa-7ff74b4f7cff call 7ff74b4e8b70 471->478 479 7ff74b4f7ca6 471->479 472->478 473->460 473->465 487 7ff74b4f7d01-7ff74b4f7d0d call 7ff74b4f79d8 478->487 488 7ff74b4f7d1e-7ff74b4f7d4f call 7ff74b4f7550 478->488 479->478 483->457 487->488 495 7ff74b4f7d0f 487->495 493 7ff74b4f7d55-7ff74b4f7d97 488->493 494 7ff74b4f7d51-7ff74b4f7d53 488->494 497 7ff74b4f7db9-7ff74b4f7dc4 493->497 498 7ff74b4f7d99-7ff74b4f7d9d 493->498 496 7ff74b4f7d11-7ff74b4f7d19 call 7ff74b4eb878 494->496 495->496 496->475 500 7ff74b4f7dca-7ff74b4f7dce 497->500 501 7ff74b4f7e68 497->501 498->497 499 7ff74b4f7d9f-7ff74b4f7db4 498->499 499->497 500->501 503 7ff74b4f7dd4-7ff74b4f7e19 CloseHandle CreateFileW 500->503 501->475 505 7ff74b4f7e4e-7ff74b4f7e63 503->505 506 7ff74b4f7e1b-7ff74b4f7e49 GetLastError call 7ff74b4e5c28 call 7ff74b4e8d98 503->506 505->501 506->505
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: File$CreateErrorLast_invalid_parameter_noinfo$CloseHandle$Type
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1617910340-0
                                                                                                                        • Opcode ID: 8482aad9305a30c551bfc572177b6762c68ebfb4afe3bdfce811c5be068ed5ba
                                                                                                                        • Instruction ID: 2d8d3961d702d7ee4284a6841901ca58e99cf36218580fdbabe6d80da626b127
                                                                                                                        • Opcode Fuzzy Hash: 8482aad9305a30c551bfc572177b6762c68ebfb4afe3bdfce811c5be068ed5ba
                                                                                                                        • Instruction Fuzzy Hash: 74C1B336B28A42C5EB50EFACC4906BC7761EB49B98B411235DA1E977A5CF3CE855C310
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D7B60 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 141COMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        APIs
                                                                                                                        • GetTempPathW.KERNEL32(00000000,?,00000000,00000000,?,00007FF74B4D153F), ref: 00007FF74B4D7BF7
                                                                                                                          • Part of subcall function 00007FF74B4D7D70: GetEnvironmentVariableW.KERNEL32(00007FF74B4D39FF), ref: 00007FF74B4D7DAA
                                                                                                                          • Part of subcall function 00007FF74B4D7D70: ExpandEnvironmentStringsW.KERNEL32 ref: 00007FF74B4D7DC7
                                                                                                                          • Part of subcall function 00007FF74B4E8610: _invalid_parameter_noinfo.LIBCMT ref: 00007FF74B4E8629
                                                                                                                        • SetEnvironmentVariableW.KERNEL32 ref: 00007FF74B4D7CB1
                                                                                                                          • Part of subcall function 00007FF74B4D2B10: MessageBoxW.USER32 ref: 00007FF74B4D2BE5
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Environment$Variable$ExpandMessagePathStringsTemp_invalid_parameter_noinfo
                                                                                                                        • String ID: LOADER: Failed to set the TMP environment variable.$TMP$TMP$_MEI%d
                                                                                                                        • API String ID: 3752271684-1116378104
                                                                                                                        • Opcode ID: 8ca8b3c2351723dac4712d3aa85941f8869fc0faa47b2209596cb44ab2a1f07c
                                                                                                                        • Instruction ID: 8919cd1631fd2a0268dee00028ff23e146ea2b455bf333d1a1ffebe90bfb6448
                                                                                                                        • Opcode Fuzzy Hash: 8ca8b3c2351723dac4712d3aa85941f8869fc0faa47b2209596cb44ab2a1f07c
                                                                                                                        • Instruction Fuzzy Hash: D9518F11B0D253C1FE94BB6EA9152BAD2855F45BC0FC84830EE5E4B7B7ED2CEC018220
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4DA76D Relevance: 12.0, Strings: 9, Instructions: 745COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: invalid bit length repeat$invalid code -- missing end-of-block$invalid code lengths set$invalid distance code$invalid distance too far back$invalid distances set$invalid literal/length code$invalid literal/lengths set$too many length or distance symbols
                                                                                                                        • API String ID: 0-2665694366
                                                                                                                        • Opcode ID: 63f3ffa9379e1e3dea1ad36e367ec88dcfea323b25a29ef61fa4fbcfb838a92b
                                                                                                                        • Instruction ID: feba1d67cf5556cc4cb2b70389412c45ec6c64e0daa9cca655135261171de0c2
                                                                                                                        • Opcode Fuzzy Hash: 63f3ffa9379e1e3dea1ad36e367ec88dcfea323b25a29ef61fa4fbcfb838a92b
                                                                                                                        • Instruction Fuzzy Hash: 5C52D172A186A68BDB94AB1CC458B7E7BADEB84340F814139E75A837D0DB3CDC45CB10
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F6DCC Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 143timeCOMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 931 7ff74b4f6dcc-7ff74b4f6e01 call 7ff74b4f64d8 call 7ff74b4f64e0 call 7ff74b4f6548 938 7ff74b4f6f3f-7ff74b4f6fad call 7ff74b4eb6b8 call 7ff74b4f23d0 931->938 939 7ff74b4f6e07-7ff74b4f6e12 call 7ff74b4f64e8 931->939 951 7ff74b4f6faf-7ff74b4f6fb6 938->951 952 7ff74b4f6fbb-7ff74b4f6fbe 938->952 939->938 944 7ff74b4f6e18-7ff74b4f6e23 call 7ff74b4f6518 939->944 944->938 950 7ff74b4f6e29-7ff74b4f6e4c call 7ff74b4eb700 GetTimeZoneInformation 944->950 964 7ff74b4f6f14-7ff74b4f6f3e call 7ff74b4f64d0 call 7ff74b4f64c0 call 7ff74b4f64c8 950->964 965 7ff74b4f6e52-7ff74b4f6e73 950->965 956 7ff74b4f704b-7ff74b4f704e 951->956 953 7ff74b4f6ff5-7ff74b4f7008 call 7ff74b4ee3ac 952->953 954 7ff74b4f6fc0 952->954 971 7ff74b4f7013-7ff74b4f702e call 7ff74b4f23d0 953->971 972 7ff74b4f700a 953->972 957 7ff74b4f6fc3 954->957 956->957 958 7ff74b4f7054-7ff74b4f705c call 7ff74b4f6b50 956->958 962 7ff74b4f6fc8-7ff74b4f6ff4 call 7ff74b4eb700 call 7ff74b4dc010 957->962 963 7ff74b4f6fc3 call 7ff74b4f6dcc 957->963 958->962 963->962 968 7ff74b4f6e75-7ff74b4f6e7b 965->968 969 7ff74b4f6e7e-7ff74b4f6e85 965->969 968->969 975 7ff74b4f6e99 969->975 976 7ff74b4f6e87-7ff74b4f6e8f 969->976 989 7ff74b4f7035-7ff74b4f7047 call 7ff74b4eb700 971->989 990 7ff74b4f7030-7ff74b4f7033 971->990 978 7ff74b4f700c-7ff74b4f7011 call 7ff74b4eb700 972->978 984 7ff74b4f6e9b-7ff74b4f6f0f call 7ff74b4fb580 * 4 call 7ff74b4f39ac call 7ff74b4f7064 * 2 975->984 976->975 982 7ff74b4f6e91-7ff74b4f6e97 976->982 978->954 982->984 984->964 989->956 990->978
                                                                                                                        APIs
                                                                                                                        • _get_daylight.LIBCMT ref: 00007FF74B4F6DFA
                                                                                                                          • Part of subcall function 00007FF74B4F6548: _invalid_parameter_noinfo.LIBCMT ref: 00007FF74B4F655C
                                                                                                                        • _get_daylight.LIBCMT ref: 00007FF74B4F6E0B
                                                                                                                          • Part of subcall function 00007FF74B4F64E8: _invalid_parameter_noinfo.LIBCMT ref: 00007FF74B4F64FC
                                                                                                                        • _get_daylight.LIBCMT ref: 00007FF74B4F6E1C
                                                                                                                          • Part of subcall function 00007FF74B4F6518: _invalid_parameter_noinfo.LIBCMT ref: 00007FF74B4F652C
                                                                                                                          • Part of subcall function 00007FF74B4EB700: RtlRestoreThreadPreferredUILanguages.NTDLL(?,?,?,00007FF74B4F3B72,?,?,?,00007FF74B4F3BAF,?,?,00000000,00007FF74B4F4075,?,?,00000000,00007FF74B4F3FA7), ref: 00007FF74B4EB716
                                                                                                                          • Part of subcall function 00007FF74B4EB700: GetLastError.KERNEL32(?,?,?,00007FF74B4F3B72,?,?,?,00007FF74B4F3BAF,?,?,00000000,00007FF74B4F4075,?,?,00000000,00007FF74B4F3FA7), ref: 00007FF74B4EB720
                                                                                                                        • GetTimeZoneInformation.KERNELBASE(?,?,?,?,?,?,?,?,?,00000000,?,00007FF74B4F705C), ref: 00007FF74B4F6E43
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _get_daylight_invalid_parameter_noinfo$ErrorInformationLanguagesLastPreferredRestoreThreadTimeZone
                                                                                                                        • String ID: W. Europe Standard Time$W. Europe Summer Time
                                                                                                                        • API String ID: 2248164782-690618308
                                                                                                                        • Opcode ID: 3ce9ff365909c35cfda0cd92fd9b5c2b6ab9c6a7c0cfccc6144e1dd1acbf6dd4
                                                                                                                        • Instruction ID: 2e37f00b9069fb7e92efa7b852128137edc76d1ad942e09cea6a861830cfb285
                                                                                                                        • Opcode Fuzzy Hash: 3ce9ff365909c35cfda0cd92fd9b5c2b6ab9c6a7c0cfccc6144e1dd1acbf6dd4
                                                                                                                        • Instruction Fuzzy Hash: E8516B22E1C652C6E760FF2DE8815A9E760BB88784FC44135EA5D43AA6DF3CF840C760
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D9F3B Relevance: 4.1, Strings: 3, Instructions: 397COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: $header crc mismatch$unknown header flags set
                                                                                                                        • API String ID: 0-1127688429
                                                                                                                        • Opcode ID: a8b055446104684f1ad95e328151202d31fdc591d47a14639da6131c49358b20
                                                                                                                        • Instruction ID: 8ceaff8efd215888de7bfd6111562caed4dbe2c2adf5eb75b8adeaf24ef73563
                                                                                                                        • Opcode Fuzzy Hash: a8b055446104684f1ad95e328151202d31fdc591d47a14639da6131c49358b20
                                                                                                                        • Instruction Fuzzy Hash: 60F18062A1C3D58AEBD5BF1D8088A3EBAADEF84744F854538DB69463E0CB38D941C750
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D8D00 Relevance: 3.0, APIs: 2, Instructions: 29COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Find$CloseFileFirst
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2295610775-0
                                                                                                                        • Opcode ID: ecdf086f063d1ff4b022191a002e9e17b8509f6d6c47db3a09a7631b022981ea
                                                                                                                        • Instruction ID: 3569e005fe868e43f50cc459d3349591fe24258632361b65cdec0f79f6c71358
                                                                                                                        • Opcode Fuzzy Hash: ecdf086f063d1ff4b022191a002e9e17b8509f6d6c47db3a09a7631b022981ea
                                                                                                                        • Instruction Fuzzy Hash: CDF08122A1C685C6E7A0AF6CA489776F390EB44724F844635D67D066E5DF3CE8188A10
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D9D9B Relevance: 2.7, Strings: 2, Instructions: 218COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: incorrect header check$invalid window size
                                                                                                                        • API String ID: 0-900081337
                                                                                                                        • Opcode ID: 7b159ed6ab11f424a85810e34fe73a423a8b15e185d016247a9cbb34ea0f7710
                                                                                                                        • Instruction ID: b6ed85226647abbde6dae09d3cb61b7e67f764b22d1e64aeb794fcec6a312834
                                                                                                                        • Opcode Fuzzy Hash: 7b159ed6ab11f424a85810e34fe73a423a8b15e185d016247a9cbb34ea0f7710
                                                                                                                        • Instruction Fuzzy Hash: 5091A372A1C2D5C7E7E4AA1CC448A3E7AADFB44354FD14139DA5A867E0CB38E940CB10
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D1700 Relevance: 24.6, APIs: 1, Strings: 13, Instructions: 148COMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 0 7ff74b4d1700-7ff74b4d1714 1 7ff74b4d1716-7ff74b4d172d call 7ff74b4d2b10 0->1 2 7ff74b4d172e-7ff74b4d1732 0->2 4 7ff74b4d1734-7ff74b4d173d call 7ff74b4d12a0 2->4 5 7ff74b4d1758-7ff74b4d177b call 7ff74b4d7e20 2->5 13 7ff74b4d174f-7ff74b4d1757 4->13 14 7ff74b4d173f-7ff74b4d174a call 7ff74b4d2b10 4->14 11 7ff74b4d177d-7ff74b4d17a8 call 7ff74b4d2870 5->11 12 7ff74b4d17a9-7ff74b4d17c4 call 7ff74b4d4060 5->12 20 7ff74b4d17c6-7ff74b4d17d9 call 7ff74b4d2b10 12->20 21 7ff74b4d17de-7ff74b4d17f1 call 7ff74b4e1004 12->21 14->13 28 7ff74b4d191f-7ff74b4d1922 call 7ff74b4e097c 20->28 26 7ff74b4d1813-7ff74b4d1817 21->26 27 7ff74b4d17f3-7ff74b4d180e call 7ff74b4d2870 21->27 31 7ff74b4d1831-7ff74b4d1851 call 7ff74b4e5780 26->31 32 7ff74b4d1819-7ff74b4d1825 call 7ff74b4d1050 26->32 37 7ff74b4d1917-7ff74b4d191a call 7ff74b4e097c 27->37 34 7ff74b4d1927-7ff74b4d193e 28->34 41 7ff74b4d1853-7ff74b4d186d call 7ff74b4d2870 31->41 42 7ff74b4d1872-7ff74b4d1878 31->42 38 7ff74b4d182a-7ff74b4d182c 32->38 37->28 38->37 50 7ff74b4d190d-7ff74b4d1912 41->50 44 7ff74b4d1905-7ff74b4d1908 call 7ff74b4e576c 42->44 45 7ff74b4d187e-7ff74b4d1887 42->45 44->50 48 7ff74b4d1890-7ff74b4d18b2 call 7ff74b4e0ccc 45->48 52 7ff74b4d18b4-7ff74b4d18cc call 7ff74b4e140c 48->52 53 7ff74b4d18e5-7ff74b4d18ec 48->53 50->37 58 7ff74b4d18d5-7ff74b4d18e3 52->58 59 7ff74b4d18ce-7ff74b4d18d1 52->59 55 7ff74b4d18f3-7ff74b4d18fb call 7ff74b4d2870 53->55 62 7ff74b4d1900 55->62 58->55 59->48 61 7ff74b4d18d3 59->61 61->62 62->44
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message
                                                                                                                        • String ID: Failed to create symbolic link %s!$Failed to extract %s: failed to allocate temporary buffer!$Failed to extract %s: failed to open archive file!$Failed to extract %s: failed to open target file!$Failed to extract %s: failed to read data chunk!$Failed to extract %s: failed to seek to the entry's data!$Failed to extract %s: failed to write data chunk!$fopen$fread$fseek$fwrite$malloc$pyi_arch_extract2fs was called before temporary directory was initialized!
                                                                                                                        • API String ID: 2030045667-3833288071
                                                                                                                        • Opcode ID: 391ef704a470d490a9730d5675e595a39fb50dcd410d7f892bfb97db90a0c0f9
                                                                                                                        • Instruction ID: 0dd5c0e5299f2b95f7118a3f81f56b252c482eca847b40f337b3c41117fbbd3f
                                                                                                                        • Opcode Fuzzy Hash: 391ef704a470d490a9730d5675e595a39fb50dcd410d7f892bfb97db90a0c0f9
                                                                                                                        • Instruction Fuzzy Hash: 1B518C61B0C642D2EE50BB1EE4402A9E3A5AF45BD4FC44531EE6D47AB6DE3CED58C320
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D1A90 Relevance: 19.4, APIs: 2, Strings: 9, Instructions: 135COMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _fread_nolock$Message
                                                                                                                        • String ID: Could not allocate buffer for TOC!$Could not read full TOC!$Error on file.$Failed to read cookie!$Failed to seek to cookie position!$MEI$fread$fseek$malloc
                                                                                                                        • API String ID: 677216364-1384898525
                                                                                                                        • Opcode ID: bdfb6eb61db2f87dea596110e3036d63c007e990928189020b1e4aa265b8b04a
                                                                                                                        • Instruction ID: 9d2d9416269dcbf551825a7624362366d2a773bc6608e74dd1f69acd73a52d2c
                                                                                                                        • Opcode Fuzzy Hash: bdfb6eb61db2f87dea596110e3036d63c007e990928189020b1e4aa265b8b04a
                                                                                                                        • Instruction Fuzzy Hash: A7518971A0C642C6EB54FF2DE490178B3A4EB48B84BD18536DA1D87BB6DE2CEC50C724
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D8290 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 90processsynchronizationCOMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Process_invalid_parameter_noinfo$ByteCharCodeCommandConsoleCreateCtrlExitHandlerInfoLineMultiObjectSingleStartupWaitWide
                                                                                                                        • String ID: CreateProcessW$Error creating child process!
                                                                                                                        • API String ID: 2895956056-3524285272
                                                                                                                        • Opcode ID: b7abaf37a347f063a3628d3e0586489636cc93df3d8b7db5f5a9dd5ff1266243
                                                                                                                        • Instruction ID: 616e9261732f466fe9971a26f2e08cc432cc1f75ef72051d11f339bdabf44fcf
                                                                                                                        • Opcode Fuzzy Hash: b7abaf37a347f063a3628d3e0586489636cc93df3d8b7db5f5a9dd5ff1266243
                                                                                                                        • Instruction Fuzzy Hash: 7E412F32A0C782C1EA60BB6CE5552AAE3A4FF94364F900735E6AD43AE5DF7CD444CB10
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D1050 Relevance: 12.4, APIs: 1, Strings: 6, Instructions: 154COMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 511 7ff74b4d1050-7ff74b4d10ab call 7ff74b4db840 514 7ff74b4d10d3-7ff74b4d10eb call 7ff74b4e5780 511->514 515 7ff74b4d10ad-7ff74b4d10d2 call 7ff74b4d2b10 511->515 520 7ff74b4d10ed-7ff74b4d1104 call 7ff74b4d2870 514->520 521 7ff74b4d1109-7ff74b4d1119 call 7ff74b4e5780 514->521 528 7ff74b4d1264-7ff74b4d1279 call 7ff74b4db520 call 7ff74b4e576c * 2 520->528 526 7ff74b4d111b-7ff74b4d1132 call 7ff74b4d2870 521->526 527 7ff74b4d1137-7ff74b4d1149 521->527 526->528 530 7ff74b4d1150-7ff74b4d1175 call 7ff74b4e0ccc 527->530 543 7ff74b4d127e-7ff74b4d1298 528->543 537 7ff74b4d117b-7ff74b4d1185 call 7ff74b4e0a40 530->537 538 7ff74b4d125c 530->538 537->538 544 7ff74b4d118b-7ff74b4d1197 537->544 538->528 545 7ff74b4d11a0-7ff74b4d11c8 call 7ff74b4d9c80 544->545 548 7ff74b4d1241-7ff74b4d1257 call 7ff74b4d2b10 545->548 549 7ff74b4d11ca-7ff74b4d11cd 545->549 548->538 551 7ff74b4d11cf-7ff74b4d11d9 549->551 552 7ff74b4d123c 549->552 553 7ff74b4d1203-7ff74b4d1206 551->553 554 7ff74b4d11db-7ff74b4d11e8 call 7ff74b4e140c 551->554 552->548 556 7ff74b4d1208-7ff74b4d1216 call 7ff74b4faee0 553->556 557 7ff74b4d1219-7ff74b4d121e 553->557 558 7ff74b4d11ed-7ff74b4d11f0 554->558 556->557 557->545 560 7ff74b4d1220-7ff74b4d1223 557->560 561 7ff74b4d11f2-7ff74b4d11fc call 7ff74b4e0a40 558->561 562 7ff74b4d11fe-7ff74b4d1201 558->562 564 7ff74b4d1225-7ff74b4d1228 560->564 565 7ff74b4d1237-7ff74b4d123a 560->565 561->557 561->562 562->548 564->548 567 7ff74b4d122a-7ff74b4d1232 564->567 565->538 567->530
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message
                                                                                                                        • String ID: 1.3.1$Failed to extract %s: decompression resulted in return code %d!$Failed to extract %s: failed to allocate temporary input buffer!$Failed to extract %s: failed to allocate temporary output buffer!$Failed to extract %s: inflateInit() failed with return code %d!$malloc
                                                                                                                        • API String ID: 2030045667-2813020118
                                                                                                                        • Opcode ID: 57368da15b5c1fc757d8ebe29877bffe9caf0f5a44bcb4222e5bb84d470f2d44
                                                                                                                        • Instruction ID: a0f7afbd9d505fe1e02fe6c8f38e9bbed888bc2a84b160e9ba9b06f100f90661
                                                                                                                        • Opcode Fuzzy Hash: 57368da15b5c1fc757d8ebe29877bffe9caf0f5a44bcb4222e5bb84d470f2d44
                                                                                                                        • Instruction Fuzzy Hash: 3751F322A0D682C1EAA0BB5DE4403BAA295FF84794FC40135EE5D577A6EF3CED15C310
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EC80C Relevance: 10.8, APIs: 7, Instructions: 290COMMONLIBRARYCODE
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 818 7ff74b4ec80c-7ff74b4ec832 819 7ff74b4ec834-7ff74b4ec848 call 7ff74b4e5c94 call 7ff74b4e5cb4 818->819 820 7ff74b4ec84d-7ff74b4ec851 818->820 834 7ff74b4ecc3e 819->834 822 7ff74b4ecc27-7ff74b4ecc33 call 7ff74b4e5c94 call 7ff74b4e5cb4 820->822 823 7ff74b4ec857-7ff74b4ec85e 820->823 842 7ff74b4ecc39 call 7ff74b4eb698 822->842 823->822 825 7ff74b4ec864-7ff74b4ec892 823->825 825->822 828 7ff74b4ec898-7ff74b4ec89f 825->828 831 7ff74b4ec8a1-7ff74b4ec8b3 call 7ff74b4e5c94 call 7ff74b4e5cb4 828->831 832 7ff74b4ec8b8-7ff74b4ec8bb 828->832 831->842 837 7ff74b4ecc23-7ff74b4ecc25 832->837 838 7ff74b4ec8c1-7ff74b4ec8c7 832->838 840 7ff74b4ecc41-7ff74b4ecc58 834->840 837->840 838->837 839 7ff74b4ec8cd-7ff74b4ec8d0 838->839 839->831 843 7ff74b4ec8d2-7ff74b4ec8f7 839->843 842->834 846 7ff74b4ec8f9-7ff74b4ec8fb 843->846 847 7ff74b4ec92a-7ff74b4ec931 843->847 849 7ff74b4ec922-7ff74b4ec928 846->849 850 7ff74b4ec8fd-7ff74b4ec904 846->850 851 7ff74b4ec906-7ff74b4ec91d call 7ff74b4e5c94 call 7ff74b4e5cb4 call 7ff74b4eb698 847->851 852 7ff74b4ec933-7ff74b4ec95b call 7ff74b4ee3ac call 7ff74b4eb700 * 2 847->852 854 7ff74b4ec9a8-7ff74b4ec9bf 849->854 850->849 850->851 883 7ff74b4ecab0 851->883 879 7ff74b4ec95d-7ff74b4ec973 call 7ff74b4e5cb4 call 7ff74b4e5c94 852->879 880 7ff74b4ec978-7ff74b4ec9a3 call 7ff74b4ed034 852->880 857 7ff74b4ec9c1-7ff74b4ec9c9 854->857 858 7ff74b4eca3a-7ff74b4eca44 call 7ff74b4f476c 854->858 857->858 863 7ff74b4ec9cb-7ff74b4ec9cd 857->863 871 7ff74b4ecace 858->871 872 7ff74b4eca4a-7ff74b4eca5f 858->872 863->858 867 7ff74b4ec9cf-7ff74b4ec9e5 863->867 867->858 868 7ff74b4ec9e7-7ff74b4ec9f3 867->868 868->858 873 7ff74b4ec9f5-7ff74b4ec9f7 868->873 875 7ff74b4ecad3-7ff74b4ecaf3 ReadFile 871->875 872->871 877 7ff74b4eca61-7ff74b4eca73 GetConsoleMode 872->877 873->858 878 7ff74b4ec9f9-7ff74b4eca11 873->878 881 7ff74b4ecbed-7ff74b4ecbf6 GetLastError 875->881 882 7ff74b4ecaf9-7ff74b4ecb01 875->882 877->871 884 7ff74b4eca75-7ff74b4eca7d 877->884 878->858 886 7ff74b4eca13-7ff74b4eca1f 878->886 879->883 880->854 891 7ff74b4ecc13-7ff74b4ecc16 881->891 892 7ff74b4ecbf8-7ff74b4ecc0e call 7ff74b4e5cb4 call 7ff74b4e5c94 881->892 882->881 888 7ff74b4ecb07 882->888 885 7ff74b4ecab3-7ff74b4ecabd call 7ff74b4eb700 883->885 884->875 890 7ff74b4eca7f-7ff74b4ecaa1 ReadConsoleW 884->890 885->840 886->858 895 7ff74b4eca21-7ff74b4eca23 886->895 899 7ff74b4ecb0e-7ff74b4ecb23 888->899 901 7ff74b4ecaa3 GetLastError 890->901 902 7ff74b4ecac2-7ff74b4ecacc 890->902 896 7ff74b4ecc1c-7ff74b4ecc1e 891->896 897 7ff74b4ecaa9-7ff74b4ecaab call 7ff74b4e5c28 891->897 892->883 895->858 905 7ff74b4eca25-7ff74b4eca35 895->905 896->885 897->883 899->885 907 7ff74b4ecb25-7ff74b4ecb30 899->907 901->897 902->899 905->858 911 7ff74b4ecb32-7ff74b4ecb4b call 7ff74b4ec424 907->911 912 7ff74b4ecb57-7ff74b4ecb5f 907->912 920 7ff74b4ecb50-7ff74b4ecb52 911->920 915 7ff74b4ecb61-7ff74b4ecb73 912->915 916 7ff74b4ecbdb-7ff74b4ecbe8 call 7ff74b4ec264 912->916 917 7ff74b4ecb75 915->917 918 7ff74b4ecbce-7ff74b4ecbd6 915->918 916->920 921 7ff74b4ecb7a-7ff74b4ecb81 917->921 918->885 920->885 923 7ff74b4ecb83-7ff74b4ecb87 921->923 924 7ff74b4ecbbd-7ff74b4ecbc8 921->924 925 7ff74b4ecba3 923->925 926 7ff74b4ecb89-7ff74b4ecb90 923->926 924->918 928 7ff74b4ecba9-7ff74b4ecbb9 925->928 926->925 927 7ff74b4ecb92-7ff74b4ecb96 926->927 927->925 929 7ff74b4ecb98-7ff74b4ecba1 927->929 928->921 930 7ff74b4ecbbb 928->930 929->928 930->918
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3215553584-0
                                                                                                                        • Opcode ID: 08457a1c6721881f4c11fed91b7cfb17c1058ae71b93dddd692bbf3e619047ea
                                                                                                                        • Instruction ID: d30ffd205d438f1fdf7e74a081b12bd44583d237074e1ecda0bc0ce56ced3b37
                                                                                                                        • Opcode Fuzzy Hash: 08457a1c6721881f4c11fed91b7cfb17c1058ae71b93dddd692bbf3e619047ea
                                                                                                                        • Instruction Fuzzy Hash: 1DC1D322A0C787D5E661BB9C94403BDBBA5FB80B81F954131DA8E077A2CE7CEC558360
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D8860 Relevance: 10.6, APIs: 7, Instructions: 63COMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Token$InformationProcess$CloseConvertCurrentErrorHandleLastOpenString
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 995526605-0
                                                                                                                        • Opcode ID: 0a78fddd52e4a4b47c0abd3b9ff92470e3f80b7b026c685fad37238cb9e723cb
                                                                                                                        • Instruction ID: 4c1c823f194a1a2a8e0a49763c0665d7f042912aebd3d68f22ba47d4826364fa
                                                                                                                        • Opcode Fuzzy Hash: 0a78fddd52e4a4b47c0abd3b9ff92470e3f80b7b026c685fad37238cb9e723cb
                                                                                                                        • Instruction Fuzzy Hash: 2521533160C642C6EB50BB9DE44063AE3A4EF857B4FD00235EAAD43AF5DF6CE8558710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D8B80 Relevance: 9.1, APIs: 2, Strings: 4, Instructions: 59COMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        APIs
                                                                                                                          • Part of subcall function 00007FF74B4D8860: GetCurrentProcess.KERNEL32 ref: 00007FF74B4D8880
                                                                                                                          • Part of subcall function 00007FF74B4D8860: OpenProcessToken.ADVAPI32 ref: 00007FF74B4D8891
                                                                                                                          • Part of subcall function 00007FF74B4D8860: GetTokenInformation.KERNELBASE ref: 00007FF74B4D88B6
                                                                                                                          • Part of subcall function 00007FF74B4D8860: GetLastError.KERNEL32 ref: 00007FF74B4D88C0
                                                                                                                          • Part of subcall function 00007FF74B4D8860: GetTokenInformation.KERNELBASE ref: 00007FF74B4D8900
                                                                                                                          • Part of subcall function 00007FF74B4D8860: ConvertSidToStringSidW.ADVAPI32 ref: 00007FF74B4D891C
                                                                                                                          • Part of subcall function 00007FF74B4D8860: CloseHandle.KERNEL32 ref: 00007FF74B4D8934
                                                                                                                        • LocalFree.KERNEL32(00000000,00007FF74B4D3B4E), ref: 00007FF74B4D8C0C
                                                                                                                        • LocalFree.KERNEL32 ref: 00007FF74B4D8C15
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Token$FreeInformationLocalProcess$CloseConvertCurrentErrorHandleLastOpenString
                                                                                                                        • String ID: D:(A;;FA;;;%s)$D:(A;;FA;;;%s)(A;;FA;;;%s)$S-1-3-4$Security descriptor string length exceeds PATH_MAX!
                                                                                                                        • API String ID: 6828938-1817031585
                                                                                                                        • Opcode ID: 8ff8ea2c17bd8fbf586603b6c91de9233eb7c00b5d3dcbaf8731662f4bda8ceb
                                                                                                                        • Instruction ID: 780da0b2a755565c298b3c3b07b622d9918ba5834058d0cd698b07a56568f969
                                                                                                                        • Opcode Fuzzy Hash: 8ff8ea2c17bd8fbf586603b6c91de9233eb7c00b5d3dcbaf8731662f4bda8ceb
                                                                                                                        • Instruction Fuzzy Hash: 49213C31A1C786D1FA90BB2CE4056F9E369EF44790FC40932E96D936A6DE3CED058660
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D3F00 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 55COMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        APIs
                                                                                                                        • GetModuleFileNameW.KERNEL32(?,00007FF74B4D39CA), ref: 00007FF74B4D3F34
                                                                                                                          • Part of subcall function 00007FF74B4D29C0: GetLastError.KERNEL32(00000000,00000000,00000000,00007FF74B4D8AF2,?,?,?,?,?,?,?,?,?,?,?,00007FF74B4D101D), ref: 00007FF74B4D29F4
                                                                                                                          • Part of subcall function 00007FF74B4D29C0: MessageBoxW.USER32 ref: 00007FF74B4D2AD0
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ErrorFileLastMessageModuleName
                                                                                                                        • String ID: Failed to convert executable path to UTF-8.$Failed to get executable path.$GetModuleFileNameW
                                                                                                                        • API String ID: 2581892565-1977442011
                                                                                                                        • Opcode ID: 7ef307d93855c796adb502a26685baad3249a75f128fd8c4618b636fbd62cd4f
                                                                                                                        • Instruction ID: 3fcaff7917ae70e79b06e1968a17d6a6670f2a618832b8b9f2b182a83040e023
                                                                                                                        • Opcode Fuzzy Hash: 7ef307d93855c796adb502a26685baad3249a75f128fd8c4618b636fbd62cd4f
                                                                                                                        • Instruction Fuzzy Hash: B7117521B1D547C1FAA1B76DE8513F5D268AF487C4FC0043AE85E876BAEE1CE9458730
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EDD10 Relevance: 6.2, APIs: 4, Instructions: 218COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • GetConsoleMode.KERNEL32(?,?,?,?,?,?,?,?,?,00000000,?,?,00000000,00000000,00007FF74B4EDCFB), ref: 00007FF74B4EDE2C
                                                                                                                        • GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,00000000,?,?,00000000,00000000,00007FF74B4EDCFB), ref: 00007FF74B4EDEB7
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ConsoleErrorLastMode
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 953036326-0
                                                                                                                        • Opcode ID: e5bc4118b78d7803f2849d3b40dbb6165d02ed41efd1a206ffcb3739746c0941
                                                                                                                        • Instruction ID: 91762de0c55f03e98d5f771933633465f7809b02d6afe24dbaa33d0fff7bfd04
                                                                                                                        • Opcode Fuzzy Hash: e5bc4118b78d7803f2849d3b40dbb6165d02ed41efd1a206ffcb3739746c0941
                                                                                                                        • Instruction Fuzzy Hash: 2991B322E0CA52D5F760FFAD844467DABA0AB54B88F944135DE0E576A5CF38E841D720
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F04DC Relevance: 6.2, APIs: 4, Instructions: 162COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _get_daylight$_isindst
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 4170891091-0
                                                                                                                        • Opcode ID: a806384fd3dbc637569f566945d79e9d0f9a49a7dde5cce1babac435a7d8ed95
                                                                                                                        • Instruction ID: feb12879f85ed9a2a36e7ac82034eaf35f7363a5410cc065daa47d3074416b7d
                                                                                                                        • Opcode Fuzzy Hash: a806384fd3dbc637569f566945d79e9d0f9a49a7dde5cce1babac435a7d8ed95
                                                                                                                        • Instruction Fuzzy Hash: 4651F372F09211CAFB24FF7C99516BCA6A1AB90359F904135EE1E53BF5DE38B8428610
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E6044 Relevance: 6.1, APIs: 4, Instructions: 119pipeCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: File$ErrorHandleInformationLastNamedPeekPipeType
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2780335769-0
                                                                                                                        • Opcode ID: bf9e299d8a19087a057b397dc8e4afdf64a098b67ef913149ee4b49067ca2483
                                                                                                                        • Instruction ID: 0b1cae5e3bfc7c63f5cb4d38589a18dd175eae99356d678c07f2436ea781a9b9
                                                                                                                        • Opcode Fuzzy Hash: bf9e299d8a19087a057b397dc8e4afdf64a098b67ef913149ee4b49067ca2483
                                                                                                                        • Instruction Fuzzy Hash: 61518E22E08641CAF750FFBCD8503BDB3B1AB44B98F508535EE09476AADF38E9448361
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E5EF0 Relevance: 6.1, APIs: 4, Instructions: 90fileCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CloseCreateFileHandle_invalid_parameter_noinfo
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1279662727-0
                                                                                                                        • Opcode ID: 83590a85ef91dfeaaf5391bcb7c84269641a6271a066e8b030d9dbe54c1e2ad9
                                                                                                                        • Instruction ID: 3bc44f03504190c85cc7f7bc71da00a4dd00e15a7c9cd8c4e89fc0222130cd94
                                                                                                                        • Opcode Fuzzy Hash: 83590a85ef91dfeaaf5391bcb7c84269641a6271a066e8b030d9dbe54c1e2ad9
                                                                                                                        • Instruction Fuzzy Hash: 25419122D1C782C3E754BBA89550379A360FF94764F509334EA9C07AE2DF7CA9E48760
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4DC3CC Relevance: 4.6, APIs: 3, Instructions: 94COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: __scrt_acquire_startup_lock__scrt_dllmain_crt_thread_attach__scrt_get_show_window_mode__scrt_release_startup_lock
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3251591375-0
                                                                                                                        • Opcode ID: 9d2a249925c3744b7bdec991b642967cea5aa1e4eae3f82ffa02bbb969e0fbb5
                                                                                                                        • Instruction ID: 58f3712aa717d908529fd00f39f4f6587726bf03da894dfb63730df6dc4bb829
                                                                                                                        • Opcode Fuzzy Hash: 9d2a249925c3744b7bdec991b642967cea5aa1e4eae3f82ffa02bbb969e0fbb5
                                                                                                                        • Instruction Fuzzy Hash: 56311C21E0C213C1FE94BB6CA4613B9E295AF81784FC55435E96E4B2F7DE2CBC058671
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D8D80 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 20COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CreateDirectoryMessage
                                                                                                                        • String ID: Security descriptor is not initialized!
                                                                                                                        • API String ID: 73271072-986317556
                                                                                                                        • Opcode ID: cb4d7abd45f9f406bb8e9fa743bd3ea339ce9ab77a45f8f760c2574a3479da4c
                                                                                                                        • Instruction ID: 6083eb00837fe35d3d135acf68195774d7da4768d7deb8737a75384c52c2c3fe
                                                                                                                        • Opcode Fuzzy Hash: cb4d7abd45f9f406bb8e9fa743bd3ea339ce9ab77a45f8f760c2574a3479da4c
                                                                                                                        • Instruction Fuzzy Hash: 9AE06D71A5C746C2EA60BB2CE845269A390BBA1764FC00334E15C873F4DF3CDA198B10
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E0A6C Relevance: 3.2, APIs: 2, Instructions: 177COMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3215553584-0
                                                                                                                        • Opcode ID: cf177395047abfa4e851662a110b86e3e3c378c626585af56caf23d5c147307d
                                                                                                                        • Instruction ID: 43468f8a1de06ef1dc97399175a3bce0d057ee0e715a68c3c54636ff1f0a2c56
                                                                                                                        • Opcode Fuzzy Hash: cf177395047abfa4e851662a110b86e3e3c378c626585af56caf23d5c147307d
                                                                                                                        • Instruction Fuzzy Hash: 5251B561B0D645C6FA28BAFD940167AE291BB44BA8F944635DE7D07BE5CE3CEC018720
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EB910 Relevance: 3.1, APIs: 2, Instructions: 59COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • FindCloseChangeNotification.KERNELBASE(?,?,?,00007FF74B4EB78D,?,?,00000000,00007FF74B4EB842), ref: 00007FF74B4EB97E
                                                                                                                        • GetLastError.KERNEL32(?,?,?,00007FF74B4EB78D,?,?,00000000,00007FF74B4EB842), ref: 00007FF74B4EB988
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ChangeCloseErrorFindLastNotification
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1687624791-0
                                                                                                                        • Opcode ID: 3fd0f83af0628cda6e58ba1b17cfc613668cd8d43ebee099ac9aff2e4f27651a
                                                                                                                        • Instruction ID: 8de4f9a8640de93efbc73abbd8030b9ffc40575c8f2195a059ea840db3fd8f42
                                                                                                                        • Opcode Fuzzy Hash: 3fd0f83af0628cda6e58ba1b17cfc613668cd8d43ebee099ac9aff2e4f27651a
                                                                                                                        • Instruction Fuzzy Hash: 5621C651F0C643C1EE90B7AD95D0379D6915F84BA4F844335DA6E473F2CE6CAC458320
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4ECEE4 Relevance: 3.0, APIs: 2, Instructions: 46COMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ErrorFileLastPointer
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2976181284-0
                                                                                                                        • Opcode ID: 5a688e03e61d2ba522e05303caa220c229835d3c67e189c94220df843fa187e3
                                                                                                                        • Instruction ID: 884562a0c0e62927ca6ac3aef313e7f07a63cfe46187ff2ebc47a6a6cdfa64d2
                                                                                                                        • Opcode Fuzzy Hash: 5a688e03e61d2ba522e05303caa220c229835d3c67e189c94220df843fa187e3
                                                                                                                        • Instruction Fuzzy Hash: B511BF61A1CA82C1DA10BB6DA404169F361AB45BF4F984331EA7D0B7EACF3CD8548700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E61EC Relevance: 3.0, APIs: 2, Instructions: 40timeCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • FileTimeToSystemTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00007FF74B4E6101), ref: 00007FF74B4E621F
                                                                                                                        • SystemTimeToTzSpecificLocalTime.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00007FF74B4E6101), ref: 00007FF74B4E6235
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Time$System$FileLocalSpecific
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1707611234-0
                                                                                                                        • Opcode ID: 94d9743ddc59f1ec6d0c8066f19f46560215df41a9b86dc953b2c7251607b198
                                                                                                                        • Instruction ID: 4eb6d8c9ac6c9734a9bf7464994562c6895f879db261271d6105e13094040d44
                                                                                                                        • Opcode Fuzzy Hash: 94d9743ddc59f1ec6d0c8066f19f46560215df41a9b86dc953b2c7251607b198
                                                                                                                        • Instruction Fuzzy Hash: E4114261A0C642C1EB94BB9DA41117AF7A0FB84761F900235E699819F9EF7CE854CB10
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EB700 Relevance: 3.0, APIs: 2, Instructions: 19threadCOMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • RtlRestoreThreadPreferredUILanguages.NTDLL(?,?,?,00007FF74B4F3B72,?,?,?,00007FF74B4F3BAF,?,?,00000000,00007FF74B4F4075,?,?,00000000,00007FF74B4F3FA7), ref: 00007FF74B4EB716
                                                                                                                        • GetLastError.KERNEL32(?,?,?,00007FF74B4F3B72,?,?,?,00007FF74B4F3BAF,?,?,00000000,00007FF74B4F4075,?,?,00000000,00007FF74B4F3FA7), ref: 00007FF74B4EB720
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ErrorLanguagesLastPreferredRestoreThread
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 588628887-0
                                                                                                                        • Opcode ID: c0904582055235206b637bb6fb630becad907d152bf6a94a3ba36ee294329771
                                                                                                                        • Instruction ID: 97726ee0d597a6e6cad727603087338d4e7baa40457cece492b22b4d05dfa573
                                                                                                                        • Opcode Fuzzy Hash: c0904582055235206b637bb6fb630becad907d152bf6a94a3ba36ee294329771
                                                                                                                        • Instruction Fuzzy Hash: DCE08C10F0D202C6FF187BFE98D457892918F88B50BC40430C90D4B372DE2CAC898230
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4ECC5C Relevance: 1.6, APIs: 1, Instructions: 112COMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3215553584-0
                                                                                                                        • Opcode ID: 23588c1d4a76148e9b0b46970dab15bc80394bd809d2a1daf00a983cf625f788
                                                                                                                        • Instruction ID: ab66efda1c7b9359c4d412d4032b650363e44fabb214e54d3f3b3899edb7e386
                                                                                                                        • Opcode Fuzzy Hash: 23588c1d4a76148e9b0b46970dab15bc80394bd809d2a1daf00a983cf625f788
                                                                                                                        • Instruction Fuzzy Hash: 0B41963290D642C7EA64BBADA540179F7A0EF56741F941131D69D436B2CF2DE802C761
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D84C0 Relevance: 1.6, APIs: 1, Instructions: 85COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _fread_nolock
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 840049012-0
                                                                                                                        • Opcode ID: d92c6acb6f3b0f52c818e59f370bd0956f845f18c54cfd1e51b175e85c024463
                                                                                                                        • Instruction ID: ed6a310c9c1c9ccc0689613c69b821659cd0f5b0b2d735e8520f7113b5199a09
                                                                                                                        • Opcode Fuzzy Hash: d92c6acb6f3b0f52c818e59f370bd0956f845f18c54cfd1e51b175e85c024463
                                                                                                                        • Instruction Fuzzy Hash: 65219E21B0D292C5EA90BB5E69147FAE795BF45BE4FC84430EE1D07792EE3CE841C610
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EC6EC Relevance: 1.6, APIs: 1, Instructions: 79COMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3215553584-0
                                                                                                                        • Opcode ID: 9d46e4dc1c7706e1baa247f93764384ede75e9bcf433252d370e5f4900f7c3d5
                                                                                                                        • Instruction ID: 6444f2f3dbe8cdcb8351e8d67e0457c38c91fbf46d7ef38eb36c67773f9734e2
                                                                                                                        • Opcode Fuzzy Hash: 9d46e4dc1c7706e1baa247f93764384ede75e9bcf433252d370e5f4900f7c3d5
                                                                                                                        • Instruction Fuzzy Hash: 82317E22E1C643C5F6557B9D8881378AA50AB40BA2F810635EA6D173F3CF7CAC418771
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E69E4 Relevance: 1.6, APIs: 1, Instructions: 55COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3215553584-0
                                                                                                                        • Opcode ID: a12511eb413a20500788068782fa49ddb1fe92b02a1e7189881bce5d81ea64e9
                                                                                                                        • Instruction ID: 7db8a28a134bea1a3d02abbecc85a23e4e2c2cb8c707d25bc03d410c6d2827cb
                                                                                                                        • Opcode Fuzzy Hash: a12511eb413a20500788068782fa49ddb1fe92b02a1e7189881bce5d81ea64e9
                                                                                                                        • Instruction Fuzzy Hash: 29116321E1D682C1EAA0BF9D945027DE2B0AF85B80F944431EA8C57BA6CF7CED108761
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F748C Relevance: 1.6, APIs: 1, Instructions: 54COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3215553584-0
                                                                                                                        • Opcode ID: 14b88cdde8f100e0c11df9c25968cfa6048feb9caeb9ba24198eb79990a08c61
                                                                                                                        • Instruction ID: 3ac77e9d4496196920e61f45f45282921cfb6669fa43ef3ffcc2562083498ede
                                                                                                                        • Opcode Fuzzy Hash: 14b88cdde8f100e0c11df9c25968cfa6048feb9caeb9ba24198eb79990a08c61
                                                                                                                        • Instruction Fuzzy Hash: 5721A732A1CA42C6DB61BF1CE440379B7A1EB84B94F944234E65D476E5DF3CEC008B10
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E0CEC Relevance: 1.5, APIs: 1, Instructions: 48COMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3215553584-0
                                                                                                                        • Opcode ID: cb4a28c9cfe68d4bf5caf65282be0dfe2d74942f75b7edef78e8fd4dc80d0569
                                                                                                                        • Instruction ID: a418caff0cbaac7d37e91ddcffbc84317e94537ea8b0d5895c79cca6fb2bdc76
                                                                                                                        • Opcode Fuzzy Hash: cb4a28c9cfe68d4bf5caf65282be0dfe2d74942f75b7edef78e8fd4dc80d0569
                                                                                                                        • Instruction Fuzzy Hash: 4E018821A0C741C1EA44FBAE5901579E7A5BF55FE0F884631DE6C57BEADE3CE9018310
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EF948 Relevance: 1.5, APIs: 1, Instructions: 36memoryCOMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • RtlAllocateHeap.NTDLL(?,?,00000000,00007FF74B4EC196,?,?,?,00007FF74B4EB35B,?,?,00000000,00007FF74B4EB5F6), ref: 00007FF74B4EF99D
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: AllocateHeap
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1279760036-0
                                                                                                                        • Opcode ID: 83da86fcac40c5efe6be46efa8cccb7ed61db28345aee0e9c2556edc7e0339ef
                                                                                                                        • Instruction ID: 1d0eb3194e68aac36047609f21217993cdf1e1712a60375fe206083cfafc1c1f
                                                                                                                        • Opcode Fuzzy Hash: 83da86fcac40c5efe6be46efa8cccb7ed61db28345aee0e9c2556edc7e0339ef
                                                                                                                        • Instruction Fuzzy Hash: 10F04915B0E602D1FE55B7ED94603B5E2A15F88B80FCC4430C98E8A3E6EE1CAC818232
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EE3AC Relevance: 1.5, APIs: 1, Instructions: 29memoryCOMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • RtlAllocateHeap.NTDLL(?,?,?,00007FF74B4E1514,?,?,?,00007FF74B4E2A26,?,?,?,?,?,00007FF74B4E4019), ref: 00007FF74B4EE3EA
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: AllocateHeap
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1279760036-0
                                                                                                                        • Opcode ID: d8b55510c5610d80ab4c44b86d687719a9e038cf882b555fd49ed5282eff217e
                                                                                                                        • Instruction ID: 010006c409cc39b49abec340357e98c0670c9341cda8a30380d19fd814535fdd
                                                                                                                        • Opcode Fuzzy Hash: d8b55510c5610d80ab4c44b86d687719a9e038cf882b555fd49ed5282eff217e
                                                                                                                        • Instruction Fuzzy Hash: 0FF05E10F5D247C5FE9476EE58506B9D1808F847A0F880A30D92E862E2DE5CED418231
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Non-executed Functions

                                                                                                                        Function 00007FF74B4D53F0 Relevance: 233.1, APIs: 44, Strings: 89, Instructions: 363libraryloaderCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: AddressProc
                                                                                                                        • String ID: Failed to get address for PyConfig_Clear$Failed to get address for PyConfig_InitIsolatedConfig$Failed to get address for PyConfig_Read$Failed to get address for PyConfig_SetBytesString$Failed to get address for PyConfig_SetString$Failed to get address for PyConfig_SetWideStringList$Failed to get address for PyErr_Clear$Failed to get address for PyErr_Fetch$Failed to get address for PyErr_NormalizeException$Failed to get address for PyErr_Occurred$Failed to get address for PyErr_Print$Failed to get address for PyErr_Restore$Failed to get address for PyEval_EvalCode$Failed to get address for PyImport_AddModule$Failed to get address for PyImport_ExecCodeModule$Failed to get address for PyImport_ImportModule$Failed to get address for PyList_Append$Failed to get address for PyMarshal_ReadObjectFromString$Failed to get address for PyMem_RawFree$Failed to get address for PyModule_GetDict$Failed to get address for PyObject_CallFunction$Failed to get address for PyObject_CallFunctionObjArgs$Failed to get address for PyObject_GetAttrString$Failed to get address for PyObject_SetAttrString$Failed to get address for PyObject_Str$Failed to get address for PyPreConfig_InitIsolatedConfig$Failed to get address for PyRun_SimpleStringFlags$Failed to get address for PyStatus_Exception$Failed to get address for PySys_GetObject$Failed to get address for PySys_SetObject$Failed to get address for PyUnicode_AsUTF8$Failed to get address for PyUnicode_Decode$Failed to get address for PyUnicode_DecodeFSDefault$Failed to get address for PyUnicode_FromFormat$Failed to get address for PyUnicode_FromString$Failed to get address for PyUnicode_Join$Failed to get address for PyUnicode_Replace$Failed to get address for Py_DecRef$Failed to get address for Py_DecodeLocale$Failed to get address for Py_ExitStatusException$Failed to get address for Py_Finalize$Failed to get address for Py_InitializeFromConfig$Failed to get address for Py_IsInitialized$Failed to get address for Py_PreInitialize$GetProcAddress$PyConfig_Clear$PyConfig_InitIsolatedConfig$PyConfig_Read$PyConfig_SetBytesString$PyConfig_SetString$PyConfig_SetWideStringList$PyErr_Clear$PyErr_Fetch$PyErr_NormalizeException$PyErr_Occurred$PyErr_Print$PyErr_Restore$PyEval_EvalCode$PyImport_AddModule$PyImport_ExecCodeModule$PyImport_ImportModule$PyList_Append$PyMarshal_ReadObjectFromString$PyMem_RawFree$PyModule_GetDict$PyObject_CallFunction$PyObject_CallFunctionObjArgs$PyObject_GetAttrString$PyObject_SetAttrString$PyObject_Str$PyPreConfig_InitIsolatedConfig$PyRun_SimpleStringFlags$PyStatus_Exception$PySys_GetObject$PySys_SetObject$PyUnicode_AsUTF8$PyUnicode_Decode$PyUnicode_DecodeFSDefault$PyUnicode_FromFormat$PyUnicode_FromString$PyUnicode_Join$PyUnicode_Replace$Py_DecRef$Py_DecodeLocale$Py_ExitStatusException$Py_Finalize$Py_InitializeFromConfig$Py_IsInitialized$Py_PreInitialize
                                                                                                                        • API String ID: 190572456-4266016200
                                                                                                                        • Opcode ID: 849092ee313d90182648ac5091f6841dd271f5938a0293141bcf3cafd9cdb4f6
                                                                                                                        • Instruction ID: 68d12a260c6dd92882cb9e606d1bf2a16231b58ddad9e97ccc715a9b5e5b3bb1
                                                                                                                        • Opcode Fuzzy Hash: 849092ee313d90182648ac5091f6841dd271f5938a0293141bcf3cafd9cdb4f6
                                                                                                                        • Instruction Fuzzy Hash: 6A12C065A0EB13D0FA95FB0CA894274E3A5AF08795BC45035D82E073B5FF7CBD58A221
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F4EFC Relevance: 24.0, APIs: 9, Strings: 4, Instructions: 1226COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo$memcpy_s$fegetenv
                                                                                                                        • String ID: 1#IND$1#INF$1#QNAN$1#SNAN
                                                                                                                        • API String ID: 808467561-2761157908
                                                                                                                        • Opcode ID: c804c22466df2b92b362f5d1d066b057dea08e8c29dc99d8cb90910c2247e431
                                                                                                                        • Instruction ID: 250a198c141983b25452f0b3a78e5c85f7307cdb75fa8482e5cf0e03154d7850
                                                                                                                        • Opcode Fuzzy Hash: c804c22466df2b92b362f5d1d066b057dea08e8c29dc99d8cb90910c2247e431
                                                                                                                        • Instruction Fuzzy Hash: 4FB2BF72E1C282CBE764AE6CD440BFDB7A1FB54388F905135DA0A57AA4DB38BD00CB54
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D8770 Relevance: 15.8, APIs: 3, Strings: 6, Instructions: 52windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • GetLastError.KERNEL32(00000000,00007FF74B4D2A3E,?,?,?,?,?,?,?,?,?,?,?,00007FF74B4D101D), ref: 00007FF74B4D8797
                                                                                                                        • FormatMessageW.KERNEL32 ref: 00007FF74B4D87C6
                                                                                                                        • WideCharToMultiByte.KERNEL32 ref: 00007FF74B4D881C
                                                                                                                          • Part of subcall function 00007FF74B4D29C0: GetLastError.KERNEL32(00000000,00000000,00000000,00007FF74B4D8AF2,?,?,?,?,?,?,?,?,?,?,?,00007FF74B4D101D), ref: 00007FF74B4D29F4
                                                                                                                          • Part of subcall function 00007FF74B4D29C0: MessageBoxW.USER32 ref: 00007FF74B4D2AD0
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ErrorLastMessage$ByteCharFormatMultiWide
                                                                                                                        • String ID: Failed to encode wchar_t as UTF-8.$FormatMessageW$No error messages generated.$PyInstaller: FormatMessageW failed.$PyInstaller: pyi_win32_utils_to_utf8 failed.$WideCharToMultiByte
                                                                                                                        • API String ID: 2920928814-2573406579
                                                                                                                        • Opcode ID: 71548051bea7547f5d5b972cb2661fdb12455c7e02de19cea235076eba1ea75f
                                                                                                                        • Instruction ID: 496260fa81d42af26ffafdfb5ee94b8182987f525fa1f9a7cc124a55a4f6b180
                                                                                                                        • Opcode Fuzzy Hash: 71548051bea7547f5d5b972cb2661fdb12455c7e02de19cea235076eba1ea75f
                                                                                                                        • Instruction Fuzzy Hash: B8213E61A1CA42C1FBA0BB1DE84427AE3A5BB88345FC40535E55D83AB5EF3CE9458720
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4DC8BC Relevance: 10.6, APIs: 7, Instructions: 71COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ExceptionFilterPresentUnhandled$CaptureContextDebuggerEntryFeatureFunctionLookupProcessorUnwindVirtual
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3140674995-0
                                                                                                                        • Opcode ID: 4f1605a870b3ab58307638b90f69401c730c876d9dfa7ce500e329c816792819
                                                                                                                        • Instruction ID: e722a454c3f3f4cfe9dcfeeb1b29dff31d34864b42e5274dec90cd51b98debd3
                                                                                                                        • Opcode Fuzzy Hash: 4f1605a870b3ab58307638b90f69401c730c876d9dfa7ce500e329c816792819
                                                                                                                        • Instruction Fuzzy Hash: 8E311272609B81C6EB60AF68E8407EDB365FB84744F84443ADA4D57BA5DF3CDA48C720
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EB3CC Relevance: 9.1, APIs: 6, Instructions: 83COMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ExceptionFilterUnhandled$CaptureContextDebuggerEntryFunctionLookupPresentUnwindVirtual
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1239891234-0
                                                                                                                        • Opcode ID: f3d77d60e417bce1f0fe908812719be64cab24703666754eed0168e01bd0a785
                                                                                                                        • Instruction ID: 0c985fb8c4aabe6b59e402ddfd25c26ce29cd4781e3310c3beeef6125ad0e10a
                                                                                                                        • Opcode Fuzzy Hash: f3d77d60e417bce1f0fe908812719be64cab24703666754eed0168e01bd0a785
                                                                                                                        • Instruction Fuzzy Hash: 4C313032618B81C5EB60EF6DE8402AAB3A4FB84758F940135EA9D43B65EF3CD555CB10
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F26C4 Relevance: 7.8, APIs: 5, Instructions: 282COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: FileFindFirst_invalid_parameter_noinfo
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2227656907-0
                                                                                                                        • Opcode ID: b3715d4618dde4abce6a703dfc2b0a62f6c41887aa9418885becb382e3094c85
                                                                                                                        • Instruction ID: a98346ddc09766c021b0fe480d607a39eceb0f8226f137d85af62dea9da66725
                                                                                                                        • Opcode Fuzzy Hash: b3715d4618dde4abce6a703dfc2b0a62f6c41887aa9418885becb382e3094c85
                                                                                                                        • Instruction Fuzzy Hash: 45B1C322B1C696C1EE61BB6D94105B9E3A1EB44BE4F844132FA9D07FA5DE3CFC418720
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4DC7A0 Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2933794660-0
                                                                                                                        • Opcode ID: 9121cd0992376079c28b7b15cfb2bb882a77f2b3c78bb4ce64e2c22522254d02
                                                                                                                        • Instruction ID: 539facc0efc5a65cbb431c84d9bcf64bf3004b33a775138e9e862a41b34d02b7
                                                                                                                        • Opcode Fuzzy Hash: 9121cd0992376079c28b7b15cfb2bb882a77f2b3c78bb4ce64e2c22522254d02
                                                                                                                        • Instruction Fuzzy Hash: 11111F22B18B05C9EB00AB68E8542B873A4F719758F841E31DA6D47765DF78E5548350
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F4A60 Relevance: 4.8, APIs: 3, Instructions: 340COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memcpy_s
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1502251526-0
                                                                                                                        • Opcode ID: 723df14fe8405c9280d13974b9e0b256372cd2939c4def8ecbac686ef57d643c
                                                                                                                        • Instruction ID: a04cd071353a35e292e25887ff8240f267ce5ec96bbc76bcffb8e27294de7a5b
                                                                                                                        • Opcode Fuzzy Hash: 723df14fe8405c9280d13974b9e0b256372cd2939c4def8ecbac686ef57d643c
                                                                                                                        • Instruction Fuzzy Hash: C0C1CF72B1C68687E724EF1EA04466AB7A1FB98B84F859134DB4A43794DE3DFD01CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4FA7D8 Relevance: 3.2, APIs: 2, Instructions: 227COMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ExceptionRaise_clrfp
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 15204871-0
                                                                                                                        • Opcode ID: 107d115b060fbd35a116a220a90c3f58689526778be32960ff8b0eb29206904d
                                                                                                                        • Instruction ID: 6eec720a9e6efe98f0b1874a5d590798671cd32270c2e17317eee0c2f055cf52
                                                                                                                        • Opcode Fuzzy Hash: 107d115b060fbd35a116a220a90c3f58689526778be32960ff8b0eb29206904d
                                                                                                                        • Instruction Fuzzy Hash: A3B13A73A08B89CAEB15DF2DC446368BBB0F744B88F558921DA5D837B4CB39E856C710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E42D4 Relevance: 2.8, Strings: 2, Instructions: 350COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: $
                                                                                                                        • API String ID: 0-227171996
                                                                                                                        • Opcode ID: a4155c6fffaecf52a824239c2b6f37dbc1b24f1087258a4a4fa2a9ab421e67c4
                                                                                                                        • Instruction ID: 4f1f2c97ff155ed2c7813c43553162394bdd99f02b8cfb00ead9b0f016d8e1ad
                                                                                                                        • Opcode Fuzzy Hash: a4155c6fffaecf52a824239c2b6f37dbc1b24f1087258a4a4fa2a9ab421e67c4
                                                                                                                        • Instruction Fuzzy Hash: B7E19D32A0C652C2EB68BEAD805017DA3A0FF45B98FA45235DA4E077A4DF2DED51C760
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EECA0 Relevance: 2.6, Strings: 2, Instructions: 144COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: e+000$gfff
                                                                                                                        • API String ID: 0-3030954782
                                                                                                                        • Opcode ID: b0eb00ec9cc72bcbd25ebaa9050c7cd18c6ed420f4824bc0d073d86035fcaeec
                                                                                                                        • Instruction ID: 07b0b45e68b06aa8371a94e35dd1a7010fed2f494c45030845cc1e6984ec587c
                                                                                                                        • Opcode Fuzzy Hash: b0eb00ec9cc72bcbd25ebaa9050c7cd18c6ed420f4824bc0d073d86035fcaeec
                                                                                                                        • Instruction Fuzzy Hash: 86518922B1C7C2C6E760AE7D9840769EB91E744B94F888631CB9C47AE6CF3DE9008710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F1720 Relevance: 2.0, APIs: 1, Instructions: 461COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CurrentFeaturePresentProcessProcessor
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1010374628-0
                                                                                                                        • Opcode ID: 967a9f5a0d56eea39198e9db7e561d43cac9ebc33bb174dd2e8addbc26d75f20
                                                                                                                        • Instruction ID: 1e305d5efab7561b368c0da56e33ee5e7c13b1923f702df110372f309f99ec39
                                                                                                                        • Opcode Fuzzy Hash: 967a9f5a0d56eea39198e9db7e561d43cac9ebc33bb174dd2e8addbc26d75f20
                                                                                                                        • Instruction Fuzzy Hash: 26029D21E0D68BC0FA55BB6E9450279E691AF41BA0FC44635DDAD477F2EE3CBC218720
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EE80C Relevance: 1.5, Strings: 1, Instructions: 254COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: gfffffff
                                                                                                                        • API String ID: 0-1523873471
                                                                                                                        • Opcode ID: ce984bed762576d5ac079d260fe98dbb5d2c0c9497d8241e3c95b971abe0b5e7
                                                                                                                        • Instruction ID: 23e86a5c7259199ecdc478ad4575d048f19fc0ed528e4445b85beb364e2fa8f6
                                                                                                                        • Opcode Fuzzy Hash: ce984bed762576d5ac079d260fe98dbb5d2c0c9497d8241e3c95b971abe0b5e7
                                                                                                                        • Instruction Fuzzy Hash: 53A15763B0C7C6C6EBA1EB6DA4007A9BB91EB50784F448531DE8D477A1EE3DEA01C711
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E8EF4 Relevance: 1.4, Strings: 1, Instructions: 177COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID: TMP
                                                                                                                        • API String ID: 3215553584-3125297090
                                                                                                                        • Opcode ID: 227a240b370b15b1266a0cc9d4416acc6519c25bf7b5095cb295345a6af5b08f
                                                                                                                        • Instruction ID: 52b0efac59183810cc3d486d8258b75867df4f7737659af7828a5b2ae668cc7a
                                                                                                                        • Opcode Fuzzy Hash: 227a240b370b15b1266a0cc9d4416acc6519c25bf7b5095cb295345a6af5b08f
                                                                                                                        • Instruction Fuzzy Hash: FF519C15B0C606C1FE64BBAE590117AD2926F94B94FC84535EE0D47BF6EE3CFC428220
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F42D0 Relevance: 1.3, APIs: 1, Instructions: 7memoryCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: HeapProcess
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 54951025-0
                                                                                                                        • Opcode ID: ed995d9d252c3e0c61107ed1ba5c48f1392176915e7fcf845d28b2722b2e2d45
                                                                                                                        • Instruction ID: 6b6df3f55e61f4747d7537104096deddf0415eb5552aed1d890a023414dbe9fa
                                                                                                                        • Opcode Fuzzy Hash: ed995d9d252c3e0c61107ed1ba5c48f1392176915e7fcf845d28b2722b2e2d45
                                                                                                                        • Instruction Fuzzy Hash: BDB09220E0BA02C6EA083B196C82228A2A47F88710FD44138C01D42331DE2C28B58B22
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E3ED0 Relevance: .3, Instructions: 327COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: ca9df69fd1c27fd416770dca946a20fccf44885df857cf64186a4c680355c85b
                                                                                                                        • Instruction ID: 169036acd9981f8fa64780a9c77bc1dfad8c6b85b5e410a04dc8d6c1add7b403
                                                                                                                        • Opcode Fuzzy Hash: ca9df69fd1c27fd416770dca946a20fccf44885df857cf64186a4c680355c85b
                                                                                                                        • Instruction Fuzzy Hash: 12D1BC32A0C642C6EB69FEAD855427DA7A0AF45B88F944235CE4D07BE5CF39EC41D360
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D92D0 Relevance: .3, Instructions: 287COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: a6d76246942c46f132312ebc4a4bc27c309f6729675ee6fb805fd22939f347a0
                                                                                                                        • Instruction ID: 3eacf789bd642ac81271126a79de8b370a7a17d5f0bb9712d5dbcf1c40bded4b
                                                                                                                        • Opcode Fuzzy Hash: a6d76246942c46f132312ebc4a4bc27c309f6729675ee6fb805fd22939f347a0
                                                                                                                        • Instruction Fuzzy Hash: F0C1A4722141E18BD2C9EB2DE46957E77A1F79834DBC4403AEB9B47B86C63CA414D720
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E3540 Relevance: .2, Instructions: 241COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: fa501f5897fa8170c1c3089a9165536d111e8d2735d862654f88cabfcab8bd87
                                                                                                                        • Instruction ID: 45b47345f66d086292d6871e5b85717a4184792ad3d433ffe497a1b1cd24cf43
                                                                                                                        • Opcode Fuzzy Hash: fa501f5897fa8170c1c3089a9165536d111e8d2735d862654f88cabfcab8bd87
                                                                                                                        • Instruction Fuzzy Hash: 92B13B72A0C685C5EB67AF7D805423CBBA0F745B48FA94235DA8E473A5CF29DC41C760
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EF320 Relevance: .2, Instructions: 198COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: dde3b387bb0edac5d3a7572aaf71fcdce3ba0ac9d1c4353072e234eccf42a557
                                                                                                                        • Instruction ID: 31f60cadf5b993c1317d4684f12b10dc552c9f2c3193755a5edb936ad318309a
                                                                                                                        • Opcode Fuzzy Hash: dde3b387bb0edac5d3a7572aaf71fcdce3ba0ac9d1c4353072e234eccf42a557
                                                                                                                        • Instruction Fuzzy Hash: B781D172A0C78186E774FF5DA48037AFA91FB95794F944235DA8D43BA9DE3DD8008B20
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F7550 Relevance: .2, Instructions: 183COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3215553584-0
                                                                                                                        • Opcode ID: 9914cb7746023329a97bf4181aa287deee78f55ee5d35b62d6e15dbc326fdfe6
                                                                                                                        • Instruction ID: 2610bcec89ee95c477ca0dfc50afd0709ed3041f5e58f1f6264f143e0b6fa947
                                                                                                                        • Opcode Fuzzy Hash: 9914cb7746023329a97bf4181aa287deee78f55ee5d35b62d6e15dbc326fdfe6
                                                                                                                        • Instruction Fuzzy Hash: 4061E622E2C282C6FB64BA6C8454779EAD1AF407B0F950639D66D476F5EE7DFC008720
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E2274 Relevance: .1, Instructions: 146COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: 3986d2e28db3ad4c814196551e744b7f12e089580c78501851383343d29f5119
                                                                                                                        • Instruction ID: 727f77f3f263e43dae5626ca6236e5f1f9d64cf8f2253ee7ca39ad748a7f2ad7
                                                                                                                        • Opcode Fuzzy Hash: 3986d2e28db3ad4c814196551e744b7f12e089580c78501851383343d29f5119
                                                                                                                        • Instruction Fuzzy Hash: 99518436A1C661C2EB24AB6DD044238B7A1FB55B58F644131CE4D17BB4CB3AEC43CB60
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E2A94 Relevance: .1, Instructions: 146COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: 431273df7c005eff8b086499786a7f8af66af839407972891033f6f8b32510fa
                                                                                                                        • Instruction ID: e9e34fa29b45304d7d7122d00efb3021da9812f06af7a91d89ebce73df3cc120
                                                                                                                        • Opcode Fuzzy Hash: 431273df7c005eff8b086499786a7f8af66af839407972891033f6f8b32510fa
                                                                                                                        • Instruction Fuzzy Hash: 15516036A1CA52C6EB24AF6DC044239B3A0EB54B68F644235CE4D17BB4CB3AEC43D750
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E2684 Relevance: .1, Instructions: 146COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: 0a7def00a57181835e1b5755574f212d41c435eb46ac8bcc91c00ca4f50edce3
                                                                                                                        • Instruction ID: d4be6577e8a2b00b5eb4bb804f28d36e8ad82a87cfc36b995d00fbf10b1be6bc
                                                                                                                        • Opcode Fuzzy Hash: 0a7def00a57181835e1b5755574f212d41c435eb46ac8bcc91c00ca4f50edce3
                                                                                                                        • Instruction Fuzzy Hash: 63517076A1C651C6EB24AB6DC040238B7A0FB55B68F644231CE8D57BB4CB3AEC43CB50
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E2480 Relevance: .1, Instructions: 145COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: 5b37b721d2520797c932084b48cf8e5c5b4bbfd8b4955e3aae9fbd8879836657
                                                                                                                        • Instruction ID: 9ffaf23572fe0c6ac61e5d06b9635832681a667d82a74c44737cd8ebe175a9ec
                                                                                                                        • Opcode Fuzzy Hash: 5b37b721d2520797c932084b48cf8e5c5b4bbfd8b4955e3aae9fbd8879836657
                                                                                                                        • Instruction Fuzzy Hash: D6518236A1C661C6EB24AB6DC150638B7A0EB84B58FA45131CE4D17BB4CF3AEC43C760
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E2070 Relevance: .1, Instructions: 145COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: e4a792dd5f357ba9ab053cb868b8428acf2d0115ad083e523ed5123ef832f09c
                                                                                                                        • Instruction ID: f8b1b38d7acd1b063af8b74f40260c43fa1bf9c08ebca3ac36435e2dca00eb20
                                                                                                                        • Opcode Fuzzy Hash: e4a792dd5f357ba9ab053cb868b8428acf2d0115ad083e523ed5123ef832f09c
                                                                                                                        • Instruction Fuzzy Hash: 2F51AF36A1C651C6EB24AF6CC440238A7A0EB44B58FA44131DF4C57BB8CB3AED43C750
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E2890 Relevance: .1, Instructions: 145COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: 56eab1984f79c1160248cb97b5e30aec2666dd062f10dae5dc3084fdbc1595d5
                                                                                                                        • Instruction ID: 86ca0f01ac7c9dbb90727ba1b48210be92a0d3df90cc0ffa20b98dfe9e76d16e
                                                                                                                        • Opcode Fuzzy Hash: 56eab1984f79c1160248cb97b5e30aec2666dd062f10dae5dc3084fdbc1595d5
                                                                                                                        • Instruction Fuzzy Hash: EE518F36B1C659C6EB35AB6DC040638B7B0EB45B58FA45131CA8C17BB8CB3AEC42C750
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E6750 Relevance: .1, Instructions: 138COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: dde3b7cfbcf26fc8d7513faefc9a59c4b8821272907dfbb35b6db6355186da00
                                                                                                                        • Instruction ID: 3be03fb93aa9772be77ca64ce2e5821b85550a6b8bbf58abfeb6f35e64b3bd49
                                                                                                                        • Opcode Fuzzy Hash: dde3b7cfbcf26fc8d7513faefc9a59c4b8821272907dfbb35b6db6355186da00
                                                                                                                        • Instruction Fuzzy Hash: 4041C762C0E64AC4EDD5B99C45046B4E680BF127A0FD852B4DDDA233F7CD2DAD86C231
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EAC50 Relevance: .1, Instructions: 126COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ErrorLanguagesLastPreferredRestoreThread
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 588628887-0
                                                                                                                        • Opcode ID: f111dc0bb75c4fd458f0a84966b8cb0fe478d08570652a426d7f95957c6d4c4f
                                                                                                                        • Instruction ID: 1979876e08a3b3cbcd76d8061df20810ebeff8ff013030dee0301361dfc6ec58
                                                                                                                        • Opcode Fuzzy Hash: f111dc0bb75c4fd458f0a84966b8cb0fe478d08570652a426d7f95957c6d4c4f
                                                                                                                        • Instruction Fuzzy Hash: 5B41B562718A55C1EF04EF6ED9545A9F3A1BB48FD0B499032DE1D97B64DF3CD8428300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E84BC Relevance: .1, Instructions: 98COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: 77368f0208c43b3c88c7b03a9b0f155b1349a5154adfc5d0143116aa417a25b9
                                                                                                                        • Instruction ID: 3ea0f044eeca904e31e348e9df9eec6f37292c342eba8fed5775682e727448aa
                                                                                                                        • Opcode Fuzzy Hash: 77368f0208c43b3c88c7b03a9b0f155b1349a5154adfc5d0143116aa417a25b9
                                                                                                                        • Instruction Fuzzy Hash: 2C31A432B0CB42C2EB54BFAD644017AA695AB84BE0F544239EA9D53BE5DF3CD8118714
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4FA620 Relevance: .0, Instructions: 32COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: c3f3f1020485e8a41a296fc930dbc96221e618d45f39aaa63d951921bdf06b5a
                                                                                                                        • Instruction ID: 7f09f83ad435526ef229dc6a92492c867d9c24a7478edf6d6818c6ce29fceac7
                                                                                                                        • Opcode Fuzzy Hash: c3f3f1020485e8a41a296fc930dbc96221e618d45f39aaa63d951921bdf06b5a
                                                                                                                        • Instruction Fuzzy Hash: 48F04471A182558ADB98AF2DB402629F7D0E748380B808539D59D87E14D63D94619F14
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4DCA9C Relevance: .0, Instructions: 2COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID:
                                                                                                                        • API String ID:
                                                                                                                        • Opcode ID: b04046989d87c8dc885ed01c2b3f2aaa9c0b13633c97905e42662c4d2108a614
                                                                                                                        • Instruction ID: d5cc90388b6ec592d266094b229cf14cf3a6c31fc16109360f0dc984471a291e
                                                                                                                        • Opcode Fuzzy Hash: b04046989d87c8dc885ed01c2b3f2aaa9c0b13633c97905e42662c4d2108a614
                                                                                                                        • Instruction Fuzzy Hash: 54A0016190C852D0E684BB0CA951130A225AB51308BC10032D02E525B29E3CA854D620
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D7100 Relevance: 164.8, APIs: 31, Strings: 63, Instructions: 263libraryloaderCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: AddressProc
                                                                                                                        • String ID: Failed to get address for Tcl_Alloc$Failed to get address for Tcl_ConditionFinalize$Failed to get address for Tcl_ConditionNotify$Failed to get address for Tcl_ConditionWait$Failed to get address for Tcl_CreateInterp$Failed to get address for Tcl_CreateObjCommand$Failed to get address for Tcl_CreateThread$Failed to get address for Tcl_DeleteInterp$Failed to get address for Tcl_DoOneEvent$Failed to get address for Tcl_EvalEx$Failed to get address for Tcl_EvalFile$Failed to get address for Tcl_EvalObjv$Failed to get address for Tcl_Finalize$Failed to get address for Tcl_FinalizeThread$Failed to get address for Tcl_FindExecutable$Failed to get address for Tcl_Free$Failed to get address for Tcl_GetCurrentThread$Failed to get address for Tcl_GetObjResult$Failed to get address for Tcl_GetString$Failed to get address for Tcl_GetVar2$Failed to get address for Tcl_Init$Failed to get address for Tcl_MutexLock$Failed to get address for Tcl_MutexUnlock$Failed to get address for Tcl_NewByteArrayObj$Failed to get address for Tcl_NewStringObj$Failed to get address for Tcl_SetVar2$Failed to get address for Tcl_SetVar2Ex$Failed to get address for Tcl_ThreadAlert$Failed to get address for Tcl_ThreadQueueEvent$Failed to get address for Tk_GetNumMainWindows$Failed to get address for Tk_Init$GetProcAddress$Tcl_Alloc$Tcl_ConditionFinalize$Tcl_ConditionNotify$Tcl_ConditionWait$Tcl_CreateInterp$Tcl_CreateObjCommand$Tcl_CreateThread$Tcl_DeleteInterp$Tcl_DoOneEvent$Tcl_EvalEx$Tcl_EvalFile$Tcl_EvalObjv$Tcl_Finalize$Tcl_FinalizeThread$Tcl_FindExecutable$Tcl_Free$Tcl_GetCurrentThread$Tcl_GetObjResult$Tcl_GetString$Tcl_GetVar2$Tcl_Init$Tcl_MutexLock$Tcl_MutexUnlock$Tcl_NewByteArrayObj$Tcl_NewStringObj$Tcl_SetVar2$Tcl_SetVar2Ex$Tcl_ThreadAlert$Tcl_ThreadQueueEvent$Tk_GetNumMainWindows$Tk_Init
                                                                                                                        • API String ID: 190572456-2208601799
                                                                                                                        • Opcode ID: e7edea845a9f5d5bc22b5b56991a1be592abbf01ed24a972618679d5ebca8c04
                                                                                                                        • Instruction ID: 0aba99c72c1ac2e3cc8fd02b9949bf81fb43fa81b8c2631c32d2574e26778e7e
                                                                                                                        • Opcode Fuzzy Hash: e7edea845a9f5d5bc22b5b56991a1be592abbf01ed24a972618679d5ebca8c04
                                                                                                                        • Instruction Fuzzy Hash: F2E1C224A5DB43D1FE99FB0CA890178E3AAAF04751BC45935D85E063B5EF7CBE588320
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D12A0 Relevance: 17.6, APIs: 1, Strings: 9, Instructions: 136COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message_fread_nolock
                                                                                                                        • String ID: %s%c%s$Failed to extract %s: failed to allocate data buffer (%u bytes)!$Failed to extract %s: failed to open archive file!$Failed to extract %s: failed to read data chunk!$Failed to extract %s: failed to seek to the entry's data!$\$fread$fseek$malloc
                                                                                                                        • API String ID: 3065259568-2316137593
                                                                                                                        • Opcode ID: 030351848d06f39e25b4e5589aa2c2e8daddcbe39f4571bc6dacffe52156824c
                                                                                                                        • Instruction ID: c31035d808f068b93d68839d26d4cd4e909c8a8be114cc4349bac5f33ee77ea8
                                                                                                                        • Opcode Fuzzy Hash: 030351848d06f39e25b4e5589aa2c2e8daddcbe39f4571bc6dacffe52156824c
                                                                                                                        • Instruction Fuzzy Hash: D6519161B0C693C5FAA0BB5DA4512BAE298EF447C4FC04131EE6D47BA6EE2CEC418310
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D23D0 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 120COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MoveWindow$ObjectSelect$DrawReleaseText
                                                                                                                        • String ID: P%
                                                                                                                        • API String ID: 2147705588-2959514604
                                                                                                                        • Opcode ID: 5b6577cad5280a8981d528861e2ae7c646745b175b361903b18278a3a03fe9da
                                                                                                                        • Instruction ID: 312b08cb8df200651818e7b3388d804eba243d47871e01816ae6d4d6db64ccfa
                                                                                                                        • Opcode Fuzzy Hash: 5b6577cad5280a8981d528861e2ae7c646745b175b361903b18278a3a03fe9da
                                                                                                                        • Instruction Fuzzy Hash: 2A510736608BA1C6D634AF2AE0182BAF7A1F798B65F404121EFDE43695DF3CD445DB20
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E6CE0 Relevance: 14.5, APIs: 3, Strings: 5, Instructions: 494COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID: -$:$f$p$p
                                                                                                                        • API String ID: 3215553584-2013873522
                                                                                                                        • Opcode ID: d41d3ed49e0df0b37e7753a00fe59ce424ede8ed11cb6504f669504b003b63f2
                                                                                                                        • Instruction ID: 8a93b3d159f264ee9726d2dcf1e8407d5a43f6c7cbae4ad72a8598e0529ab98d
                                                                                                                        • Opcode Fuzzy Hash: d41d3ed49e0df0b37e7753a00fe59ce424ede8ed11cb6504f669504b003b63f2
                                                                                                                        • Instruction Fuzzy Hash: 37126161A0C243C6FB64BE9CD0546B9F661FBA0764FD44135E699466E4DF3CED80CB20
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E18F8 Relevance: 14.5, APIs: 3, Strings: 5, Instructions: 475COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID: f$f$p$p$f
                                                                                                                        • API String ID: 3215553584-1325933183
                                                                                                                        • Opcode ID: d738f100ea2c585e80d131aafbe2a69e2e0acbd3b76fe5cf90b2b638373c2978
                                                                                                                        • Instruction ID: a990e747e0baebaf29191d9f21a94416bffb91886eb97de929dd89f175e0fb50
                                                                                                                        • Opcode Fuzzy Hash: d738f100ea2c585e80d131aafbe2a69e2e0acbd3b76fe5cf90b2b638373c2978
                                                                                                                        • Instruction Fuzzy Hash: 1712B662E4C143C6FB20BE9DD0546B9F661FB80754FC84131E69A46AE4DB7CECA0CB60
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D1590 Relevance: 14.1, APIs: 1, Strings: 7, Instructions: 99COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message
                                                                                                                        • String ID: Failed to extract %s: failed to allocate data buffer (%u bytes)!$Failed to extract %s: failed to open archive file!$Failed to extract %s: failed to read data chunk!$Failed to extract %s: failed to seek to the entry's data!$fread$fseek$malloc
                                                                                                                        • API String ID: 2030045667-3659356012
                                                                                                                        • Opcode ID: c6fe62611aae77ad3c8deca7026f8526394b55c0b8e66604355722863b925941
                                                                                                                        • Instruction ID: 5e4414314654f297533a678a10302d582c2f089c90438bc893ece09130a793c6
                                                                                                                        • Opcode Fuzzy Hash: c6fe62611aae77ad3c8deca7026f8526394b55c0b8e66604355722863b925941
                                                                                                                        • Instruction Fuzzy Hash: 09317D21B0C642C6FE60BB5EE4401BAE394AB04794FC84431DE5D07AA6EE3CE8558320
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4DF330 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 312COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: BlockFrameHandler3::Unwind$CatchExecutionHandlerIs_bad_exception_allowedSearchStatestd::bad_alloc::bad_alloc
                                                                                                                        • String ID: csm$csm$csm
                                                                                                                        • API String ID: 849930591-393685449
                                                                                                                        • Opcode ID: 0e2dbf0607b23b863384daf6af73d36f13a88af7ca772ada99fba3557138c94c
                                                                                                                        • Instruction ID: 394739e01f23665f6c3446c4ca5d06c0dd683b8ed5f8b460c919f8dcf2293b10
                                                                                                                        • Opcode Fuzzy Hash: 0e2dbf0607b23b863384daf6af73d36f13a88af7ca772ada99fba3557138c94c
                                                                                                                        • Instruction Fuzzy Hash: EBD18F32A0C741C6EBA0BB6CD4402ADB7A9FB45798FD00135DA9D57B66DF38E891C720
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EF9C0 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117libraryloaderCOMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • FreeLibrary.KERNEL32(?,?,?,00007FF74B4EFD5A,?,?,0000020132746A08,00007FF74B4EBB0B,?,?,?,00007FF74B4EBA02,?,?,?,00007FF74B4E698E), ref: 00007FF74B4EFB3C
                                                                                                                        • GetProcAddress.KERNEL32(?,?,?,00007FF74B4EFD5A,?,?,0000020132746A08,00007FF74B4EBB0B,?,?,?,00007FF74B4EBA02,?,?,?,00007FF74B4E698E), ref: 00007FF74B4EFB48
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: AddressFreeLibraryProc
                                                                                                                        • String ID: api-ms-$ext-ms-
                                                                                                                        • API String ID: 3013587201-537541572
                                                                                                                        • Opcode ID: 92e1c6cccb7ec25b4476ca22e51d2624e921c13e1215ab17a1d429f3080250c2
                                                                                                                        • Instruction ID: 8b7f0b60ac553bf6dead47614ffdcce41f629913f8839078af648287e405d3bc
                                                                                                                        • Opcode Fuzzy Hash: 92e1c6cccb7ec25b4476ca22e51d2624e921c13e1215ab17a1d429f3080250c2
                                                                                                                        • Instruction Fuzzy Hash: 6A41E031B1DA02C5FA16FB5EA8105B6F295BF49B90F894135DD1D8B7A4EE3CEC458320
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D89B0 Relevance: 12.4, APIs: 2, Strings: 5, Instructions: 104COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00007FF74B4D101D), ref: 00007FF74B4D8A47
                                                                                                                        • WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00007FF74B4D101D), ref: 00007FF74B4D8A9E
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ByteCharMultiWide
                                                                                                                        • String ID: Failed to encode wchar_t as UTF-8.$Failed to get UTF-8 buffer size.$Out of memory.$WideCharToMultiByte$win32_utils_to_utf8
                                                                                                                        • API String ID: 626452242-27947307
                                                                                                                        • Opcode ID: 400f0bdcbd62a4a5536486c2f7426be13d95d078f8c38135e0fc09a91e7db9c0
                                                                                                                        • Instruction ID: 01e1c1b6bdfa8a01c7a8fc0b7edb5a0a002c780200c943983a1e6107f179aacf
                                                                                                                        • Opcode Fuzzy Hash: 400f0bdcbd62a4a5536486c2f7426be13d95d078f8c38135e0fc09a91e7db9c0
                                                                                                                        • Instruction Fuzzy Hash: 56416E32A0CB82C2E660FB1DA84017AF7A5FB847A0F944535EA9D47BA5DF3CE8558710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D8EF0 Relevance: 12.3, APIs: 2, Strings: 5, Instructions: 63COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • WideCharToMultiByte.KERNEL32(?,00007FF74B4D39CA), ref: 00007FF74B4D8F31
                                                                                                                          • Part of subcall function 00007FF74B4D29C0: GetLastError.KERNEL32(00000000,00000000,00000000,00007FF74B4D8AF2,?,?,?,?,?,?,?,?,?,?,?,00007FF74B4D101D), ref: 00007FF74B4D29F4
                                                                                                                          • Part of subcall function 00007FF74B4D29C0: MessageBoxW.USER32 ref: 00007FF74B4D2AD0
                                                                                                                        • WideCharToMultiByte.KERNEL32(?,00007FF74B4D39CA), ref: 00007FF74B4D8FA5
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ByteCharMultiWide$ErrorLastMessage
                                                                                                                        • String ID: Failed to encode wchar_t as UTF-8.$Failed to get UTF-8 buffer size.$Out of memory.$WideCharToMultiByte$win32_utils_to_utf8
                                                                                                                        • API String ID: 3723044601-27947307
                                                                                                                        • Opcode ID: 4b8f80f614b111e99d886447c0377d3fa2ad0085ce50da6436ff273b72e0facb
                                                                                                                        • Instruction ID: d1bd6436f9e7ba6bf06132ee07ab50789c47f38922ab6fc119c93ea8bc0bc1eb
                                                                                                                        • Opcode Fuzzy Hash: 4b8f80f614b111e99d886447c0377d3fa2ad0085ce50da6436ff273b72e0facb
                                                                                                                        • Instruction Fuzzy Hash: 2A216B21B0CB46D5EB50BB1EE840179F366EB84B90FD44939DA5D43BA5EF3CEA518320
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D77B0 Relevance: 10.6, APIs: 1, Strings: 5, Instructions: 136COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo$_fread_nolock
                                                                                                                        • String ID: %s%c%s$ERROR: file already exists but should not: %s$PYINSTALLER_STRICT_UNPACK_MODE$WARNING: file already exists but should not: %s$\
                                                                                                                        • API String ID: 3231891352-3501660386
                                                                                                                        • Opcode ID: dd694ad439c35d913334a449757dc7393a4369ae598e4bb01d0977f4e6123465
                                                                                                                        • Instruction ID: 80eb3cf94bd0d24e7f50b098fb46404212250ae7de955620ec135c9afc41aecc
                                                                                                                        • Opcode Fuzzy Hash: dd694ad439c35d913334a449757dc7393a4369ae598e4bb01d0977f4e6123465
                                                                                                                        • Instruction Fuzzy Hash: 30516221B0D642C5FA91BB6D95513B9E2A99F85BC0FC44531E96D877F6EE2CED008330
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4DE3C8 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 88libraryloaderCOMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • LoadLibraryExW.KERNEL32(?,?,?,00007FF74B4DE67A,?,?,?,00007FF74B4DD5AC,?,?,?,00007FF74B4DD1A1), ref: 00007FF74B4DE44D
                                                                                                                        • GetLastError.KERNEL32(?,?,?,00007FF74B4DE67A,?,?,?,00007FF74B4DD5AC,?,?,?,00007FF74B4DD1A1), ref: 00007FF74B4DE45B
                                                                                                                        • LoadLibraryExW.KERNEL32(?,?,?,00007FF74B4DE67A,?,?,?,00007FF74B4DD5AC,?,?,?,00007FF74B4DD1A1), ref: 00007FF74B4DE485
                                                                                                                        • FreeLibrary.KERNEL32(?,?,?,00007FF74B4DE67A,?,?,?,00007FF74B4DD5AC,?,?,?,00007FF74B4DD1A1), ref: 00007FF74B4DE4F3
                                                                                                                        • GetProcAddress.KERNEL32(?,?,?,00007FF74B4DE67A,?,?,?,00007FF74B4DD5AC,?,?,?,00007FF74B4DD1A1), ref: 00007FF74B4DE4FF
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Library$Load$AddressErrorFreeLastProc
                                                                                                                        • String ID: api-ms-
                                                                                                                        • API String ID: 2559590344-2084034818
                                                                                                                        • Opcode ID: 5cef7e97cf10635b7adbe76254dad29ae16abfe91812266f9aed7336451ff82a
                                                                                                                        • Instruction ID: 75d0505fdeec26e84ae37c2f01bcd352e68f75ba2c223439dc7c4c5758e07165
                                                                                                                        • Opcode Fuzzy Hash: 5cef7e97cf10635b7adbe76254dad29ae16abfe91812266f9aed7336451ff82a
                                                                                                                        • Instruction Fuzzy Hash: E831C821B5E651D1EE91FB4EA8005B5A3D8BF45BA0FC90935DD2D477A0DF3CE9448320
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D7630 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 88COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                          • Part of subcall function 00007FF74B4D8DE0: MultiByteToWideChar.KERNEL32(?,?,?,?,?,00007FF74B4D2A9B), ref: 00007FF74B4D8E1A
                                                                                                                        • ExpandEnvironmentStringsW.KERNEL32(00000000,00007FF74B4D7BB1,00000000,?,00000000,00000000,?,00007FF74B4D153F), ref: 00007FF74B4D768F
                                                                                                                          • Part of subcall function 00007FF74B4D2B10: MessageBoxW.USER32 ref: 00007FF74B4D2BE5
                                                                                                                        Strings
                                                                                                                        • LOADER: Failed to convert runtime-tmpdir to a wide string., xrefs: 00007FF74B4D7666
                                                                                                                        • LOADER: Failed to obtain the absolute path of the runtime-tmpdir., xrefs: 00007FF74B4D76EA
                                                                                                                        • LOADER: Failed to expand environment variables in the runtime-tmpdir., xrefs: 00007FF74B4D76A3
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ByteCharEnvironmentExpandMessageMultiStringsWide
                                                                                                                        • String ID: LOADER: Failed to convert runtime-tmpdir to a wide string.$LOADER: Failed to expand environment variables in the runtime-tmpdir.$LOADER: Failed to obtain the absolute path of the runtime-tmpdir.
                                                                                                                        • API String ID: 1662231829-3498232454
                                                                                                                        • Opcode ID: 9bfcf0b62ea921097bc7abb589b6718567d9e6fafddd2668cb98e057143b44d0
                                                                                                                        • Instruction ID: bef89e7e1da2c3227d99b0766c8044d532c0771556de77ea8282fa9704f6f173
                                                                                                                        • Opcode Fuzzy Hash: 9bfcf0b62ea921097bc7abb589b6718567d9e6fafddd2668cb98e057143b44d0
                                                                                                                        • Instruction Fuzzy Hash: D9315311B1C742C0FAA1BB2DD9553BAD295AF987C0FC44836DA5E436E6EE2CF9048620
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D8DE0 Relevance: 10.6, APIs: 2, Strings: 5, Instructions: 68COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • MultiByteToWideChar.KERNEL32(?,?,?,?,?,00007FF74B4D2A9B), ref: 00007FF74B4D8E1A
                                                                                                                          • Part of subcall function 00007FF74B4D29C0: GetLastError.KERNEL32(00000000,00000000,00000000,00007FF74B4D8AF2,?,?,?,?,?,?,?,?,?,?,?,00007FF74B4D101D), ref: 00007FF74B4D29F4
                                                                                                                          • Part of subcall function 00007FF74B4D29C0: MessageBoxW.USER32 ref: 00007FF74B4D2AD0
                                                                                                                        • MultiByteToWideChar.KERNEL32(?,?,?,?,?,00007FF74B4D2A9B), ref: 00007FF74B4D8EA0
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ByteCharMultiWide$ErrorLastMessage
                                                                                                                        • String ID: Failed to decode wchar_t from UTF-8$Failed to get wchar_t buffer size.$MultiByteToWideChar$Out of memory.$win32_utils_from_utf8
                                                                                                                        • API String ID: 3723044601-876015163
                                                                                                                        • Opcode ID: 7f97f1849ec178b0ff8ea583991b98c80d8c160445cd7602e716bcd8403426a8
                                                                                                                        • Instruction ID: 74ff63f791bd95a78f0db675bf180314ad191337585db42ec5d2dfc05f8e7b57
                                                                                                                        • Opcode Fuzzy Hash: 7f97f1849ec178b0ff8ea583991b98c80d8c160445cd7602e716bcd8403426a8
                                                                                                                        • Instruction Fuzzy Hash: 08216F22B0CA42D1EB50FB2DF840169E7A2EB847D4FD84535DB5C83BB9EE2CE9518710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EBF00 Relevance: 10.6, APIs: 7, Instructions: 62COMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Value$ErrorLast
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2506987500-0
                                                                                                                        • Opcode ID: 9a184f94b66741ef5c7433d43b0777a0b512d60b632434412f67faa5ba58fff2
                                                                                                                        • Instruction ID: 4365e76f2fb73da5bf86e54d7d77896be41c4bb4bbbb7a6bb367405f602c721c
                                                                                                                        • Opcode Fuzzy Hash: 9a184f94b66741ef5c7433d43b0777a0b512d60b632434412f67faa5ba58fff2
                                                                                                                        • Instruction Fuzzy Hash: 79213E20B0D652C1FA59B3ADA691179E1625F447B0F944734E87E8BAF7DE2CBC414730
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F8D9C Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48fileCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ConsoleWrite$CloseCreateErrorFileHandleLast
                                                                                                                        • String ID: CONOUT$
                                                                                                                        • API String ID: 3230265001-3130406586
                                                                                                                        • Opcode ID: 56c47cfc8464f7969a639e7ce3d60490623cf8b9b00151c5924cedcf2ef07519
                                                                                                                        • Instruction ID: 1f893255402992a1e4fb3738400cb0a73fdde713ded358d82f633f9238bbeeb3
                                                                                                                        • Opcode Fuzzy Hash: 56c47cfc8464f7969a639e7ce3d60490623cf8b9b00151c5924cedcf2ef07519
                                                                                                                        • Instruction Fuzzy Hash: 20117C21B1CA41C6E350BB4AE854729F3A0BB98BE4F844234EA1D877A5DF3CE9588750
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EC078 Relevance: 9.1, APIs: 6, Instructions: 57COMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • GetLastError.KERNEL32(?,?,?,00007FF74B4E5CBD,?,?,?,?,00007FF74B4EF9AF,?,?,00000000,00007FF74B4EC196,?,?,?), ref: 00007FF74B4EC087
                                                                                                                        • FlsSetValue.KERNEL32(?,?,?,00007FF74B4E5CBD,?,?,?,?,00007FF74B4EF9AF,?,?,00000000,00007FF74B4EC196,?,?,?), ref: 00007FF74B4EC0BD
                                                                                                                        • FlsSetValue.KERNEL32(?,?,?,00007FF74B4E5CBD,?,?,?,?,00007FF74B4EF9AF,?,?,00000000,00007FF74B4EC196,?,?,?), ref: 00007FF74B4EC0EA
                                                                                                                        • FlsSetValue.KERNEL32(?,?,?,00007FF74B4E5CBD,?,?,?,?,00007FF74B4EF9AF,?,?,00000000,00007FF74B4EC196,?,?,?), ref: 00007FF74B4EC0FB
                                                                                                                        • FlsSetValue.KERNEL32(?,?,?,00007FF74B4E5CBD,?,?,?,?,00007FF74B4EF9AF,?,?,00000000,00007FF74B4EC196,?,?,?), ref: 00007FF74B4EC10C
                                                                                                                        • SetLastError.KERNEL32(?,?,?,00007FF74B4E5CBD,?,?,?,?,00007FF74B4EF9AF,?,?,00000000,00007FF74B4EC196,?,?,?), ref: 00007FF74B4EC127
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Value$ErrorLast
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2506987500-0
                                                                                                                        • Opcode ID: b158d8488936006be07e964f0b1db60fead8d03ae68160cd9e1440eb4d7939f5
                                                                                                                        • Instruction ID: 0e1a1c648308aabbc23a00731c9391144555cf972bf7635e8ac5602415107ca1
                                                                                                                        • Opcode Fuzzy Hash: b158d8488936006be07e964f0b1db60fead8d03ae68160cd9e1440eb4d7939f5
                                                                                                                        • Instruction Fuzzy Hash: 49112E20A0DA92C2FA58B7EDA691579E1629F447B0F944734E83E476F7EE2CBC414730
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D25E0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 81windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: DeleteDestroyDialogHandleIconIndirectModuleObjectParam
                                                                                                                        • String ID: Unhandled exception in script
                                                                                                                        • API String ID: 3081866767-2699770090
                                                                                                                        • Opcode ID: 035139a28c932b525dc7cac8fcdac5569ee169202821a797d5d04823a4addf63
                                                                                                                        • Instruction ID: 71dffcabde62bf492f04d6509d1b7d550af513d39f0916042f584437797f1cf7
                                                                                                                        • Opcode Fuzzy Hash: 035139a28c932b525dc7cac8fcdac5569ee169202821a797d5d04823a4addf63
                                                                                                                        • Instruction Fuzzy Hash: 08315F32A0C682C5EB20FB69E8552F9A3A4FF88784F840135EA4D47B66DF3CD905C710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D29C0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 69windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • GetLastError.KERNEL32(00000000,00000000,00000000,00007FF74B4D8AF2,?,?,?,?,?,?,?,?,?,?,?,00007FF74B4D101D), ref: 00007FF74B4D29F4
                                                                                                                          • Part of subcall function 00007FF74B4D8770: GetLastError.KERNEL32(00000000,00007FF74B4D2A3E,?,?,?,?,?,?,?,?,?,?,?,00007FF74B4D101D), ref: 00007FF74B4D8797
                                                                                                                          • Part of subcall function 00007FF74B4D8770: FormatMessageW.KERNEL32 ref: 00007FF74B4D87C6
                                                                                                                          • Part of subcall function 00007FF74B4D8DE0: MultiByteToWideChar.KERNEL32(?,?,?,?,?,00007FF74B4D2A9B), ref: 00007FF74B4D8E1A
                                                                                                                        • MessageBoxW.USER32 ref: 00007FF74B4D2AD0
                                                                                                                        • MessageBoxA.USER32 ref: 00007FF74B4D2AEC
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message$ErrorLast$ByteCharFormatMultiWide
                                                                                                                        • String ID: %s%s: %s$Fatal error detected
                                                                                                                        • API String ID: 2806210788-2410924014
                                                                                                                        • Opcode ID: e540fe95cbcf3c4f9a9ac735379b1c9e9ae60ded60aea03e9d716fb219e4d584
                                                                                                                        • Instruction ID: 14b4a8ac720452440c27c310cc58191747b5e1ab081406f46e61df87ebaab716
                                                                                                                        • Opcode Fuzzy Hash: e540fe95cbcf3c4f9a9ac735379b1c9e9ae60ded60aea03e9d716fb219e4d584
                                                                                                                        • Instruction Fuzzy Hash: D631327262C682D1E670BB18E4516EAA364FF847C4FC04136EA8D47AA9DF3CDA05CB50
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EA83C Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 27libraryloaderCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: AddressFreeHandleLibraryModuleProc
                                                                                                                        • String ID: CorExitProcess$mscoree.dll
                                                                                                                        • API String ID: 4061214504-1276376045
                                                                                                                        • Opcode ID: 2230a043baf354bfbc53885d3c0454218b923bdff90d2529a0827c645eda448d
                                                                                                                        • Instruction ID: 84e14c0f2c7d484136337a335b80d8273b3dc98717b39a85ec3b4e292ffec50d
                                                                                                                        • Opcode Fuzzy Hash: 2230a043baf354bfbc53885d3c0454218b923bdff90d2529a0827c645eda448d
                                                                                                                        • Instruction Fuzzy Hash: D9F04F61A0DA02C1FE14BB6CA445379E360FF49761F940635D66D462F5DF2DE84AC720
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4FA420 Relevance: 7.6, APIs: 5, Instructions: 56COMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _set_statfp
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1156100317-0
                                                                                                                        • Opcode ID: a62d4fcbb0970871e45180a1f834c32a3c4d190302dd8db61346826940fa499d
                                                                                                                        • Instruction ID: b7b0713928e1d0fe3a37c5fbd6fb7d3487e776245052f968fa0d76e91533f560
                                                                                                                        • Opcode Fuzzy Hash: a62d4fcbb0970871e45180a1f834c32a3c4d190302dd8db61346826940fa499d
                                                                                                                        • Instruction Fuzzy Hash: 86115126E1CA23C1FA54356CE44E375E161EF553B0F980635EA6E876F6CE2CBC434126
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EC140 Relevance: 7.6, APIs: 5, Instructions: 54COMMONLIBRARYCODE
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • FlsGetValue.KERNEL32(?,?,?,00007FF74B4EB35B,?,?,00000000,00007FF74B4EB5F6,?,?,?,?,?,00007FF74B4E38BC), ref: 00007FF74B4EC15F
                                                                                                                        • FlsSetValue.KERNEL32(?,?,?,00007FF74B4EB35B,?,?,00000000,00007FF74B4EB5F6,?,?,?,?,?,00007FF74B4E38BC), ref: 00007FF74B4EC17E
                                                                                                                        • FlsSetValue.KERNEL32(?,?,?,00007FF74B4EB35B,?,?,00000000,00007FF74B4EB5F6,?,?,?,?,?,00007FF74B4E38BC), ref: 00007FF74B4EC1A6
                                                                                                                        • FlsSetValue.KERNEL32(?,?,?,00007FF74B4EB35B,?,?,00000000,00007FF74B4EB5F6,?,?,?,?,?,00007FF74B4E38BC), ref: 00007FF74B4EC1B7
                                                                                                                        • FlsSetValue.KERNEL32(?,?,?,00007FF74B4EB35B,?,?,00000000,00007FF74B4EB5F6,?,?,?,?,?,00007FF74B4E38BC), ref: 00007FF74B4EC1C8
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Value
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3702945584-0
                                                                                                                        • Opcode ID: 566b247aeba71239eb846208f34c410a1876c8b9d03647f9665540b7994d74ea
                                                                                                                        • Instruction ID: d29c0e6cbb33c3d2a0b83257f0f3c2b655c3aeaed49b59c3dc1e6aa2c4e6f5a4
                                                                                                                        • Opcode Fuzzy Hash: 566b247aeba71239eb846208f34c410a1876c8b9d03647f9665540b7994d74ea
                                                                                                                        • Instruction Fuzzy Hash: 61111C20B0CA42C1FA58B7ADA991579E1625F457B0F984335E87E866F7DE2CAD018A30
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4EBFD4 Relevance: 7.6, APIs: 5, Instructions: 50COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Value
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3702945584-0
                                                                                                                        • Opcode ID: 8ecb003609919be8b2fae86cc55e133c24d753d798ecdc1b32609cb4de23c298
                                                                                                                        • Instruction ID: c1461ec47657c6bedd3f629185864b6bd5cc232472127528b8cd0a3d3978dfa0
                                                                                                                        • Opcode Fuzzy Hash: 8ecb003609919be8b2fae86cc55e133c24d753d798ecdc1b32609cb4de23c298
                                                                                                                        • Instruction Fuzzy Hash: 3111E510A0C647C1FA69B2ED94916B9E1624F45775F984738D83E4A2F3ED2CBC014270
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E69F0 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 242COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID: verbose
                                                                                                                        • API String ID: 3215553584-579935070
                                                                                                                        • Opcode ID: 0e1375701995164762774767e6acc307974a31e0cd050619d1c211530d762839
                                                                                                                        • Instruction ID: 0f5e61963c4b204f663e8276cf82b1a2f3c90061c6cc682746a5a9b281cdff16
                                                                                                                        • Opcode Fuzzy Hash: 0e1375701995164762774767e6acc307974a31e0cd050619d1c211530d762839
                                                                                                                        • Instruction Fuzzy Hash: 1B91C022A0CA46C5EBA1BEADD45037DB7A1AB40B54F844136DA9D473E5DF3CEC458360
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F0AA0 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 219COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _invalid_parameter_noinfo
                                                                                                                        • String ID: UTF-16LEUNICODE$UTF-8$ccs
                                                                                                                        • API String ID: 3215553584-1196891531
                                                                                                                        • Opcode ID: de4b53a7bd72cc9a75fc72bdb9aa8b7520de62a16ef0f4afa2e89dc7587c8b22
                                                                                                                        • Instruction ID: 5053c3244e7e8752a5cba5531d5aeda6ab84ce359f89293427ca6befd8b72f29
                                                                                                                        • Opcode Fuzzy Hash: de4b53a7bd72cc9a75fc72bdb9aa8b7520de62a16ef0f4afa2e89dc7587c8b22
                                                                                                                        • Instruction Fuzzy Hash: 32816E36E0C682C5FA79BE3D8154278B6A1AB91B88FD58036CB0D573B5DB3DFC019621
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4DCF80 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 154COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CurrentImageNonwritableUnwind__except_validate_context_record
                                                                                                                        • String ID: csm
                                                                                                                        • API String ID: 2395640692-1018135373
                                                                                                                        • Opcode ID: 81dbbe3a269521ccb6618414f5b7d9ba6a400a48ab9a514a04d3b64c82b69e43
                                                                                                                        • Instruction ID: 5b716caeb6a56731daf0d49382632018e23adc25feb2550066d7905d220930b4
                                                                                                                        • Opcode Fuzzy Hash: 81dbbe3a269521ccb6618414f5b7d9ba6a400a48ab9a514a04d3b64c82b69e43
                                                                                                                        • Instruction Fuzzy Hash: 5D51B022B1D602CADB94FF1DE44463CA7A9EB84B88FC08131DA69477A8DB7DEC41D710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4DF800 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 146COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CallEncodePointerTranslator
                                                                                                                        • String ID: MOC$RCC
                                                                                                                        • API String ID: 3544855599-2084237596
                                                                                                                        • Opcode ID: 93010d95ed42164ec617659bf15c462d53d81a38e330ec23f798dc78275aa1b2
                                                                                                                        • Instruction ID: c53a2db96584e48f31b4f3017523663d6f260a50c48041206e461ef3c9b85a9b
                                                                                                                        • Opcode Fuzzy Hash: 93010d95ed42164ec617659bf15c462d53d81a38e330ec23f798dc78275aa1b2
                                                                                                                        • Instruction Fuzzy Hash: 7C61813290CB85C5EB70AB19E4403AAB7A4FB84794F844225EB9D03B65DF7CE595CB20
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4DFBB0 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 145COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Frame$EmptyHandler3::StateUnwind__except_validate_context_record
                                                                                                                        • String ID: csm$csm
                                                                                                                        • API String ID: 3896166516-3733052814
                                                                                                                        • Opcode ID: 7fe73a2a5521307b3718a11731218a5d657cd704d90c9c291f237acf2a87c54e
                                                                                                                        • Instruction ID: 6bdeffe1d6c1d445aa21533593f019c1f77cbd7a45165b59095c5a3297d9949f
                                                                                                                        • Opcode Fuzzy Hash: 7fe73a2a5521307b3718a11731218a5d657cd704d90c9c291f237acf2a87c54e
                                                                                                                        • Instruction Fuzzy Hash: 5E51703290C282C6EAB4BB1D9444368B799FB54B84FD44136DEAD47BE5CF3CE8618721
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D2870 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 69windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message$ByteCharMultiWide
                                                                                                                        • String ID: %s%s: %s$Fatal error detected
                                                                                                                        • API String ID: 1878133881-2410924014
                                                                                                                        • Opcode ID: bd3b1ec170c9362c6821fd135409a0077202d763314442d1f4ebee1409f7e8bb
                                                                                                                        • Instruction ID: afa91a33c24bd48bd79026f5ecb76ba2131245e76b77f26cd9f2ec2563d7838f
                                                                                                                        • Opcode Fuzzy Hash: bd3b1ec170c9362c6821fd135409a0077202d763314442d1f4ebee1409f7e8bb
                                                                                                                        • Instruction Fuzzy Hash: F231447262C682D1E660FB18E4516EAE364FF847C4FC04036E69D47AA9DF3CDA05CB50
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D4340 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 67fileCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                          • Part of subcall function 00007FF74B4D8DE0: MultiByteToWideChar.KERNEL32(?,?,?,?,?,00007FF74B4D2A9B), ref: 00007FF74B4D8E1A
                                                                                                                        • CreateFileW.KERNEL32(00000000,?,?,00007FF74B4D3FB9,?,00007FF74B4D39CA), ref: 00007FF74B4D43A8
                                                                                                                        • GetFinalPathNameByHandleW.KERNEL32(?,?,00007FF74B4D3FB9,?,00007FF74B4D39CA), ref: 00007FF74B4D43C8
                                                                                                                        • CloseHandle.KERNEL32(?,?,00007FF74B4D3FB9,?,00007FF74B4D39CA), ref: 00007FF74B4D43D3
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Handle$ByteCharCloseCreateFileFinalMultiNamePathWide
                                                                                                                        • String ID: \\?\
                                                                                                                        • API String ID: 2226452419-4282027825
                                                                                                                        • Opcode ID: 73aa29fffb20bf18054ec36f2ff632c499c886adceaf3567ccea49c9f56a016a
                                                                                                                        • Instruction ID: a3caef305602d074c5eb5c07757aaeab4cdac9210f0d40016551ae950d60391b
                                                                                                                        • Opcode Fuzzy Hash: 73aa29fffb20bf18054ec36f2ff632c499c886adceaf3567ccea49c9f56a016a
                                                                                                                        • Instruction Fuzzy Hash: BC21D072B0C65185E6A0FB2DF4503A9A355EB88794FC00231DF9D83AA9DF3CE949CB10
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4ED350 Relevance: 6.3, APIs: 4, Instructions: 299fileCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: FileWrite$ConsoleErrorLastOutput
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2718003287-0
                                                                                                                        • Opcode ID: f3307fa9b22cd1c245fea77c51432e5876b76cda8032067fabe2ab74fde9908f
                                                                                                                        • Instruction ID: be7752603dc0556a8d3f95d30f729d6d565b9d0db0fca76e504b97316e84511c
                                                                                                                        • Opcode Fuzzy Hash: f3307fa9b22cd1c245fea77c51432e5876b76cda8032067fabe2ab74fde9908f
                                                                                                                        • Instruction Fuzzy Hash: 53D1E072B0CA41C9E711EFADD4402ACB7B5FB44798B844235DE5DA7BA9DE38E806C350
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D2310 Relevance: 6.1, APIs: 4, Instructions: 52COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: LongWindow$DialogInvalidateRect
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1956198572-0
                                                                                                                        • Opcode ID: c8ffd58409c2a817e2eafc26a907e7367a815fa90807bfabd45e1aee5e5800ec
                                                                                                                        • Instruction ID: df7cdf44fc58902fd37afd9013f48d9228dfa83f75791906b6cbbfe97eb86917
                                                                                                                        • Opcode Fuzzy Hash: c8ffd58409c2a817e2eafc26a907e7367a815fa90807bfabd45e1aee5e5800ec
                                                                                                                        • Instruction Fuzzy Hash: 6211A521E0C552C2FB94BB7DE5442B9D296EB88BC0FC88031DA5947FAACD2CECC54610
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F6A6C Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 121COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _get_daylight$_invalid_parameter_noinfo
                                                                                                                        • String ID: ?
                                                                                                                        • API String ID: 1286766494-1684325040
                                                                                                                        • Opcode ID: 8b6f824ce68226522039b5681d667a4258c25c0b371a8f4ef00d3752ae492e10
                                                                                                                        • Instruction ID: 2605479c3d59b7f04e3b535edb819853e6c76b61b4063b0b2631c6daa8ad6fc7
                                                                                                                        • Opcode Fuzzy Hash: 8b6f824ce68226522039b5681d667a4258c25c0b371a8f4ef00d3752ae492e10
                                                                                                                        • Instruction Fuzzy Hash: 9041F912A0C692C5FBA4BB6DA44137AE650EB947E4F544235EE5C07AF9DF3CE841C710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E9DC8 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 111COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • _invalid_parameter_noinfo.LIBCMT ref: 00007FF74B4E9DFA
                                                                                                                          • Part of subcall function 00007FF74B4EB700: RtlRestoreThreadPreferredUILanguages.NTDLL(?,?,?,00007FF74B4F3B72,?,?,?,00007FF74B4F3BAF,?,?,00000000,00007FF74B4F4075,?,?,00000000,00007FF74B4F3FA7), ref: 00007FF74B4EB716
                                                                                                                          • Part of subcall function 00007FF74B4EB700: GetLastError.KERNEL32(?,?,?,00007FF74B4F3B72,?,?,?,00007FF74B4F3BAF,?,?,00000000,00007FF74B4F4075,?,?,00000000,00007FF74B4F3FA7), ref: 00007FF74B4EB720
                                                                                                                        • GetModuleFileNameW.KERNEL32(?,?,?,?,?,00007FF74B4DC335), ref: 00007FF74B4E9E18
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ErrorFileLanguagesLastModuleNamePreferredRestoreThread_invalid_parameter_noinfo
                                                                                                                        • String ID: C:\Users\user\Desktop\Aimbot.exe
                                                                                                                        • API String ID: 2553983749-1567787249
                                                                                                                        • Opcode ID: 2dc50b8d6a573f30b306f0085b97da4955317f93722b68647fdb996873f18b46
                                                                                                                        • Instruction ID: 453481dbaf48f6308d7d7f90baa1f421a1a77559f5232f383e5ee6e0f20b8664
                                                                                                                        • Opcode Fuzzy Hash: 2dc50b8d6a573f30b306f0085b97da4955317f93722b68647fdb996873f18b46
                                                                                                                        • Instruction Fuzzy Hash: 1B417036A0CB52C5EB14FFAD94800B9E795EB447D4B944036EA4E47BA6DE3CEC518360
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4ED9E8 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100fileCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ErrorFileLastWrite
                                                                                                                        • String ID: U
                                                                                                                        • API String ID: 442123175-4171548499
                                                                                                                        • Opcode ID: 76bc1a38fdffd9ebe3e6e71a83b0ba687688a06d9a48e83c019cb8b3d6fff0c8
                                                                                                                        • Instruction ID: 9713dacc88754e10dec6dbad4e68a022ac2328580298516caf9ab68d4dc89b6a
                                                                                                                        • Opcode Fuzzy Hash: 76bc1a38fdffd9ebe3e6e71a83b0ba687688a06d9a48e83c019cb8b3d6fff0c8
                                                                                                                        • Instruction Fuzzy Hash: D741B122A1CA41C5DB20AF6DE8443AAB7A0FB887C4F804131EE4D877A8EF3CD941C750
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F0108 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 66COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CurrentDirectory
                                                                                                                        • String ID: :
                                                                                                                        • API String ID: 1611563598-336475711
                                                                                                                        • Opcode ID: 303681685fe79024c6733d115f37ee1789a7cba9570748cdcc3494b997bc614c
                                                                                                                        • Instruction ID: 41d1d31a67448245dc8f054dcc21bd8e1a39f1c01096f8aeff77c1a8d449fe02
                                                                                                                        • Opcode Fuzzy Hash: 303681685fe79024c6733d115f37ee1789a7cba9570748cdcc3494b997bc614c
                                                                                                                        • Instruction Fuzzy Hash: 13218C62A0C681C1EB20BF2D9454279B2A2FBC4B88FC58035DB8D436A5DF7DED458661
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D2C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 57windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message$ByteCharMultiWide
                                                                                                                        • String ID: Error detected
                                                                                                                        • API String ID: 1878133881-3513342764
                                                                                                                        • Opcode ID: 339977713d7da472da6bf6cde3ee098e7c711e0ac5788cc03ff0aed866900f2e
                                                                                                                        • Instruction ID: 6acd930a33f0c17bd346e542dc28e3a6faab604cfdf3744d320a6aa7d69207b4
                                                                                                                        • Opcode Fuzzy Hash: 339977713d7da472da6bf6cde3ee098e7c711e0ac5788cc03ff0aed866900f2e
                                                                                                                        • Instruction Fuzzy Hash: 2721747262C681C1EB60BB18F4516EAE354FF84784FC05136EA9D47AA9DF3CD605CB10
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4D2B10 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 57windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message$ByteCharMultiWide
                                                                                                                        • String ID: Fatal error detected
                                                                                                                        • API String ID: 1878133881-4025702859
                                                                                                                        • Opcode ID: cc7983d7ddd1ca4fe6b0e820e7fb498cdab092a0274b8afa64f738c4e3f04b3b
                                                                                                                        • Instruction ID: 96d78d8037031d096a1e802999f1637b20cafe57fc44b33d7e1f65a8156aa91a
                                                                                                                        • Opcode Fuzzy Hash: cc7983d7ddd1ca4fe6b0e820e7fb498cdab092a0274b8afa64f738c4e3f04b3b
                                                                                                                        • Instruction Fuzzy Hash: 8721627262C681C1EB60BB18E4516EAE354FF84788FC05135E69D47AA9DF3CDA05CB10
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4E0678 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 44COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ExceptionFileHeaderRaise
                                                                                                                        • String ID: csm
                                                                                                                        • API String ID: 2573137834-1018135373
                                                                                                                        • Opcode ID: fd7208e01f832ae2c3cc6aa9bb96c2aefef2cc6e58d8a602234d9daac72df826
                                                                                                                        • Instruction ID: f4940f0299bb886f73def7da23ef4f3916b1da0aa99c1efd278f772664968e36
                                                                                                                        • Opcode Fuzzy Hash: fd7208e01f832ae2c3cc6aa9bb96c2aefef2cc6e58d8a602234d9daac72df826
                                                                                                                        • Instruction Fuzzy Hash: 5D112E3261CB4582EB21AB2DF440269B7E5FB88B94F584230DE9D07B65DF3CD951CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FF74B4F1594 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 36COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000000.00000002.2908949065.00007FF74B4D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF74B4D0000, based on PE: true
                                                                                                                        • Associated: 00000000.00000002.2908910724.00007FF74B4D0000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2908983901.00007FF74B4FC000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B50F000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909027373.00007FF74B511000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B513000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        • Associated: 00000000.00000002.2909078223.00007FF74B543000.00000002.00000001.01000000.00000003.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_0_2_7ff74b4d0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: DriveType_invalid_parameter_noinfo
                                                                                                                        • String ID: :
                                                                                                                        • API String ID: 2595371189-336475711
                                                                                                                        • Opcode ID: b3a001ff98c302286219bbad5be65c90682500455353c0d2fccc423422cbb122
                                                                                                                        • Instruction ID: 0565edcaca26b8a33cf5c5d86211208ad0ac2f29b5ab68febd96c8b2be20c5ca
                                                                                                                        • Opcode Fuzzy Hash: b3a001ff98c302286219bbad5be65c90682500455353c0d2fccc423422cbb122
                                                                                                                        • Instruction Fuzzy Hash: 8D018F61A1C242C6FB61BFAC94A127EE3E0EF44744FC01435E94E876A5EF2CED148B24
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Execution Graph

                                                                                                                        Execution Coverage:1.9%
                                                                                                                        Dynamic/Decrypted Code Coverage:0%
                                                                                                                        Signature Coverage:7.2%
                                                                                                                        Total number of Nodes:837
                                                                                                                        Total number of Limit Nodes:72
                                                                                                                        execution_graph 89692 7ffdfb375c03 89696 7ffdfb375c13 89692->89696 89693 7ffdfb375d80 89723 7ffdfb39d4a0 89693->89723 89696->89693 89700 7ffdfb386370 89696->89700 89701 7ffdfb3863a0 89700->89701 89732 7ffdfb385b10 89701->89732 89703 7ffdfb386643 89784 7ffdfb37ba30 89703->89784 89706 7ffdfb386687 LoadIconW LoadIconW LoadCursorW RegisterClassExW 89708 7ffdfb3867ce 89706->89708 89709 7ffdfb38675c CreateWindowExW SetWindowLongPtrW ShowWindow UpdateWindow 89706->89709 89707 7ffdfb386675 GetModuleHandleW 89707->89706 89788 7ffdfb377230 89708->89788 89709->89708 89711 7ffdfb386822 89795 7ffdfb378640 LoadLibraryW 89711->89795 89713 7ffdfb386498 89713->89703 89813 7ffdfb393050 89713->89813 89714 7ffdfb38682d 89715 7ffdfb39d4a0 8 API calls 89714->89715 89716 7ffdfb375d72 89715->89716 89716->89693 89718 7ffdfb2b6370 89716->89718 89719 7ffdfb2b638f 89718->89719 89720 7ffdfb2b6380 GetModuleHandleW 89718->89720 89818 7ffdfb2c6890 89719->89818 89720->89719 89724 7ffdfb39d4a9 89723->89724 89725 7ffdfb39d4f4 IsProcessorFeaturePresent 89724->89725 89726 7ffdfb375e10 89724->89726 89727 7ffdfb39d50c 89725->89727 89831 7ffdfb39d6e8 RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind 89727->89831 89729 7ffdfb39d51f 89832 7ffdfb39d4c0 SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess 89729->89832 89733 7ffdfb385b3e 89732->89733 89734 7ffdfb393050 strchr 89733->89734 89735 7ffdfb385b63 89734->89735 89736 7ffdfb393050 strchr 89735->89736 89737 7ffdfb385b81 89736->89737 89738 7ffdfb393050 strchr 89737->89738 89739 7ffdfb385b9f 89738->89739 89740 7ffdfb393050 strchr 89739->89740 89741 7ffdfb385bbd 89740->89741 89742 7ffdfb393050 strchr 89741->89742 89743 7ffdfb385bdb 89742->89743 89744 7ffdfb393050 strchr 89743->89744 89745 7ffdfb385d0c 89744->89745 89746 7ffdfb393050 strchr 89745->89746 89747 7ffdfb385d2a 89746->89747 89748 7ffdfb393050 strchr 89747->89748 89749 7ffdfb385d48 89748->89749 89750 7ffdfb393050 strchr 89749->89750 89751 7ffdfb385e05 89750->89751 89752 7ffdfb393050 strchr 89751->89752 89753 7ffdfb385e23 89752->89753 89754 7ffdfb393050 strchr 89753->89754 89755 7ffdfb385e41 89754->89755 89756 7ffdfb393050 strchr 89755->89756 89757 7ffdfb385ed4 89756->89757 89758 7ffdfb393050 strchr 89757->89758 89759 7ffdfb385ef2 89758->89759 89760 7ffdfb393050 strchr 89759->89760 89761 7ffdfb385fc1 89760->89761 89762 7ffdfb393050 strchr 89761->89762 89763 7ffdfb385fdf 89762->89763 89764 7ffdfb393050 strchr 89763->89764 89765 7ffdfb385ffd 89764->89765 89766 7ffdfb393050 strchr 89765->89766 89767 7ffdfb38603c 89766->89767 89768 7ffdfb393050 strchr 89767->89768 89769 7ffdfb38605a 89768->89769 89770 7ffdfb393050 strchr 89769->89770 89771 7ffdfb3860c3 89770->89771 89772 7ffdfb393050 strchr 89771->89772 89773 7ffdfb3860e1 89772->89773 89774 7ffdfb393050 strchr 89773->89774 89775 7ffdfb38614a 89774->89775 89776 7ffdfb393050 strchr 89775->89776 89777 7ffdfb386168 89776->89777 89778 7ffdfb393050 strchr 89777->89778 89779 7ffdfb3861d1 89778->89779 89780 7ffdfb393050 strchr 89779->89780 89783 7ffdfb3861ef 89780->89783 89781 7ffdfb386353 89781->89713 89782 7ffdfb393050 strchr 89782->89783 89783->89781 89783->89782 89785 7ffdfb37ba4c 89784->89785 89786 7ffdfb37ba54 89785->89786 89787 7ffdfb393050 strchr 89785->89787 89786->89706 89786->89707 89787->89785 89790 7ffdfb377254 89788->89790 89789 7ffdfb377280 89789->89711 89790->89789 89791 7ffdfb377379 CreateBitmap CreatePatternBrush 89790->89791 89792 7ffdfb3773c8 89791->89792 89793 7ffdfb3774c3 89792->89793 89794 7ffdfb393050 strchr 89792->89794 89793->89711 89794->89792 89796 7ffdfb3789fb 89795->89796 89797 7ffdfb37866a GetProcAddress 89795->89797 89796->89714 89799 7ffdfb3789ee 89797->89799 89800 7ffdfb378699 GetProcAddress 89797->89800 89799->89796 89800->89799 89801 7ffdfb3786b6 GetProcAddress 89800->89801 89801->89799 89802 7ffdfb3786d3 GetProcAddress 89801->89802 89802->89799 89803 7ffdfb3786f0 GetProcAddress 89802->89803 89803->89799 89804 7ffdfb37870d GetProcAddress 89803->89804 89804->89799 89805 7ffdfb37872a GetProcAddress 89804->89805 89805->89799 89806 7ffdfb378747 GetProcAddress 89805->89806 89806->89799 89807 7ffdfb378764 GetProcAddress 89806->89807 89807->89799 89808 7ffdfb378781 89807->89808 89808->89796 89816 7ffdfb2c6a90 13 API calls 89808->89816 89810 7ffdfb3789c3 89810->89714 89811 7ffdfb393050 strchr 89812 7ffdfb378872 89811->89812 89812->89810 89812->89811 89817 7ffdfb393120 strchr 89813->89817 89815 7ffdfb393067 89815->89713 89816->89812 89817->89815 89819 7ffdfb2c68b5 InitCommonControlsEx 89818->89819 89828 7ffdfb2c69a2 89818->89828 89821 7ffdfb2c68ef RegisterClassW 89819->89821 89822 7ffdfb2c68de 89819->89822 89820 7ffdfb39d4a0 8 API calls 89823 7ffdfb2b6397 89820->89823 89824 7ffdfb2c695b GetKeyboardLayout GetLocaleInfoW 89821->89824 89825 7ffdfb2c694a 89821->89825 89822->89821 89823->89693 89826 7ffdfb2c6980 TranslateCharsetInfo 89824->89826 89824->89828 89825->89824 89827 7ffdfb2c6999 89826->89827 89826->89828 89830 7ffdfb2c81a0 10 API calls 89827->89830 89828->89820 89830->89828 89831->89729 89833 7ffdfb2b1b15 89834 7ffdfb2b1b26 89833->89834 89835 7ffdfb2b1b1e 89833->89835 89837 7ffdfb2c6520 89835->89837 89838 7ffdfb2c654f 89837->89838 89839 7ffdfb2c656e 89837->89839 89851 7ffdfb2c41f0 89838->89851 89841 7ffdfb2c65a7 ShowWindow 89839->89841 89843 7ffdfb2c6585 89839->89843 89841->89843 89842 7ffdfb2c666a 89842->89834 89843->89842 89844 7ffdfb2c65f5 89843->89844 89868 7ffdfb2bf200 89843->89868 89846 7ffdfb2c661e SendMessageW 89844->89846 89847 7ffdfb2c6631 SetWindowPos 89844->89847 89848 7ffdfb2c6654 89846->89848 89847->89848 89848->89842 89849 7ffdfb2c665d 89848->89849 89875 7ffdfb301ae0 6 API calls 89849->89875 89852 7ffdfb2c4251 AdjustWindowRectEx 89851->89852 89853 7ffdfb2c4221 IsIconic 89851->89853 89858 7ffdfb2c42ca 89852->89858 89854 7ffdfb2c422f IsZoomed 89853->89854 89861 7ffdfb2c448d 89853->89861 89856 7ffdfb2c4241 89854->89856 89854->89861 89855 7ffdfb39d4a0 8 API calls 89857 7ffdfb2c461d 89855->89857 89856->89852 89856->89861 89857->89839 89859 7ffdfb2c44ba SendMessageW SendMessageW 89858->89859 89860 7ffdfb2c44e9 GetSystemMetrics MoveWindow GetWindowRect 89858->89860 89858->89861 89859->89861 89862 7ffdfb2c4540 GetClientRect 89860->89862 89863 7ffdfb2c45b1 89860->89863 89861->89855 89862->89863 89864 7ffdfb2c455b 89862->89864 89863->89861 89865 7ffdfb2c45d8 DrawMenuBar 89863->89865 89866 7ffdfb2c45b3 MoveWindow 89864->89866 89867 7ffdfb2c4573 MoveWindow GetWindowRect 89864->89867 89865->89861 89866->89863 89867->89862 89867->89863 89869 7ffdfb2bf22d 89868->89869 89872 7ffdfb2bf23a 89869->89872 89876 7ffdfb2bd690 89869->89876 89871 7ffdfb2bf243 89871->89844 89872->89871 89873 7ffdfb2bf2a3 ShowWindow 89872->89873 89873->89871 89875->89842 89878 7ffdfb2bd6bb 89876->89878 89877 7ffdfb2bd80d 89877->89872 89878->89877 89879 7ffdfb2bd735 GetModuleHandleW 89878->89879 89880 7ffdfb2bd744 89878->89880 89879->89880 89881 7ffdfb2bd76b GetModuleHandleW 89880->89881 89882 7ffdfb2bd77a LoadIconW 89880->89882 89885 7ffdfb2bd791 89880->89885 89881->89882 89884 7ffdfb2bd7eb LoadCursorW RegisterClassW 89882->89884 89883 7ffdfb2bd856 89883->89872 89884->89877 89885->89883 89885->89884 89886 7ffdfb30d1a6 89889 7ffdfb30dc10 89886->89889 89888 7ffdfb30d1b7 89890 7ffdfb30dc26 89889->89890 89891 7ffdfb30dc55 89889->89891 89890->89888 89898 7ffdfb30dcd8 89891->89898 89900 7ffdfb338350 strtod isspace 89891->89900 89893 7ffdfb30dc9b 89893->89898 89901 7ffdfb338350 strtod isspace 89893->89901 89895 7ffdfb30dd16 89916 7ffdfb30ff30 89895->89916 89897 7ffdfb30dcbc 89897->89895 89897->89898 89902 7ffdfb30ef40 89897->89902 89898->89888 89900->89893 89901->89897 89903 7ffdfb30ef61 89902->89903 89910 7ffdfb30f02e 89902->89910 89904 7ffdfb30ff30 6 API calls 89903->89904 89903->89910 89905 7ffdfb30efb1 89904->89905 89926 7ffdfb30f370 89905->89926 89908 7ffdfb30f370 9 API calls 89909 7ffdfb30efcf 89908->89909 89909->89910 89914 7ffdfb30f276 MoveWindow 89909->89914 89932 7ffdfb374170 89909->89932 89941 7ffdfb30a630 19 API calls 89909->89941 89942 7ffdfb30a990 10 API calls 89909->89942 89943 7ffdfb3743b0 10 API calls 89909->89943 89910->89897 89914->89909 89917 7ffdfb30ff4b 89916->89917 89918 7ffdfb310009 89917->89918 89948 7ffdfb310250 memset memset 89917->89948 89919 7ffdfb31008a 89918->89919 89949 7ffdfb310250 memset memset 89918->89949 89919->89898 89922 7ffdfb30ffaa 89922->89918 89924 7ffdfb30ffd3 memcpy memset 89922->89924 89923 7ffdfb310028 89923->89919 89925 7ffdfb310053 memcpy memset 89923->89925 89924->89918 89925->89919 89927 7ffdfb30f3af 89926->89927 89928 7ffdfb30f629 memcpy 89927->89928 89931 7ffdfb30f6bd 89927->89931 89928->89927 89929 7ffdfb39d4a0 8 API calls 89930 7ffdfb30efbf 89929->89930 89930->89908 89931->89929 89934 7ffdfb374197 89932->89934 89940 7ffdfb3741bb 89932->89940 89933 7ffdfb39d4a0 8 API calls 89935 7ffdfb374226 89933->89935 89936 7ffdfb3741b3 89934->89936 89937 7ffdfb3741bd 89934->89937 89934->89940 89935->89909 89938 7ffdfb2bf200 6 API calls 89936->89938 89944 7ffdfb2bcf40 ShowWindow 89937->89944 89938->89940 89940->89933 89941->89909 89942->89909 89943->89909 89947 7ffdfb2bcf91 89944->89947 89945 7ffdfb39d4a0 8 API calls 89946 7ffdfb2bd095 89945->89946 89946->89940 89947->89945 89948->89922 89949->89923 89950 7ffdfb2b1ed0 89951 7ffdfb2b1f0d 89950->89951 89952 7ffdfb2b1f11 memset SystemParametersInfoW 89950->89952 89951->89952 89953 7ffdfb2b1f47 CreateFontIndirectW 89952->89953 89954 7ffdfb2b2083 SystemParametersInfoW 89952->89954 89981 7ffdfb2b1e00 89953->89981 89955 7ffdfb2b20d0 6 API calls 89954->89955 89956 7ffdfb2b20a2 CreateFontIndirectW 89954->89956 89960 7ffdfb2b1e00 42 API calls 89955->89960 89958 7ffdfb2b1e00 42 API calls 89956->89958 89961 7ffdfb2b20c4 DeleteObject 89958->89961 89963 7ffdfb2b2180 DeleteObject 89960->89963 89961->89955 89962 7ffdfb2b1e00 42 API calls 89964 7ffdfb2b1f9a DeleteObject CreateFontIndirectW 89962->89964 89965 7ffdfb2b21c5 89963->89965 89966 7ffdfb2b2193 89963->89966 89968 7ffdfb2b1e00 42 API calls 89964->89968 89967 7ffdfb39d4a0 8 API calls 89965->89967 89966->89965 89969 7ffdfb2b21a0 GetStockObject 89966->89969 89970 7ffdfb2b21d4 89967->89970 89971 7ffdfb2b1fc8 DeleteObject CreateFontIndirectW 89968->89971 89972 7ffdfb2b1e00 42 API calls 89969->89972 89973 7ffdfb2b1e00 42 API calls 89971->89973 89972->89966 89974 7ffdfb2b1ff6 DeleteObject CreateFontIndirectW 89973->89974 89975 7ffdfb2b1e00 42 API calls 89974->89975 89976 7ffdfb2b2024 DeleteObject CreateFontIndirectW 89975->89976 89977 7ffdfb2b1e00 42 API calls 89976->89977 89978 7ffdfb2b204f DeleteObject CreateFontIndirectW 89977->89978 89979 7ffdfb2b1e00 42 API calls 89978->89979 89980 7ffdfb2b207a DeleteObject 89979->89980 89980->89954 89985 7ffdfb2b1e45 89981->89985 89991 7ffdfb2b3990 89985->89991 89989 7ffdfb39d4a0 8 API calls 89990 7ffdfb2b1ebd DeleteObject CreateFontIndirectW 89989->89990 89990->89962 89992 7ffdfb2b39d0 GetDC SelectObject GetTextMetricsW GetTextFaceW 89991->89992 89994 7ffdfb2b3a2c 89992->89994 90012 7ffdfb2b3e40 89994->90012 89996 7ffdfb2b3be5 GetCharWidthW 89998 7ffdfb2b3bf3 SelectObject ReleaseDC 89996->89998 89997 7ffdfb2b3bed GetCharWidthA 89997->89998 90001 7ffdfb39d4a0 8 API calls 89998->90001 90002 7ffdfb2b1e8c 90001->90002 90003 7ffdfb303140 90002->90003 90004 7ffdfb303181 90003->90004 90005 7ffdfb2b1e9f 90004->90005 90034 7ffdfb302cb0 42 API calls 90004->90034 90007 7ffdfb2b3c50 90005->90007 90008 7ffdfb2b1eab 90007->90008 90011 7ffdfb2b3c74 90007->90011 90008->89989 90009 7ffdfb2b3c90 DeleteObject 90010 7ffdfb2b3cac DeleteObject 90009->90010 90009->90011 90010->90011 90011->90008 90011->90009 90013 7ffdfb2b3e8a SelectObject GetTextFaceW 90012->90013 90014 7ffdfb2b3ec4 90013->90014 90015 7ffdfb2b3f16 SelectObject 90014->90015 90016 7ffdfb2b3f2d 90015->90016 90017 7ffdfb2b3f51 memset 90016->90017 90021 7ffdfb2b3f9b 90016->90021 90022 7ffdfb2b5080 SelectObject 90017->90022 90019 7ffdfb39d4a0 8 API calls 90020 7ffdfb2b3b76 90019->90020 90020->89996 90020->89997 90021->90019 90023 7ffdfb2b50fa GetFontData 90022->90023 90024 7ffdfb2b50f2 90022->90024 90025 7ffdfb2b540a GetTextCharset 90023->90025 90033 7ffdfb2b5136 90023->90033 90024->90023 90026 7ffdfb2b5449 SelectObject 90025->90026 90030 7ffdfb2b5408 90025->90030 90027 7ffdfb39d4a0 8 API calls 90026->90027 90028 7ffdfb2b5478 90027->90028 90028->90021 90029 7ffdfb2b5173 GetFontData 90029->90033 90030->90026 90031 7ffdfb2b5240 GetFontData 90031->90033 90032 7ffdfb2b52df GetFontData GetFontData 90032->90033 90033->90026 90033->90029 90033->90030 90033->90031 90033->90032 90034->90005 90035 7ffdfb2a846d 90042 7ffdfb2a8472 90035->90042 90037 7ffdfb2a850f 90038 7ffdfb2a8513 90037->90038 90039 7ffdfb2a851a DefWindowProcW 90037->90039 90040 7ffdfb39d4a0 8 API calls 90038->90040 90039->90038 90041 7ffdfb2a853b 90040->90041 90042->90038 90043 7ffdfb2c7560 90042->90043 90044 7ffdfb2c7590 90043->90044 90045 7ffdfb2c7654 90043->90045 90048 7ffdfb2c7596 90044->90048 90049 7ffdfb2c7666 90044->90049 90046 7ffdfb2c7660 90045->90046 90047 7ffdfb2c7752 90045->90047 90046->90049 90051 7ffdfb2c773b 90046->90051 90050 7ffdfb2c777f 90047->90050 90057 7ffdfb2c759d 90047->90057 90052 7ffdfb2c75b9 90048->90052 90048->90057 90053 7ffdfb2c76ad 90049->90053 90054 7ffdfb2c76a2 ClientToScreen 90049->90054 90056 7ffdfb2c7760 90049->90056 90059 7ffdfb2c77b8 90050->90059 90062 7ffdfb2c778c OpenClipboard 90050->90062 90051->90059 90060 7ffdfb2c7745 90051->90060 90052->90056 90065 7ffdfb2c75ff SendMessageW 90052->90065 90055 7ffdfb2c76bb WindowFromPoint 90053->90055 90064 7ffdfb2c76c9 90053->90064 90054->90053 90055->90064 90056->90037 90057->90056 90058 7ffdfb2c7772 90057->90058 90077 7ffdfb2c7840 32 API calls 90058->90077 90059->90037 90076 7ffdfb2a8ba0 13 API calls 90060->90076 90062->90059 90066 7ffdfb2c7799 GetClipboardOwner 90062->90066 90074 7ffdfb2bb830 11 API calls 90064->90074 90065->90059 90067 7ffdfb2c77a4 90066->90067 90068 7ffdfb2c77b2 CloseClipboard 90066->90068 90078 7ffdfb2a8ba0 13 API calls 90067->90078 90068->90059 90071 7ffdfb2c76d9 90075 7ffdfb3404d0 10 API calls 90071->90075 90073 7ffdfb2c76ed 90073->90059 90074->90071 90075->90073 90076->90073 90077->90073 90078->90068 90079 7ffdfb2c60d4 90083 7ffdfb2c60dd 90079->90083 90091 7ffdfb2c61ea 90079->90091 90080 7ffdfb2c6200 DefWindowProcW 90081 7ffdfb2c6213 90080->90081 90082 7ffdfb2c615f 90092 7ffdfb2b7e10 8 API calls 90082->90092 90083->90081 90083->90082 90085 7ffdfb2c61b6 SendMessageW 90083->90085 90083->90091 90085->90081 90086 7ffdfb2c61cc 90085->90086 90087 7ffdfb2c617e 90086->90087 90086->90091 90087->90081 90088 7ffdfb2c61a0 SetFocus 90087->90088 90089 7ffdfb2c61d1 90087->90089 90087->90091 90088->90081 90090 7ffdfb2c7560 53 API calls 90089->90090 90090->90091 90091->90080 90091->90081 90092->90087 90093 7ffdfb2d3270 90096 7ffdfb2d32b0 90093->90096 90095 7ffdfb2d3281 90097 7ffdfb2d32dd 90096->90097 90098 7ffdfb2d32e5 GetSystemMetrics 90097->90098 90102 7ffdfb2d330a 90097->90102 90099 7ffdfb2d32f4 90098->90099 90098->90102 90141 7ffdfb2a6870 __stdio_common_vsprintf printf 90099->90141 90100 7ffdfb2d3316 90100->90095 90102->90100 90109 7ffdfb373870 strrchr 90102->90109 90104 7ffdfb2d3378 90108 7ffdfb2d35fd 90104->90108 90120 7ffdfb2f6bf0 90104->90120 90108->90095 90110 7ffdfb373908 90109->90110 90119 7ffdfb3738b1 90109->90119 90111 7ffdfb373929 strncpy 90110->90111 90113 7ffdfb37393f 90110->90113 90111->90113 90112 7ffdfb39d4a0 8 API calls 90114 7ffdfb373b44 90112->90114 90115 7ffdfb373adc 90113->90115 90116 7ffdfb373b18 90113->90116 90113->90119 90114->90104 90142 7ffdfb372ec0 9 API calls 90115->90142 90143 7ffdfb3728a0 39 API calls 90116->90143 90119->90112 90121 7ffdfb2f6c2b 90120->90121 90126 7ffdfb2f6c30 90120->90126 90122 7ffdfb2f6bf0 15 API calls 90121->90122 90122->90126 90123 7ffdfb39d4a0 8 API calls 90124 7ffdfb2d35ea 90123->90124 90124->90108 90133 7ffdfb2d3d00 90124->90133 90128 7ffdfb2f6d7d 90126->90128 90129 7ffdfb2f6da3 90126->90129 90144 7ffdfb33ac60 90126->90144 90151 7ffdfb2baf70 strcmp 90126->90151 90128->90123 90129->90128 90131 7ffdfb2f6de4 90129->90131 90152 7ffdfb2a6870 __stdio_common_vsprintf printf 90129->90152 90131->90128 90153 7ffdfb2a6870 __stdio_common_vsprintf printf 90131->90153 90136 7ffdfb2d3d58 90133->90136 90134 7ffdfb39d4a0 8 API calls 90135 7ffdfb2d454f 90134->90135 90135->90108 90137 7ffdfb2d4470 90136->90137 90139 7ffdfb2d4504 90136->90139 90140 7ffdfb338350 strtod isspace 90136->90140 90173 7ffdfb2d4570 90137->90173 90139->90134 90140->90136 90141->90102 90142->90119 90143->90119 90145 7ffdfb33ac99 90144->90145 90146 7ffdfb33acb2 strchr 90145->90146 90154 7ffdfb33bb10 90145->90154 90148 7ffdfb33acd4 90146->90148 90149 7ffdfb33ae05 strncpy 90148->90149 90150 7ffdfb33ae26 90148->90150 90149->90150 90150->90126 90151->90126 90152->90131 90153->90128 90155 7ffdfb33bb4b 90154->90155 90156 7ffdfb33bb61 90155->90156 90162 7ffdfb33c100 90155->90162 90158 7ffdfb33bb10 10 API calls 90156->90158 90159 7ffdfb33bb8d 90156->90159 90158->90159 90160 7ffdfb33be43 memcpy 90159->90160 90161 7ffdfb33be6c 90159->90161 90160->90161 90161->90146 90163 7ffdfb33c12c 90162->90163 90166 7ffdfb33b8c0 90163->90166 90167 7ffdfb33b8fa 90166->90167 90168 7ffdfb33b8fe 90167->90168 90172 7ffdfb33b600 10 API calls 90167->90172 90169 7ffdfb39d4a0 8 API calls 90168->90169 90170 7ffdfb33baf4 90169->90170 90172->90168 90192 7ffdfb309d10 90173->90192 90175 7ffdfb2d45e0 90176 7ffdfb309d10 17 API calls 90175->90176 90179 7ffdfb2d4631 90175->90179 90176->90179 90177 7ffdfb2d46c9 90180 7ffdfb309d10 17 API calls 90177->90180 90179->90177 90181 7ffdfb2d4689 90179->90181 90200 7ffdfb2d11e0 90179->90200 90183 7ffdfb2d46f5 90180->90183 90182 7ffdfb309d10 17 API calls 90181->90182 90182->90177 90188 7ffdfb2d4830 90183->90188 90190 7ffdfb2d4896 90183->90190 90211 7ffdfb2bb490 90183->90211 90185 7ffdfb2d49cf 90186 7ffdfb39d4a0 8 API calls 90185->90186 90187 7ffdfb2d4a26 90186->90187 90187->90139 90221 7ffdfb2a7ce0 49 API calls 90188->90221 90190->90188 90191 7ffdfb2d4984 DeleteObject 90190->90191 90191->90188 90194 7ffdfb309d53 90192->90194 90193 7ffdfb309f92 90195 7ffdfb39d4a0 8 API calls 90193->90195 90194->90193 90197 7ffdfb2bb490 16 API calls 90194->90197 90198 7ffdfb309fd8 90194->90198 90196 7ffdfb30a092 90195->90196 90196->90175 90197->90198 90198->90193 90199 7ffdfb30a062 DeleteObject 90198->90199 90199->90193 90201 7ffdfb2d1236 90200->90201 90203 7ffdfb2d1445 90201->90203 90206 7ffdfb2d12b2 90201->90206 90210 7ffdfb2d129a 90201->90210 90202 7ffdfb39d4a0 8 API calls 90204 7ffdfb2d15a9 90202->90204 90203->90210 90222 7ffdfb2a4780 90203->90222 90204->90181 90206->90210 90227 7ffdfb3139e0 19 API calls 90206->90227 90208 7ffdfb2d138a 90209 7ffdfb2a4780 39 API calls 90208->90209 90208->90210 90209->90210 90210->90202 90212 7ffdfb2bb4dd CreateBitmap 90211->90212 90214 7ffdfb2bb635 90212->90214 90215 7ffdfb2bb55b GetDC CreateDIBSection ReleaseDC 90212->90215 90218 7ffdfb39d4a0 8 API calls 90214->90218 90215->90214 90216 7ffdfb2bb5cd 90215->90216 90216->90214 90217 7ffdfb2bb5d5 GetLastError FormatMessageW 90216->90217 90217->90214 90219 7ffdfb2bb612 MessageBoxW LocalFree 90217->90219 90220 7ffdfb2bb65f 90218->90220 90219->90214 90220->90190 90221->90185 90223 7ffdfb2bb490 16 API calls 90222->90223 90224 7ffdfb2a47c2 90223->90224 90225 7ffdfb2a48da 90224->90225 90228 7ffdfb2af420 90224->90228 90225->90210 90227->90208 90244 7ffdfb2ae980 90228->90244 90230 7ffdfb2af461 SetROP2 CreateCompatibleDC 90231 7ffdfb2af4ae 90230->90231 90234 7ffdfb2af5c4 CreateDIBitmap 90230->90234 90232 7ffdfb2af4ba CreateBitmap 90231->90232 90243 7ffdfb2af4df CreateBitmap 90231->90243 90233 7ffdfb2af5a5 SetTextColor SetBkColor 90232->90233 90235 7ffdfb2af68d 8 API calls 90233->90235 90234->90235 90239 7ffdfb2af76b 90235->90239 90240 7ffdfb2af75c ReleaseDC 90235->90240 90241 7ffdfb2af779 90239->90241 90242 7ffdfb2af770 DeleteDC 90239->90242 90240->90241 90241->90225 90242->90241 90243->90233 90245 7ffdfb2ae9aa GetDC 90244->90245 90246 7ffdfb2ae9e2 90244->90246 90247 7ffdfb2ae9c0 SelectPalette RealizePalette GetBkMode 90245->90247 90246->90247 90248 7ffdfb2aea04 CreateCompatibleDC SelectObject 90246->90248 90247->90230 90248->90247 90250 7ffdfb309ad0 90251 7ffdfb309ae6 90250->90251 90252 7ffdfb374170 15 API calls 90251->90252 90253 7ffdfb309b24 90251->90253 90252->90253 90254 7ffdfb312071 90258 7ffdfb3120c7 90254->90258 90260 7ffdfb312081 90254->90260 90255 7ffdfb39d4a0 8 API calls 90256 7ffdfb3120b4 90255->90256 90259 7ffdfb3121dc 90258->90259 90274 7ffdfb2a6870 __stdio_common_vsprintf printf 90258->90274 90259->90260 90263 7ffdfb31cde0 90259->90263 90260->90255 90261 7ffdfb3124a8 90260->90261 90264 7ffdfb31ce21 CreateRectRgnIndirect 90263->90264 90275 7ffdfb31f910 90264->90275 90267 7ffdfb31cf52 90269 7ffdfb39d4a0 8 API calls 90267->90269 90268 7ffdfb31cf13 90268->90267 90272 7ffdfb31cf4c DeleteObject 90268->90272 90270 7ffdfb31cfd1 90269->90270 90270->90260 90272->90267 90274->90258 90279 7ffdfb31f951 90275->90279 90276 7ffdfb31fa1b 90297 7ffdfb339210 90276->90297 90278 7ffdfb31f99d strncmp 90278->90279 90279->90276 90279->90278 90280 7ffdfb31f9da strncmp 90279->90280 90284 7ffdfb31cec3 90279->90284 90280->90279 90282 7ffdfb31fb3c 90282->90284 90306 7ffdfb3202b0 90282->90306 90283 7ffdfb31fdf5 90283->90284 90287 7ffdfb31ffb2 90283->90287 90327 7ffdfb320a90 90283->90327 90284->90267 90284->90268 90296 7ffdfb324c90 9 API calls 90284->90296 90287->90284 90343 7ffdfb322e30 93 API calls 90287->90343 90288 7ffdfb3202b0 56 API calls 90293 7ffdfb31ff36 90288->90293 90292 7ffdfb31fdd9 90292->90284 90294 7ffdfb3202b0 56 API calls 90292->90294 90293->90284 90334 7ffdfb31a940 memset 90293->90334 90294->90283 90298 7ffdfb339284 90297->90298 90300 7ffdfb339230 90297->90300 90344 7ffdfb33a710 memcpy 90298->90344 90300->90282 90302 7ffdfb3393b7 90302->90282 90303 7ffdfb3392c5 90303->90302 90305 7ffdfb3393b0 90303->90305 90345 7ffdfb339560 strncmp 90303->90345 90304 7ffdfb33ac60 13 API calls 90304->90305 90305->90302 90305->90304 90307 7ffdfb320651 90306->90307 90310 7ffdfb3202f9 90306->90310 90308 7ffdfb39d4a0 8 API calls 90307->90308 90311 7ffdfb31fc6a 90308->90311 90309 7ffdfb32034e GetRgnBox 90312 7ffdfb3203b0 7 API calls 90309->90312 90313 7ffdfb3203a2 90309->90313 90310->90307 90310->90309 90311->90283 90311->90284 90342 7ffdfb320680 _strnicmp _strnicmp 90311->90342 90317 7ffdfb320452 90312->90317 90313->90312 90313->90317 90314 7ffdfb3204e4 90315 7ffdfb3204ec memset 90314->90315 90318 7ffdfb3204d5 90315->90318 90316 7ffdfb320478 90319 7ffdfb320480 memset 90316->90319 90320 7ffdfb320497 90316->90320 90317->90314 90317->90315 90317->90316 90326 7ffdfb3205b4 90317->90326 90323 7ffdfb32052a memcpy 90318->90323 90324 7ffdfb32054c 90318->90324 90318->90326 90319->90320 90320->90318 90321 7ffdfb3204ad memset 90320->90321 90321->90318 90323->90326 90325 7ffdfb320590 memcpy 90324->90325 90324->90326 90325->90325 90325->90326 90326->90307 90346 7ffdfb323b90 43 API calls 90326->90346 90331 7ffdfb320ad7 90327->90331 90328 7ffdfb320b2a _strnicmp 90328->90331 90329 7ffdfb320bbd _strnicmp 90330 7ffdfb320b82 90329->90330 90330->90329 90332 7ffdfb31ff1a 90330->90332 90331->90328 90331->90330 90331->90332 90347 7ffdfb31a7e0 memset 90331->90347 90332->90284 90332->90288 90335 7ffdfb31a9b0 memset 90334->90335 90336 7ffdfb31a98f 90334->90336 90337 7ffdfb31a9fa 90335->90337 90336->90335 90339 7ffdfb31aa02 90337->90339 90400 7ffdfb319b70 90337->90400 90340 7ffdfb39d4a0 8 API calls 90339->90340 90341 7ffdfb31aad5 90340->90341 90341->90287 90342->90292 90343->90287 90344->90303 90345->90303 90346->90326 90348 7ffdfb31a838 90347->90348 90349 7ffdfb31a859 memset 90347->90349 90348->90349 90350 7ffdfb31a89f 90349->90350 90355 7ffdfb318680 90350->90355 90352 7ffdfb31a8eb 90353 7ffdfb39d4a0 8 API calls 90352->90353 90354 7ffdfb31a923 90353->90354 90354->90331 90386 7ffdfb317b00 90355->90386 90358 7ffdfb3186c7 memcmp 90359 7ffdfb318770 90358->90359 90360 7ffdfb3186e3 90358->90360 90390 7ffdfb318080 90359->90390 90365 7ffdfb317b00 memcpy 90360->90365 90371 7ffdfb31873f 90360->90371 90362 7ffdfb39d4a0 8 API calls 90363 7ffdfb318ab6 90362->90363 90363->90352 90366 7ffdfb31871e 90365->90366 90368 7ffdfb318727 memcmp 90366->90368 90366->90371 90367 7ffdfb317b00 memcpy 90369 7ffdfb318824 90367->90369 90368->90359 90368->90371 90370 7ffdfb317b00 memcpy 90369->90370 90369->90371 90372 7ffdfb31886a 90370->90372 90371->90362 90372->90371 90373 7ffdfb317b00 memcpy 90372->90373 90374 7ffdfb3188de 90373->90374 90374->90371 90375 7ffdfb317b00 memcpy 90374->90375 90376 7ffdfb318905 90375->90376 90376->90371 90397 7ffdfb3183b0 pow 90376->90397 90378 7ffdfb318919 90378->90371 90379 7ffdfb317b00 memcpy 90378->90379 90380 7ffdfb318940 90379->90380 90380->90371 90381 7ffdfb317b00 memcpy 90380->90381 90382 7ffdfb31899d 90381->90382 90382->90371 90383 7ffdfb317b00 memcpy 90382->90383 90384 7ffdfb3189fa 90383->90384 90384->90371 90398 7ffdfb317ef0 memcpy 90384->90398 90388 7ffdfb317cb7 90386->90388 90389 7ffdfb317b2d 90386->90389 90387 7ffdfb317d50 memcpy 90387->90388 90388->90387 90388->90389 90389->90358 90389->90371 90395 7ffdfb3180c0 90390->90395 90391 7ffdfb39d4a0 8 API calls 90392 7ffdfb3183a0 90391->90392 90392->90367 90392->90371 90393 7ffdfb317b00 memcpy 90393->90395 90395->90393 90396 7ffdfb31827a 90395->90396 90399 7ffdfb317fd0 9 API calls 90395->90399 90396->90391 90397->90378 90398->90371 90399->90395 90401 7ffdfb318680 12 API calls 90400->90401 90418 7ffdfb319bb7 90401->90418 90402 7ffdfb319d0c 90404 7ffdfb318080 9 API calls 90402->90404 90403 7ffdfb39d4a0 8 API calls 90405 7ffdfb319f41 90403->90405 90411 7ffdfb319d2b 90404->90411 90405->90339 90406 7ffdfb319e7d 90420 7ffdfb319e96 90406->90420 90431 7ffdfb322250 90406->90431 90407 7ffdfb319c30 _stricmp 90407->90418 90410 7ffdfb319e55 90413 7ffdfb318080 9 API calls 90410->90413 90410->90420 90412 7ffdfb317b00 memcpy 90411->90412 90419 7ffdfb319e2b 90411->90419 90411->90420 90414 7ffdfb319da8 90412->90414 90413->90406 90414->90420 90442 7ffdfb317ef0 memcpy 90414->90442 90416 7ffdfb319dc1 90416->90416 90417 7ffdfb318080 9 API calls 90416->90417 90416->90420 90417->90419 90418->90402 90418->90407 90418->90420 90419->90406 90419->90420 90443 7ffdfb318ad0 9 API calls 90419->90443 90420->90403 90421 7ffdfb31a060 90421->90420 90423 7ffdfb318080 9 API calls 90421->90423 90427 7ffdfb31a242 90421->90427 90435 7ffdfb3198e0 90421->90435 90423->90421 90424 7ffdfb31a2f0 90445 7ffdfb317ef0 memcpy 90424->90445 90427->90420 90427->90424 90428 7ffdfb318080 9 API calls 90427->90428 90444 7ffdfb317fd0 9 API calls 90427->90444 90428->90427 90429 7ffdfb31a33f 90429->90420 90446 7ffdfb320e40 90 API calls 90429->90446 90432 7ffdfb32227a 90431->90432 90433 7ffdfb3202b0 56 API calls 90432->90433 90434 7ffdfb32229c 90432->90434 90433->90434 90434->90421 90436 7ffdfb319909 90435->90436 90439 7ffdfb319aab 90435->90439 90438 7ffdfb317b00 memcpy 90436->90438 90436->90439 90441 7ffdfb319abe 90436->90441 90447 7ffdfb319380 9 API calls 90436->90447 90438->90436 90448 7ffdfb317ef0 memcpy 90439->90448 90441->90421 90442->90416 90443->90410 90444->90427 90445->90429 90446->90420 90447->90436 90448->90441 90449 7ffdfb373130 90453 7ffdfb37315f 90449->90453 90450 7ffdfb3731c5 90464 7ffdfb3729c0 90450->90464 90452 7ffdfb3731dd 90453->90450 90488 7ffdfb31ccd0 isupper 90453->90488 90455 7ffdfb3731d8 90455->90452 90479 7ffdfb2be810 90455->90479 90457 7ffdfb3731ad 90489 7ffdfb31ccd0 isupper 90457->90489 90459 7ffdfb3731b9 90490 7ffdfb31ccd0 isupper 90459->90490 90461 7ffdfb373238 90482 7ffdfb2cb040 90461->90482 90463 7ffdfb3732b4 90465 7ffdfb3729fe isdigit 90464->90465 90467 7ffdfb372a43 90465->90467 90468 7ffdfb372a59 90465->90468 90467->90468 90469 7ffdfb372a48 isdigit 90467->90469 90470 7ffdfb372a68 strtoul 90468->90470 90474 7ffdfb372a7c 90468->90474 90469->90467 90469->90468 90470->90474 90471 7ffdfb372abb 90491 7ffdfb2c6f00 31 API calls 90471->90491 90472 7ffdfb372a90 strncmp 90472->90474 90474->90471 90474->90472 90478 7ffdfb372af5 90474->90478 90475 7ffdfb372ac3 90476 7ffdfb372acb 90475->90476 90477 7ffdfb372b7b strncpy 90475->90477 90476->90478 90477->90478 90478->90455 90480 7ffdfb2be831 memset 90479->90480 90481 7ffdfb2be9a5 90480->90481 90481->90461 90486 7ffdfb2cb068 90482->90486 90492 7ffdfb2cb630 90486->90492 90487 7ffdfb2cb4e5 90488->90457 90489->90459 90490->90450 90491->90475 90493 7ffdfb2cb651 memset 90492->90493 90494 7ffdfb2cb809 90493->90494 90495 7ffdfb2cb859 memset 90494->90495 90496 7ffdfb2cb4ac memset 90494->90496 90495->90496 90496->90487 90497 7ffdfb375f50 GetWindowLongPtrW 90498 7ffdfb375f92 90497->90498 90499 7ffdfb375fd6 90497->90499 90500 7ffdfb37610d DefWindowProcW 90498->90500 90499->90498 90503 7ffdfb376030 GetSysColor 90499->90503 90501 7ffdfb39d4a0 8 API calls 90500->90501 90502 7ffdfb37612d 90501->90502 90505 7ffdfb2a6870 __stdio_common_vsprintf printf 90503->90505 90505->90499 90506 7ffdfb2c5c00 90508 7ffdfb2c5c11 90506->90508 90509 7ffdfb2c5c1b 90506->90509 90507 7ffdfb2c72d1 90512 7ffdfb2c7560 53 API calls 90507->90512 90515 7ffdfb2c72f2 90507->90515 90508->90507 90510 7ffdfb2c72bb 90508->90510 90511 7ffdfb2c7343 90508->90511 90508->90515 90517 7ffdfb2c5c48 SendMessageW 90509->90517 90518 7ffdfb2c5c90 90509->90518 90510->90507 90510->90515 90524 7ffdfb2c7328 90510->90524 90513 7ffdfb2c74e0 90511->90513 90514 7ffdfb2c734e 90511->90514 90516 7ffdfb2c72ee 90512->90516 90538 7ffdfb2c81a0 10 API calls 90513->90538 90520 7ffdfb2c7359 90514->90520 90521 7ffdfb2c74bd 90514->90521 90516->90515 90522 7ffdfb2c732d DefWindowProcW 90516->90522 90517->90518 90520->90507 90523 7ffdfb2c7362 90520->90523 90521->90515 90527 7ffdfb2c7560 53 API calls 90521->90527 90522->90515 90523->90522 90526 7ffdfb2c736b ImmGetContext 90523->90526 90536 7ffdfb2c7840 32 API calls 90524->90536 90526->90522 90528 7ffdfb2c7379 ImmGetCompositionStringW 90526->90528 90527->90515 90529 7ffdfb2c7397 ImmGetCompositionStringW 90528->90529 90530 7ffdfb2c74ac ImmReleaseContext 90528->90530 90532 7ffdfb2c73cb 90529->90532 90530->90515 90537 7ffdfb2bb830 11 API calls 90532->90537 90534 7ffdfb2c7444 GetTickCount 90535 7ffdfb2c745e 90534->90535 90535->90530 90536->90522 90537->90534 90538->90515 90539 7ffdfb2c5f1f 90542 7ffdfb2c5250 90539->90542 90543 7ffdfb2c528e 90542->90543 90544 7ffdfb2c5297 90543->90544 90545 7ffdfb2c529c GetWindowLongPtrW 90543->90545 90546 7ffdfb2c52b9 IsWindowVisible 90544->90546 90545->90546 90558 7ffdfb2c53c4 90545->90558 90548 7ffdfb2c52da GetWindowPlacement 90546->90548 90553 7ffdfb2c52d6 90546->90553 90547 7ffdfb39d4a0 8 API calls 90549 7ffdfb2c5584 90547->90549 90548->90553 90550 7ffdfb2c5346 90555 7ffdfb2c5357 GetClientRect MoveWindow 90550->90555 90550->90558 90551 7ffdfb2c533a 90559 7ffdfb2bd110 9 API calls 90551->90559 90552 7ffdfb2c5407 90557 7ffdfb2bcf40 9 API calls 90552->90557 90553->90550 90553->90551 90553->90552 90556 7ffdfb2c5335 90553->90556 90555->90558 90556->90550 90556->90551 90557->90550 90558->90547 90559->90550 90560 7ffdfb374255 90563 7ffdfb374260 90560->90563 90561 7ffdfb3742a6 90575 7ffdfb2bcda0 90561->90575 90563->90561 90564 7ffdfb374297 90563->90564 90571 7ffdfb2a68d0 90564->90571 90565 7ffdfb374375 90566 7ffdfb374312 90566->90565 90579 7ffdfb2c4f30 20 API calls 90566->90579 90568 7ffdfb374314 SetWindowPos 90568->90566 90572 7ffdfb2a692c GetModuleHandleW 90571->90572 90573 7ffdfb2a693b CreateWindowExW SetWindowPos SetWindowLongPtrW 90571->90573 90572->90573 90574 7ffdfb2bcb70 90573->90574 90574->90565 90574->90566 90574->90568 90576 7ffdfb2bcdbe 90575->90576 90577 7ffdfb2bcde3 GetModuleHandleW 90576->90577 90578 7ffdfb2bcdf2 CreateWindowExW SetWindowPos 90576->90578 90577->90578 90579->90565 90580 7ffdfb33d2b9 90586 7ffdfb33cf01 90580->90586 90584 7ffdfb33d413 90585 7ffdfb33d354 MoveWindow 90585->90586 90586->90584 90586->90585 90587 7ffdfb374170 15 API calls 90586->90587 90588 7ffdfb30a630 19 API calls 90586->90588 90589 7ffdfb30a990 10 API calls 90586->90589 90590 7ffdfb3743b0 10 API calls 90586->90590 90587->90586 90588->90586 90589->90586 90590->90586 90591 7ffdfb307b7d 90594 7ffdfb307b90 90591->90594 90592 7ffdfb307bc7 strncmp 90592->90594 90593 7ffdfb307c0a strncmp 90593->90594 90594->90592 90594->90593 90595 7ffdfb307cfe 90594->90595 90596 7ffdfb307c4c strncmp 90594->90596 90597 7ffdfb307c8b strncmp 90594->90597 90598 7ffdfb307cc4 strncmp 90594->90598 90599 7ffdfb373870 41 API calls 90595->90599 90596->90594 90597->90594 90598->90594 90600 7ffdfb307d54 90599->90600 90601 7ffdfb33ac60 13 API calls 90600->90601 90602 7ffdfb307dfa 90600->90602 90620 7ffdfb3080c4 90600->90620 90601->90602 90603 7ffdfb307e45 90602->90603 90604 7ffdfb33ac60 13 API calls 90602->90604 90605 7ffdfb307e62 90603->90605 90621 7ffdfb2b14f0 90603->90621 90604->90603 90607 7ffdfb307e8a 90605->90607 90608 7ffdfb33ac60 13 API calls 90605->90608 90605->90620 90609 7ffdfb307ea8 90607->90609 90610 7ffdfb33ac60 13 API calls 90607->90610 90608->90607 90612 7ffdfb307eec 90609->90612 90638 7ffdfb371dd0 18 API calls 90609->90638 90610->90609 90613 7ffdfb307f62 memset 90612->90613 90612->90620 90639 7ffdfb374940 20 API calls 90612->90639 90616 7ffdfb308014 90613->90616 90617 7ffdfb2f6bf0 15 API calls 90616->90617 90618 7ffdfb308099 90617->90618 90618->90620 90640 7ffdfb3086a0 154 API calls 90618->90640 90622 7ffdfb2b151c 90621->90622 90623 7ffdfb2b153e 90621->90623 90637 7ffdfb2b1539 90622->90637 90641 7ffdfb2b1310 90622->90641 90687 7ffdfb2b12b0 __stdio_common_vsscanf 90623->90687 90626 7ffdfb2b1552 90628 7ffdfb2b1585 IsWindow 90626->90628 90626->90637 90627 7ffdfb39d4a0 8 API calls 90629 7ffdfb2b1758 90627->90629 90630 7ffdfb2b15ef SendMessageW 90628->90630 90628->90637 90629->90605 90631 7ffdfb2b1659 90630->90631 90632 7ffdfb2b160f SendMessageW 90630->90632 90634 7ffdfb2b1690 wsprintfW MessageBoxW 90631->90634 90636 7ffdfb2b162a 90631->90636 90633 7ffdfb2b16c7 90632->90633 90632->90636 90635 7ffdfb2b1310 69 API calls 90633->90635 90634->90633 90635->90636 90636->90637 90637->90627 90638->90612 90639->90613 90640->90620 90642 7ffdfb2b1330 SendMessageW SendMessageW SendMessageW 90641->90642 90646 7ffdfb2b13b6 90641->90646 90643 7ffdfb2b13a9 90642->90643 90643->90646 90644 7ffdfb2b1458 90644->90637 90645 7ffdfb2bea7c GetFocus 90647 7ffdfb2beaa5 GetForegroundWindow 90645->90647 90648 7ffdfb2beab0 IsWindow 90645->90648 90646->90644 90646->90645 90647->90648 90650 7ffdfb2bee4f SetWindowLongPtrW 90648->90650 90651 7ffdfb2beaff 90648->90651 90652 7ffdfb2bee77 SetWindowLongPtrW 90650->90652 90653 7ffdfb2bee8c SetParent 90650->90653 90651->90650 90652->90653 90654 7ffdfb2bef7c 90653->90654 90655 7ffdfb2beea2 SendMessageW SendMessageW 90653->90655 90656 7ffdfb2bef8f SendMessageW 90654->90656 90657 7ffdfb2bf001 90654->90657 90655->90654 90658 7ffdfb2beee0 GetDesktopWindow 90655->90658 90656->90657 90659 7ffdfb2befa9 SendMessageW 90656->90659 90661 7ffdfb2bf017 SetWindowPos 90657->90661 90662 7ffdfb2bf03a 90657->90662 90658->90654 90660 7ffdfb2beeef SetWindowLongPtrW 90658->90660 90665 7ffdfb2befdf 90659->90665 90663 7ffdfb2bef68 SetMenu DestroyWindow 90660->90663 90675 7ffdfb2bef09 90660->90675 90661->90662 90688 7ffdfb2bf330 90662->90688 90663->90654 90693 7ffdfb32fe20 42 API calls 90665->90693 90666 7ffdfb2bf044 90668 7ffdfb2bf059 SendMessageW 90666->90668 90669 7ffdfb2bf06e 90666->90669 90668->90669 90671 7ffdfb2bf07b SendMessageW 90669->90671 90672 7ffdfb2bf091 90669->90672 90670 7ffdfb2befe7 SendMessageW 90670->90657 90671->90672 90673 7ffdfb2bf109 90672->90673 90674 7ffdfb2bf09d SendMessageW 90672->90674 90677 7ffdfb2bf115 SetMenu 90673->90677 90685 7ffdfb2bf12d 90673->90685 90676 7ffdfb2bf0bd 90674->90676 90675->90663 90680 7ffdfb2bef3f SetParent 90675->90680 90678 7ffdfb2bcf40 9 API calls 90676->90678 90677->90685 90678->90673 90679 7ffdfb2bf182 SetActiveWindow 90682 7ffdfb2bf1de 90679->90682 90680->90675 90683 7ffdfb39d4a0 8 API calls 90682->90683 90684 7ffdfb2bf1ee 90683->90684 90684->90637 90685->90679 90686 7ffdfb2bf330 ShowWindow 90685->90686 90686->90685 90687->90626 90689 7ffdfb2bf347 90688->90689 90692 7ffdfb2bf355 90688->90692 90689->90666 90690 7ffdfb2bf384 ShowWindow 90691 7ffdfb2bf395 90690->90691 90691->90666 90692->90690 90692->90691 90693->90670

                                                                                                                        Executed Functions

                                                                                                                        Function 00007FFDFB2B1310 Relevance: 47.6, APIs: 25, Strings: 2, Instructions: 332windowCOMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 172 7ffdfb2b1310-7ffdfb2b132a 173 7ffdfb2b13b6-7ffdfb2b13be 172->173 174 7ffdfb2b1330-7ffdfb2b13a7 SendMessageW * 3 172->174 175 7ffdfb2b13c0-7ffdfb2b13ce 173->175 176 7ffdfb2b1402-7ffdfb2b1409 173->176 177 7ffdfb2b13ac-7ffdfb2b13b1 174->177 178 7ffdfb2b13a9 174->178 175->176 179 7ffdfb2b13d0-7ffdfb2b13df 175->179 180 7ffdfb2b1458-7ffdfb2b145d 176->180 181 7ffdfb2b140b-7ffdfb2b1419 176->181 177->173 178->177 182 7ffdfb2b13eb-7ffdfb2b13f2 179->182 183 7ffdfb2b13e1 179->183 181->180 184 7ffdfb2b141b-7ffdfb2b142a 181->184 182->176 185 7ffdfb2b13f4-7ffdfb2b13f8 182->185 183->182 186 7ffdfb2b1436-7ffdfb2b143d 184->186 187 7ffdfb2b142c 184->187 185->176 188 7ffdfb2b13fa-7ffdfb2b13fd call 7ffdfb2bea00 185->188 186->180 189 7ffdfb2b143f-7ffdfb2b1449 186->189 187->186 188->176 189->180 191 7ffdfb2b144b-7ffdfb2bea72 189->191 194 7ffdfb2bea7c-7ffdfb2beaa3 GetFocus 191->194 195 7ffdfb2bea74-7ffdfb2bea77 call 7ffdfb374230 191->195 197 7ffdfb2beaa5-7ffdfb2beaae GetForegroundWindow 194->197 198 7ffdfb2beab0 194->198 195->194 197->198 199 7ffdfb2beab8-7ffdfb2beada 197->199 198->199 201 7ffdfb2beadc-7ffdfb2beae3 199->201 202 7ffdfb2beaed-7ffdfb2beaf9 IsWindow 199->202 201->202 203 7ffdfb2bee4f-7ffdfb2bee75 SetWindowLongPtrW 202->203 204 7ffdfb2beaff-7ffdfb2beb10 202->204 205 7ffdfb2bee77-7ffdfb2bee86 SetWindowLongPtrW 203->205 206 7ffdfb2bee8c-7ffdfb2bee9c SetParent 203->206 204->203 205->206 208 7ffdfb2bef7c-7ffdfb2bef8d 206->208 209 7ffdfb2beea2-7ffdfb2beeda SendMessageW * 2 206->209 210 7ffdfb2bef8f-7ffdfb2befa7 SendMessageW 208->210 211 7ffdfb2bf001-7ffdfb2bf015 208->211 209->208 212 7ffdfb2beee0-7ffdfb2beee9 GetDesktopWindow 209->212 210->211 213 7ffdfb2befa9-7ffdfb2beffb SendMessageW call 7ffdfb32fe20 SendMessageW 210->213 215 7ffdfb2bf017-7ffdfb2bf034 SetWindowPos 211->215 216 7ffdfb2bf03a-7ffdfb2bf057 call 7ffdfb2bf330 211->216 212->208 214 7ffdfb2beeef-7ffdfb2bef07 SetWindowLongPtrW 212->214 213->211 217 7ffdfb2bef68-7ffdfb2bef76 SetMenu DestroyWindow 214->217 218 7ffdfb2bef09-7ffdfb2bef2b 214->218 215->216 224 7ffdfb2bf059-7ffdfb2bf068 SendMessageW 216->224 225 7ffdfb2bf06e-7ffdfb2bf079 216->225 217->208 218->217 227 7ffdfb2bef2d 218->227 224->225 228 7ffdfb2bf07b-7ffdfb2bf08b SendMessageW 225->228 229 7ffdfb2bf091-7ffdfb2bf09b 225->229 232 7ffdfb2bef30-7ffdfb2bef34 227->232 228->229 230 7ffdfb2bf109-7ffdfb2bf113 229->230 231 7ffdfb2bf09d-7ffdfb2bf0bb SendMessageW 229->231 235 7ffdfb2bf115-7ffdfb2bf126 SetMenu 230->235 236 7ffdfb2bf12d-7ffdfb2bf130 230->236 233 7ffdfb2bf0fd-7ffdfb2bf104 call 7ffdfb2bcf40 231->233 234 7ffdfb2bf0bd-7ffdfb2bf0f6 231->234 237 7ffdfb2bef36-7ffdfb2bef3d 232->237 238 7ffdfb2bef5c-7ffdfb2bef66 232->238 233->230 234->233 235->236 241 7ffdfb2bf18f-7ffdfb2bf1c6 SetActiveWindow 236->241 242 7ffdfb2bf132-7ffdfb2bf138 236->242 237->238 243 7ffdfb2bef3f-7ffdfb2bef56 SetParent 237->243 238->217 238->232 248 7ffdfb2bf1de-7ffdfb2bf1f7 call 7ffdfb39d4a0 241->248 246 7ffdfb2bf13a-7ffdfb2bf148 242->246 247 7ffdfb2bf182-7ffdfb2bf189 242->247 243->238 246->247 249 7ffdfb2bf14a-7ffdfb2bf14d 246->249 247->241 251 7ffdfb2bf150-7ffdfb2bf154 249->251 253 7ffdfb2bf176-7ffdfb2bf180 251->253 254 7ffdfb2bf156-7ffdfb2bf15d 251->254 253->247 253->251 254->253 255 7ffdfb2bf15f-7ffdfb2bf172 call 7ffdfb2bea00 call 7ffdfb2bf330 254->255 255->253
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MessageSendWindow$FocusForegroundLong
                                                                                                                        • String ID: UpdateWrapper: Cannot find container window$UpdateWrapper: Container was destroyed
                                                                                                                        • API String ID: 2937761121-1156326135
                                                                                                                        • Opcode ID: a8c1eb03003301c414bd30ac302964574706fa2371894889131fb55fb1a90a9d
                                                                                                                        • Instruction ID: 40077b2d6ccb51f2680b57cff8bd6e0b2db4ce781a042732bebb91689c46e092
                                                                                                                        • Opcode Fuzzy Hash: a8c1eb03003301c414bd30ac302964574706fa2371894889131fb55fb1a90a9d
                                                                                                                        • Instruction Fuzzy Hash: CAF13D32706A8386E7649F25E464BA973A0FB88B99F048535CF6D477E8DF3CE4558B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB386370 Relevance: 47.5, APIs: 9, Strings: 18, Instructions: 273windowregistryCOMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Window$Load$Icon$ClassCreateCursorHandleLongModuleRegisterShowUpdate
                                                                                                                        • String ID: 8.6$8.6.13$Button.border$P$Ttk$arrow$classic$downarrow$highlight$hsash$image$label$leftarrow$rightarrow$text$ttk::theme::classic$uparrow$vsash
                                                                                                                        • API String ID: 3723784198-2498008350
                                                                                                                        • Opcode ID: 00be10b94fce0a9a769e8a036279ef385926a26a53ab264b30358030e0d82707
                                                                                                                        • Instruction ID: f55e78ea250ca615027296bf88cb6a001bf67b6c97da432b98549e1701050920
                                                                                                                        • Opcode Fuzzy Hash: 00be10b94fce0a9a769e8a036279ef385926a26a53ab264b30358030e0d82707
                                                                                                                        • Instruction Fuzzy Hash: 19E14A65B4AB8796EB04AF61E860AB963E5FB48B84F404136ED5D07BB8DF3CE145C340
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB377230 Relevance: 28.2, APIs: 2, Strings: 14, Instructions: 157windowCOMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Create$BitmapBrushPattern
                                                                                                                        • String ID: 8.6$Button.border$Combobox.focus$Scrollbar.trough$Ttk$alt$border$client$field$focus$slider$thumb$ttk::theme::winnative$winnative
                                                                                                                        • API String ID: 3280665104-2094136981
                                                                                                                        • Opcode ID: 595afdcf97aeff6b3cbdb58ab7e9707d33f80bc2ef0d63c850dc3ab6ed55cbd0
                                                                                                                        • Instruction ID: 1f1d72bd64a7951c21ff085e0a42ecd53ac6445647b66c587956a6bd782a7b9c
                                                                                                                        • Opcode Fuzzy Hash: 595afdcf97aeff6b3cbdb58ab7e9707d33f80bc2ef0d63c850dc3ab6ed55cbd0
                                                                                                                        • Instruction Fuzzy Hash: 6A711975B8AB8782EB14AF65E8249A967E1FB48B88F404136D96D077B9DF3CE104C740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB31F910 Relevance: 24.5, APIs: 2, Strings: 14, Instructions: 506stringCOMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 528 7ffdfb31f910-7ffdfb31f95d 530 7ffdfb31f963-7ffdfb31f968 528->530 531 7ffdfb31fa1b-7ffdfb31fa2a 528->531 534 7ffdfb31f970-7ffdfb31f990 530->534 532 7ffdfb31fa30-7ffdfb31fa37 531->532 533 7ffdfb31fae1 531->533 535 7ffdfb31fae3-7ffdfb31faea 532->535 536 7ffdfb31fa3d-7ffdfb31fa3f 532->536 533->535 541 7ffdfb31f992-7ffdfb31f995 534->541 542 7ffdfb31fa04 534->542 537 7ffdfb31faef-7ffdfb31fb4a call 7ffdfb374ed0 call 7ffdfb339210 535->537 538 7ffdfb31faec 535->538 536->535 553 7ffdfb31fb9d-7ffdfb31fba7 537->553 554 7ffdfb31fb4c 537->554 538->537 541->542 545 7ffdfb31f997-7ffdfb31f99b 541->545 543 7ffdfb31fa09-7ffdfb31fa15 542->543 543->531 543->534 547 7ffdfb31f99d-7ffdfb31f9b2 strncmp 545->547 548 7ffdfb31f9d1-7ffdfb31f9d8 545->548 547->548 550 7ffdfb31f9b4-7ffdfb31f9ba 547->550 548->542 551 7ffdfb31f9da-7ffdfb31f9ec strncmp 548->551 555 7ffdfb31f9c0-7ffdfb31f9cf 550->555 556 7ffdfb31fa44-7ffdfb31fa53 550->556 551->542 552 7ffdfb31f9ee-7ffdfb31f9f4 551->552 557 7ffdfb31fac6-7ffdfb31fadc 552->557 558 7ffdfb31f9fa-7ffdfb31fa00 552->558 563 7ffdfb31fbc0-7ffdfb31fbc3 553->563 564 7ffdfb31fba9-7ffdfb31fbac 553->564 561 7ffdfb31fb4f-7ffdfb31fb52 554->561 555->543 565 7ffdfb31fa5a-7ffdfb31fac1 556->565 557->565 558->542 566 7ffdfb31fb70-7ffdfb31fb73 561->566 567 7ffdfb31fb54-7ffdfb31fb5e 561->567 572 7ffdfb31fc10-7ffdfb31fc13 563->572 573 7ffdfb31fbc5-7ffdfb31fbdf 563->573 564->563 571 7ffdfb31fbae-7ffdfb31fbb8 564->571 581 7ffdfb320112-7ffdfb32012c 565->581 569 7ffdfb31fb93-7ffdfb31fb98 566->569 570 7ffdfb31fb75-7ffdfb31fb81 566->570 567->566 568 7ffdfb31fb60-7ffdfb31fb67 567->568 568->566 575 7ffdfb32010a 569->575 570->569 574 7ffdfb31fb83-7ffdfb31fb8a 570->574 571->563 576 7ffdfb31fc15-7ffdfb31fc2a 572->576 577 7ffdfb31fc5b-7ffdfb31fc6c call 7ffdfb3202b0 572->577 583 7ffdfb31fbe1-7ffdfb31fbe5 573->583 584 7ffdfb31fbe7 573->584 574->569 575->581 591 7ffdfb31fc32 576->591 592 7ffdfb31fc2c-7ffdfb31fc30 576->592 589 7ffdfb31fc6e-7ffdfb31fcb4 577->589 590 7ffdfb31fcb9-7ffdfb31fcc0 577->590 588 7ffdfb31fbea-7ffdfb31fbf1 583->588 584->588 594 7ffdfb31fbf3-7ffdfb31fbfd 588->594 595 7ffdfb31fc0c 588->595 589->561 597 7ffdfb31febe 590->597 598 7ffdfb31fcc6-7ffdfb31fcc9 590->598 596 7ffdfb31fc35-7ffdfb31fc3c 591->596 592->596 594->595 603 7ffdfb31fbff 594->603 595->572 599 7ffdfb31fc3e-7ffdfb31fc48 596->599 600 7ffdfb31fc57 596->600 605 7ffdfb31fec1-7ffdfb31fec6 597->605 601 7ffdfb31fcd5-7ffdfb31fcf1 598->601 602 7ffdfb31fccb-7ffdfb31fccf 598->602 599->600 606 7ffdfb31fc4a 599->606 600->577 616 7ffdfb31fd51-7ffdfb31fd6b 601->616 617 7ffdfb31fcf3-7ffdfb31fd4c 601->617 602->597 602->601 603->595 607 7ffdfb31ffce-7ffdfb31ffd6 605->607 608 7ffdfb31fecc-7ffdfb31fed3 605->608 606->600 610 7ffdfb31ffe6-7ffdfb31ffef 607->610 611 7ffdfb31ffd8-7ffdfb31ffe2 607->611 608->607 613 7ffdfb31fed9-7ffdfb31fedc 608->613 618 7ffdfb31fffe 610->618 619 7ffdfb31fff1 610->619 611->610 614 7ffdfb31fede-7ffdfb31fee2 613->614 615 7ffdfb31fee8-7ffdfb31ff1c call 7ffdfb320a90 613->615 614->607 614->615 615->561 632 7ffdfb31ff22-7ffdfb31ff38 call 7ffdfb3202b0 615->632 616->561 629 7ffdfb31fd71-7ffdfb31fd95 616->629 617->561 622 7ffdfb320002-7ffdfb320009 618->622 619->618 621 7ffdfb31fff3-7ffdfb31fffc 619->621 621->618 621->622 626 7ffdfb320021-7ffdfb320039 622->626 627 7ffdfb32000b 622->627 630 7ffdfb320065-7ffdfb32006c 626->630 631 7ffdfb32003b 626->631 633 7ffdfb320010-7ffdfb32001f call 7ffdfb322e30 627->633 646 7ffdfb31fea7-7ffdfb31feb9 629->646 647 7ffdfb31fd9b-7ffdfb31fddb call 7ffdfb320680 629->647 636 7ffdfb32006e-7ffdfb320078 630->636 637 7ffdfb32008a-7ffdfb32008d 630->637 634 7ffdfb320040-7ffdfb320063 631->634 632->589 649 7ffdfb31ff3e-7ffdfb31ff4a 632->649 633->626 634->630 636->637 642 7ffdfb32007a-7ffdfb320081 636->642 643 7ffdfb3200ad-7ffdfb3200c6 637->643 644 7ffdfb32008f-7ffdfb32009b 637->644 642->637 652 7ffdfb320108 643->652 653 7ffdfb3200c8-7ffdfb3200e9 643->653 644->643 651 7ffdfb32009d-7ffdfb3200a4 644->651 646->561 647->646 667 7ffdfb31fde1-7ffdfb31fdf7 call 7ffdfb3202b0 647->667 655 7ffdfb31ff77-7ffdfb31ffaf call 7ffdfb31a940 649->655 656 7ffdfb31ff4c-7ffdfb31ff4f 649->656 651->643 652->575 653->652 657 7ffdfb3200eb 653->657 664 7ffdfb31ffb2-7ffdfb31ffb4 655->664 660 7ffdfb31ff51-7ffdfb31ff61 656->660 661 7ffdfb31ff64-7ffdfb31ff74 656->661 658 7ffdfb3200f0-7ffdfb3200f7 657->658 665 7ffdfb320104 658->665 666 7ffdfb3200f9-7ffdfb320100 658->666 660->661 661->655 664->561 668 7ffdfb31ffba-7ffdfb31ffca 664->668 665->652 666->658 669 7ffdfb320102 666->669 675 7ffdfb31fe10-7ffdfb31fe19 667->675 676 7ffdfb31fdf9-7ffdfb31fe0b 667->676 668->607 669->652 677 7ffdfb31fe33-7ffdfb31fe8b 675->677 678 7ffdfb31fe1b-7ffdfb31fe1e 675->678 676->589 677->561 684 7ffdfb31fe91-7ffdfb31fea5 677->684 678->677 680 7ffdfb31fe20-7ffdfb31fe30 678->680 680->677 684->605
                                                                                                                        APIs
                                                                                                                        • strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB31F9AA
                                                                                                                        • strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB31F9E4
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: -data$-format$-translation$IMAGE$MALLOC$MISSING_VALUE$PHOTO$PHOTO_FILE$SAFE$binary$can't get image from a file in a safe interpreter$not enough free memory for image buffer$value for "-data" missing$value for "-format" missing
                                                                                                                        • API String ID: 1114863663-986971618
                                                                                                                        • Opcode ID: 88a4bbb6b428bfc84c012095e311dbac06624f60c1ce6c9db10d234cc608cf04
                                                                                                                        • Instruction ID: 5898cbb1c700e14bd64cdf4d8c2129748eb1c33c5343c582b3d39ce8539a3e5f
                                                                                                                        • Opcode Fuzzy Hash: 88a4bbb6b428bfc84c012095e311dbac06624f60c1ce6c9db10d234cc608cf04
                                                                                                                        • Instruction Fuzzy Hash: 7D326836B4AB8297EB54AB16E464A7977E4FB45B84F049132CE5E037A8DF3CE454CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C41F0 Relevance: 19.8, APIs: 13, Instructions: 256windowCOMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 810 7ffdfb2c41f0-7ffdfb2c421f 811 7ffdfb2c4251-7ffdfb2c42c8 AdjustWindowRectEx 810->811 812 7ffdfb2c4221-7ffdfb2c4229 IsIconic 810->812 813 7ffdfb2c42ca-7ffdfb2c42d1 811->813 814 7ffdfb2c42d3-7ffdfb2c42da 811->814 815 7ffdfb2c4610-7ffdfb2c4624 call 7ffdfb39d4a0 812->815 816 7ffdfb2c422f-7ffdfb2c423b IsZoomed 812->816 819 7ffdfb2c42f0-7ffdfb2c4317 813->819 818 7ffdfb2c42dc-7ffdfb2c42e9 814->818 814->819 816->815 820 7ffdfb2c4241-7ffdfb2c424b 816->820 818->819 822 7ffdfb2c4347-7ffdfb2c4349 819->822 823 7ffdfb2c4319-7ffdfb2c4338 819->823 820->811 820->815 826 7ffdfb2c434b-7ffdfb2c434d 822->826 827 7ffdfb2c434f-7ffdfb2c4351 822->827 824 7ffdfb2c4345 823->824 825 7ffdfb2c433a-7ffdfb2c4343 823->825 824->822 825->822 828 7ffdfb2c4358-7ffdfb2c4361 826->828 827->828 829 7ffdfb2c4353-7ffdfb2c4355 827->829 830 7ffdfb2c436c-7ffdfb2c436f 828->830 831 7ffdfb2c4363-7ffdfb2c436a 828->831 829->828 832 7ffdfb2c4385-7ffdfb2c439a 830->832 833 7ffdfb2c4371-7ffdfb2c437e 830->833 831->832 834 7ffdfb2c439c-7ffdfb2c43bb 832->834 835 7ffdfb2c43ca-7ffdfb2c43cc 832->835 833->832 836 7ffdfb2c43c8 834->836 837 7ffdfb2c43bd-7ffdfb2c43c6 834->837 838 7ffdfb2c43ce-7ffdfb2c43d0 835->838 839 7ffdfb2c43d2-7ffdfb2c43d4 835->839 836->835 837->835 841 7ffdfb2c43db-7ffdfb2c43eb 838->841 840 7ffdfb2c43d6-7ffdfb2c43d8 839->840 839->841 840->841 842 7ffdfb2c4417 841->842 843 7ffdfb2c43ed-7ffdfb2c4415 841->843 844 7ffdfb2c441e-7ffdfb2c4427 842->844 843->844 845 7ffdfb2c4429-7ffdfb2c444d 844->845 846 7ffdfb2c444f 844->846 847 7ffdfb2c4456-7ffdfb2c4459 845->847 846->847 848 7ffdfb2c445b-7ffdfb2c4461 847->848 849 7ffdfb2c446f-7ffdfb2c448b 847->849 848->849 850 7ffdfb2c4463-7ffdfb2c4469 848->850 851 7ffdfb2c448d-7ffdfb2c449d 849->851 852 7ffdfb2c44a2-7ffdfb2c44b8 849->852 850->849 853 7ffdfb2c45e9-7ffdfb2c460b 850->853 851->853 854 7ffdfb2c44ba-7ffdfb2c44e4 SendMessageW * 2 852->854 855 7ffdfb2c44e9-7ffdfb2c453a GetSystemMetrics MoveWindow GetWindowRect 852->855 853->815 856 7ffdfb2c45e2 854->856 857 7ffdfb2c4540-7ffdfb2c4559 GetClientRect 855->857 858 7ffdfb2c45cf-7ffdfb2c45d6 855->858 856->853 857->858 859 7ffdfb2c455b-7ffdfb2c4571 857->859 858->856 860 7ffdfb2c45d8-7ffdfb2c45dc DrawMenuBar 858->860 861 7ffdfb2c45b3-7ffdfb2c45c9 MoveWindow 859->861 862 7ffdfb2c4573-7ffdfb2c45af MoveWindow GetWindowRect 859->862 860->856 861->858 862->857 863 7ffdfb2c45b1 862->863 863->858
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Window$Rect$MessageMoveSend$AdjustClientDrawIconicMenuMetricsSystemZoomed
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 722483491-0
                                                                                                                        • Opcode ID: 495ed12d78907cfef7eb447af979a4bff3f0ee69545569bdfd67532877d6dc44
                                                                                                                        • Instruction ID: 1ddfd8ad62f0c6fa72237e6f252bb5cb340b7af4374b076f29ad6f11aa83af20
                                                                                                                        • Opcode Fuzzy Hash: 495ed12d78907cfef7eb447af979a4bff3f0ee69545569bdfd67532877d6dc44
                                                                                                                        • Instruction Fuzzy Hash: D6C1DF7371A6828AE7108F25D454B7E77A0FB84B98F194135CE699B7ACDF38E840CB10
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2B5080 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 273COMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 864 7ffdfb2b5080-7ffdfb2b50f0 SelectObject 865 7ffdfb2b50fa-7ffdfb2b5130 GetFontData 864->865 866 7ffdfb2b50f2-7ffdfb2b50f7 864->866 867 7ffdfb2b5136-7ffdfb2b513d 865->867 868 7ffdfb2b540a-7ffdfb2b5415 GetTextCharset 865->868 866->865 871 7ffdfb2b515a 867->871 872 7ffdfb2b513f-7ffdfb2b5158 867->872 869 7ffdfb2b5417-7ffdfb2b5445 868->869 870 7ffdfb2b5449-7ffdfb2b548b SelectObject call 7ffdfb39d4a0 868->870 869->870 873 7ffdfb2b515f-7ffdfb2b5168 871->873 872->873 873->870 875 7ffdfb2b516e 873->875 878 7ffdfb2b5173-7ffdfb2b5193 GetFontData 875->878 879 7ffdfb2b5195-7ffdfb2b5209 878->879 880 7ffdfb2b520b-7ffdfb2b5216 878->880 882 7ffdfb2b521c-7ffdfb2b5221 879->882 880->882 883 7ffdfb2b5227-7ffdfb2b522b 882->883 884 7ffdfb2b53ec-7ffdfb2b5402 882->884 886 7ffdfb2b5235-7ffdfb2b523a 883->886 887 7ffdfb2b522d-7ffdfb2b5233 883->887 884->878 885 7ffdfb2b5408 884->885 885->870 886->884 888 7ffdfb2b5240-7ffdfb2b5264 GetFontData 886->888 887->888 889 7ffdfb2b5266-7ffdfb2b5280 888->889 890 7ffdfb2b5282 888->890 891 7ffdfb2b5287-7ffdfb2b528b 889->891 890->891 891->884 892 7ffdfb2b5291-7ffdfb2b5294 891->892 893 7ffdfb2b52b5 892->893 894 7ffdfb2b5296-7ffdfb2b52b3 892->894 895 7ffdfb2b52ba-7ffdfb2b5320 GetFontData * 2 893->895 894->895 898 7ffdfb2b5381-7ffdfb2b5389 895->898 899 7ffdfb2b5322-7ffdfb2b5328 895->899 901 7ffdfb2b538b-7ffdfb2b5391 898->901 902 7ffdfb2b53e9 898->902 899->898 900 7ffdfb2b532a-7ffdfb2b5338 899->900 903 7ffdfb2b5340-7ffdfb2b537f 900->903 901->902 904 7ffdfb2b5393-7ffdfb2b53a9 901->904 902->884 903->898 903->903 905 7ffdfb2b53b0-7ffdfb2b53be 904->905 906 7ffdfb2b53d6-7ffdfb2b53e0 905->906 907 7ffdfb2b53c0-7ffdfb2b53cc 905->907 906->905 908 7ffdfb2b53e2-7ffdfb2b53e7 906->908 907->906 909 7ffdfb2b53ce-7ffdfb2b53d3 907->909 908->884 909->906
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: DataFont$ObjectSelect$CharsetText
                                                                                                                        • String ID: cmap$pamc
                                                                                                                        • API String ID: 447340330-4234804082
                                                                                                                        • Opcode ID: ec84b9646085c3d108542de55fb4130f4f5abe04bf002ab4018fca5ab658880f
                                                                                                                        • Instruction ID: 964efae4c27b52822592e3fa0d181ec1e5226979b3c285bd90873342f01fd975
                                                                                                                        • Opcode Fuzzy Hash: ec84b9646085c3d108542de55fb4130f4f5abe04bf002ab4018fca5ab658880f
                                                                                                                        • Instruction Fuzzy Hash: D1B1F0667092928BD3588F16E460A7EB7E1FB94B45F408031EE998BBA8DF7CD445CF00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2B1ED0 Relevance: 63.2, APIs: 27, Strings: 9, Instructions: 183COMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Object$CreateDeleteFontIndirect$InfoParametersSystem$CapsDeviceReleaseStockmemset
                                                                                                                        • String ID: TkCaptionFont$TkDefaultFont$TkFixedFont$TkHeadingFont$TkIconFont$TkMenuFont$TkSmallCaptionFont$TkTextFont$TkTooltipFont
                                                                                                                        • API String ID: 3615235001-2508811397
                                                                                                                        • Opcode ID: 9c687f750b7356c42ba4938a7190df53978121951853168e0c7d8d247ca50426
                                                                                                                        • Instruction ID: b9e69ffd0c89a27b2e2c773e61844a03564fd10000a016e56172bb316c7ab471
                                                                                                                        • Opcode Fuzzy Hash: 9c687f750b7356c42ba4938a7190df53978121951853168e0c7d8d247ca50426
                                                                                                                        • Instruction Fuzzy Hash: CB814025B56A438BEB10EB62E864BE923A1FB48B89F404135DD1E577B8DF3CE149C740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB319B70 Relevance: 56.5, APIs: 1, Strings: 31, Instructions: 510COMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 32 7ffdfb319b70-7ffdfb319bba call 7ffdfb318680 35 7ffdfb319f2d 32->35 36 7ffdfb319bc0-7ffdfb319bd8 32->36 37 7ffdfb319f32-7ffdfb319f64 call 7ffdfb39d4a0 35->37 38 7ffdfb319bde-7ffdfb319bfd 36->38 39 7ffdfb319d0c-7ffdfb319d2e call 7ffdfb318080 36->39 38->35 45 7ffdfb319c03-7ffdfb319c08 38->45 39->35 46 7ffdfb319d34-7ffdfb319d42 39->46 45->39 47 7ffdfb319c0e-7ffdfb319c1d 45->47 48 7ffdfb319ff8-7ffdfb319ffb 46->48 49 7ffdfb319d48-7ffdfb319d53 46->49 52 7ffdfb319c20-7ffdfb319c42 _stricmp 47->52 50 7ffdfb31a001-7ffdfb31a034 48->50 51 7ffdfb319e38-7ffdfb319e3e 48->51 53 7ffdfb319fc0-7ffdfb319ff3 49->53 54 7ffdfb319d59-7ffdfb319d60 49->54 81 7ffdfb319efe-7ffdfb319f24 50->81 55 7ffdfb319e40-7ffdfb319e58 call 7ffdfb318ad0 51->55 56 7ffdfb319e8a-7ffdfb319e90 51->56 68 7ffdfb319c48-7ffdfb319c84 52->68 69 7ffdfb319cec-7ffdfb319cf1 52->69 53->81 57 7ffdfb319d66-7ffdfb319d6c 54->57 58 7ffdfb319f88-7ffdfb319fbb 54->58 55->35 77 7ffdfb319e5e-7ffdfb319e80 call 7ffdfb318080 55->77 60 7ffdfb319e96-7ffdfb319ec9 56->60 61 7ffdfb31a039-7ffdfb31a063 call 7ffdfb322250 56->61 57->58 64 7ffdfb319d72-7ffdfb319d85 57->64 58->81 60->81 61->35 82 7ffdfb31a069-7ffdfb31a082 61->82 64->58 71 7ffdfb319d8b-7ffdfb319dab call 7ffdfb317b00 64->71 68->35 90 7ffdfb319c8a-7ffdfb319c91 68->90 73 7ffdfb319cf5-7ffdfb319d06 69->73 71->35 86 7ffdfb319db1-7ffdfb319dc4 call 7ffdfb317ef0 71->86 73->39 73->52 77->35 91 7ffdfb319e86 77->91 81->35 88 7ffdfb31a084-7ffdfb31a0b0 82->88 89 7ffdfb31a0bc-7ffdfb31a0c9 82->89 86->35 103 7ffdfb319dca-7ffdfb319dcf 86->103 88->89 93 7ffdfb31a0d5-7ffdfb31a0fb 89->93 94 7ffdfb31a0cb-7ffdfb31a0d3 89->94 95 7ffdfb319f65-7ffdfb319f86 90->95 96 7ffdfb319c97-7ffdfb319cb0 90->96 91->56 99 7ffdfb31a0fd 93->99 100 7ffdfb31a107-7ffdfb31a14a 93->100 98 7ffdfb31a101 94->98 95->35 96->73 102 7ffdfb319cb2-7ffdfb319ccc 96->102 98->100 99->98 120 7ffdfb31a19c-7ffdfb31a1a0 100->120 121 7ffdfb31a14c-7ffdfb31a197 100->121 102->35 110 7ffdfb319cd2-7ffdfb319cd7 102->110 106 7ffdfb319dd1-7ffdfb319ddb 103->106 107 7ffdfb319e08-7ffdfb319e2e call 7ffdfb318080 103->107 111 7ffdfb319de0-7ffdfb319e06 106->111 107->35 117 7ffdfb319e34 107->117 113 7ffdfb319cdd-7ffdfb319ce6 110->113 114 7ffdfb319ecb-7ffdfb319ef7 110->114 111->107 111->111 113->69 113->114 114->81 117->51 122 7ffdfb31a1a2-7ffdfb31a1b9 120->122 123 7ffdfb31a1e1-7ffdfb31a1ed 120->123 121->35 125 7ffdfb31a1c2-7ffdfb31a1cb 122->125 126 7ffdfb31a1bb-7ffdfb31a1c0 122->126 127 7ffdfb31a1f0-7ffdfb31a200 call 7ffdfb3198e0 123->127 129 7ffdfb31a1ce-7ffdfb31a1dd 125->129 126->129 134 7ffdfb31a205-7ffdfb31a208 127->134 132 7ffdfb31a1df 129->132 133 7ffdfb31a242-7ffdfb31a258 129->133 132->127 140 7ffdfb31a290-7ffdfb31a296 133->140 141 7ffdfb31a25a-7ffdfb31a284 133->141 134->35 135 7ffdfb31a20e-7ffdfb31a230 call 7ffdfb318080 134->135 135->35 142 7ffdfb31a236-7ffdfb31a240 135->142 143 7ffdfb31a2f0-7ffdfb31a2f5 140->143 144 7ffdfb31a298 140->144 141->140 142->127 142->133 145 7ffdfb31a32f-7ffdfb31a342 call 7ffdfb317ef0 143->145 146 7ffdfb31a2f7-7ffdfb31a323 143->146 148 7ffdfb31a2a0-7ffdfb31a2b8 call 7ffdfb317fd0 144->148 145->35 156 7ffdfb31a348-7ffdfb31a351 145->156 146->145 148->35 155 7ffdfb31a2be-7ffdfb31a2e0 call 7ffdfb318080 148->155 155->35 166 7ffdfb31a2e6-7ffdfb31a2ee 155->166 159 7ffdfb31a353 156->159 160 7ffdfb31a359-7ffdfb31a371 156->160 159->160 161 7ffdfb31a3e0-7ffdfb31a417 call 7ffdfb320e40 159->161 160->161 162 7ffdfb31a373-7ffdfb31a377 160->162 161->37 164 7ffdfb31a3ba-7ffdfb31a3bf 162->164 165 7ffdfb31a379 162->165 169 7ffdfb31a3c0-7ffdfb31a3de 164->169 168 7ffdfb31a380-7ffdfb31a3b6 165->168 166->143 166->148 168->168 171 7ffdfb31a3b8 168->171 169->161 169->169 171->161
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memcmp$_stricmp
                                                                                                                        • String ID: -alpha value must be between 0.0 and 1.0$BAD_ALPHA$BAD_IEND$BAD_PLTE$DNEI$DNEI$ETLP$EXTRA_DATA$IEND chunk contents must be empty$IMAGE$LINE_SIZE$MALLOC$NEED_IDAT$NEED_PLTE$PLTE chunk required for indexed color$PLTE chunk type forbidden for grayscale$PLTE_UNEXPECTED$PNG$SNRt$TADI$TADI$TADI$VUUU$at least one IDAT chunk is required$invalid palette chunk size$line size is out of supported range on this architecture$memory allocation failed$option$png$unfinalized data stream in PNG data$value
                                                                                                                        • API String ID: 190063134-2027502129
                                                                                                                        • Opcode ID: 52663cf352a29ee30a462647e0a8c9e1154b432b6d36a823b780c763fe36adbb
                                                                                                                        • Instruction ID: 5bf87e153012e44086d1fdb2a0f525df21099daefdb10aed3329ca43af73a498
                                                                                                                        • Opcode Fuzzy Hash: 52663cf352a29ee30a462647e0a8c9e1154b432b6d36a823b780c763fe36adbb
                                                                                                                        • Instruction Fuzzy Hash: 1C32AD72B49A8296DB50AB29E460AB977E5FB46B84F045132DA6D077FCCF3CE845C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB307B7D Relevance: 36.3, APIs: 6, Strings: 18, Instructions: 337stringCOMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 327 7ffdfb307b7d-7ffdfb307b8b 328 7ffdfb307b90-7ffdfb307bb6 327->328 330 7ffdfb307bbc-7ffdfb307bc0 328->330 331 7ffdfb307cf0-7ffdfb307cf8 328->331 332 7ffdfb307bc2-7ffdfb307bc5 330->332 333 7ffdfb307bff-7ffdfb307c03 330->333 331->328 334 7ffdfb307cfe-7ffdfb307d06 331->334 332->333 337 7ffdfb307bc7-7ffdfb307bdc strncmp 332->337 335 7ffdfb307c05-7ffdfb307c08 333->335 336 7ffdfb307c40-7ffdfb307c44 333->336 338 7ffdfb307d1a-7ffdfb307dcf call 7ffdfb374ed0 call 7ffdfb373870 334->338 339 7ffdfb307d08-7ffdfb307d16 334->339 335->336 341 7ffdfb307c0a-7ffdfb307c1f strncmp 335->341 342 7ffdfb307c46-7ffdfb307c4a 336->342 343 7ffdfb307c7f-7ffdfb307c83 336->343 344 7ffdfb307bf8 337->344 345 7ffdfb307bde-7ffdfb307bf3 337->345 369 7ffdfb307dd5-7ffdfb307de2 338->369 370 7ffdfb308137 338->370 339->338 349 7ffdfb307c39 341->349 350 7ffdfb307c21-7ffdfb307c34 341->350 342->343 351 7ffdfb307c4c-7ffdfb307c61 strncmp 342->351 347 7ffdfb307c85-7ffdfb307c89 343->347 348 7ffdfb307cbe-7ffdfb307cc2 343->348 344->333 345->331 347->348 354 7ffdfb307c8b-7ffdfb307ca0 strncmp 347->354 348->331 355 7ffdfb307cc4-7ffdfb307cd9 strncmp 348->355 349->336 350->331 356 7ffdfb307c78 351->356 357 7ffdfb307c63-7ffdfb307c76 351->357 358 7ffdfb307cb7 354->358 359 7ffdfb307ca2-7ffdfb307cb5 354->359 355->331 361 7ffdfb307cdb-7ffdfb307ceb 355->361 356->343 357->331 358->348 359->331 361->331 372 7ffdfb307e16-7ffdfb307e2d call 7ffdfb30b480 call 7ffdfb33b2e0 369->372 373 7ffdfb307de4-7ffdfb307e00 call 7ffdfb33ac60 369->373 371 7ffdfb30813c-7ffdfb308162 370->371 381 7ffdfb307e2f-7ffdfb307e40 call 7ffdfb33ac60 372->381 382 7ffdfb307e4d-7ffdfb307e52 372->382 373->372 379 7ffdfb307e02-7ffdfb307e0e 373->379 379->372 386 7ffdfb307e45-7ffdfb307e4b 381->386 384 7ffdfb307e6a-7ffdfb307e72 382->384 385 7ffdfb307e54-7ffdfb307e5d call 7ffdfb2b14f0 382->385 388 7ffdfb307e74-7ffdfb307e8a call 7ffdfb33ac60 384->388 389 7ffdfb307e8d-7ffdfb307e90 384->389 390 7ffdfb307e62-7ffdfb307e64 385->390 386->382 386->384 388->389 392 7ffdfb307e92-7ffdfb307eae call 7ffdfb33ac60 389->392 393 7ffdfb307eb0-7ffdfb307ebe 389->393 390->384 396 7ffdfb30812f-7ffdfb308132 call 7ffdfb373b60 390->396 392->393 402 7ffdfb307ec0 392->402 395 7ffdfb307ec3-7ffdfb307ec6 393->395 399 7ffdfb307ec8-7ffdfb307eef call 7ffdfb371dd0 395->399 400 7ffdfb307f36-7ffdfb307f39 395->400 396->370 399->396 411 7ffdfb307ef5-7ffdfb307eff 399->411 404 7ffdfb307f3b-7ffdfb307f51 call 7ffdfb372490 400->404 405 7ffdfb307f62-7ffdfb307f76 400->405 402->395 404->396 416 7ffdfb307f57-7ffdfb307f5d call 7ffdfb374940 404->416 409 7ffdfb307f78-7ffdfb307f82 405->409 410 7ffdfb307f84-7ffdfb307fa2 405->410 409->410 413 7ffdfb307fb9-7ffdfb30803d memset 409->413 410->413 414 7ffdfb307fa4-7ffdfb307fab 410->414 411->400 415 7ffdfb307f01-7ffdfb307f28 411->415 422 7ffdfb308050-7ffdfb30809b call 7ffdfb2ffa40 call 7ffdfb2f6bf0 413->422 423 7ffdfb30803f-7ffdfb308049 413->423 414->413 418 7ffdfb307fad-7ffdfb307fb4 414->418 415->400 419 7ffdfb307f2a-7ffdfb307f30 415->419 416->405 418->413 419->400 422->396 428 7ffdfb3080a1-7ffdfb3080c6 call 7ffdfb3086a0 422->428 423->422 428->396 431 7ffdfb3080c8-7ffdfb3080ce 428->431 432 7ffdfb30818f-7ffdfb308193 431->432 433 7ffdfb3080d4-7ffdfb3080dc 431->433 434 7ffdfb308195-7ffdfb3081a3 432->434 435 7ffdfb3081ac-7ffdfb3081c9 call 7ffdfb338fa0 432->435 436 7ffdfb3080e2-7ffdfb308126 433->436 437 7ffdfb308187-7ffdfb30818a call 7ffdfb2b1770 433->437 434->435 435->371 436->396 437->432
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: -class$-colormap$-screen$-use$-visual$CONTAINMENT$Class$Colormap$FRAME$Use$Visual$class$colormap$use$v$visual$windows cannot have both the -use and the -container option set$b6
                                                                                                                        • API String ID: 1114863663-3606458496
                                                                                                                        • Opcode ID: 4d02020b86d784ae3018efff9a55b68e44859e77d7aba6e6cae09c7c0469aa18
                                                                                                                        • Instruction ID: dd41be9d4bea376ade66d936d304465032428964287a89b27570e4a41512f365
                                                                                                                        • Opcode Fuzzy Hash: 4d02020b86d784ae3018efff9a55b68e44859e77d7aba6e6cae09c7c0469aa18
                                                                                                                        • Instruction Fuzzy Hash: ECF14925B4AB8386EB54AB11E460AB927E0FF44BC8F084035CEAE477A9DF3CE454C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2AF420 Relevance: 33.5, APIs: 17, Strings: 2, Instructions: 231windowCOMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 444 7ffdfb2af420-7ffdfb2af45c call 7ffdfb2ae980 446 7ffdfb2af461-7ffdfb2af4a8 SetROP2 CreateCompatibleDC 444->446 447 7ffdfb2af4ae-7ffdfb2af4b2 446->447 448 7ffdfb2af5c4-7ffdfb2af5d6 446->448 449 7ffdfb2af4df-7ffdfb2af4ea 447->449 450 7ffdfb2af4b4-7ffdfb2af4b8 447->450 451 7ffdfb2af5d8 448->451 452 7ffdfb2af5dd-7ffdfb2af61a 448->452 454 7ffdfb2af4ec-7ffdfb2af4f1 449->454 455 7ffdfb2af4f3-7ffdfb2af4f5 449->455 450->449 453 7ffdfb2af4ba-7ffdfb2af4da CreateBitmap 450->453 451->452 460 7ffdfb2af61c-7ffdfb2af624 452->460 461 7ffdfb2af659 452->461 457 7ffdfb2af5a5-7ffdfb2af5bf SetTextColor SetBkColor 453->457 454->455 458 7ffdfb2af4f7-7ffdfb2af4fe 455->458 459 7ffdfb2af500-7ffdfb2af521 455->459 462 7ffdfb2af68d-7ffdfb2af690 457->462 458->459 468 7ffdfb2af57d-7ffdfb2af59b CreateBitmap 459->468 469 7ffdfb2af523-7ffdfb2af527 459->469 463 7ffdfb2af626-7ffdfb2af62d 460->463 464 7ffdfb2af65d-7ffdfb2af683 CreateDIBitmap 460->464 461->464 465 7ffdfb2af6a3-7ffdfb2af75a SelectObject BitBlt SelectObject DeleteObject DeleteDC SetBkMode SelectPalette RealizePalette 462->465 466 7ffdfb2af692-7ffdfb2af699 462->466 470 7ffdfb2af630-7ffdfb2af655 463->470 464->462 471 7ffdfb2af76b-7ffdfb2af76e 465->471 472 7ffdfb2af75c-7ffdfb2af769 ReleaseDC 465->472 466->465 468->457 473 7ffdfb2af530-7ffdfb2af542 469->473 470->470 474 7ffdfb2af657 470->474 475 7ffdfb2af779-7ffdfb2af798 471->475 476 7ffdfb2af770-7ffdfb2af773 DeleteDC 471->476 472->475 477 7ffdfb2af544-7ffdfb2af547 473->477 478 7ffdfb2af572-7ffdfb2af57b 473->478 474->464 476->475 479 7ffdfb2af549-7ffdfb2af54b 477->479 480 7ffdfb2af54d-7ffdfb2af551 477->480 478->468 478->473 481 7ffdfb2af566-7ffdfb2af570 479->481 482 7ffdfb2af560 480->482 483 7ffdfb2af553-7ffdfb2af55e 480->483 481->477 481->478 484 7ffdfb2af563 482->484 483->484 484->481
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CreatePaletteSelect$BitmapDeleteObject$ColorModeRealize$CompatibleReleaseText
                                                                                                                        • String ID: $Fail to allocate bitmap
                                                                                                                        • API String ID: 455095717-3619745282
                                                                                                                        • Opcode ID: 8778ffbcff5a117a04fd0fb90c51e92b525907cc7f02fb073bf2ac4a14a943ee
                                                                                                                        • Instruction ID: 71aca50f57b2c186fac99048576b86806cde81c4873a3f6a96ca2063a2ad659a
                                                                                                                        • Opcode Fuzzy Hash: 8778ffbcff5a117a04fd0fb90c51e92b525907cc7f02fb073bf2ac4a14a943ee
                                                                                                                        • Instruction Fuzzy Hash: D6A19B3671A6828BD724DF25E464A3977A5FB88F94F148125CE6E877A8CF3CE505CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2B3990 Relevance: 17.7, APIs: 8, Strings: 2, Instructions: 156COMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CharObjectSelectTextWidth$FaceMetricsRelease
                                                                                                                        • String ID: unicode$utf-16
                                                                                                                        • API String ID: 1149465119-3317161374
                                                                                                                        • Opcode ID: 859dd0d45fd38309a820ea38a72e84e0938acd80e00ccf0593fc54d9665a01c0
                                                                                                                        • Instruction ID: 323e660a6856921ec5a3694a2a7e26fe66b1528a792e5719929fe718ed2cec8d
                                                                                                                        • Opcode Fuzzy Hash: 859dd0d45fd38309a820ea38a72e84e0938acd80e00ccf0593fc54d9665a01c0
                                                                                                                        • Instruction Fuzzy Hash: B0718E76B0AA868ADB11DF26E4606A977A0FB48B94F044232DE5D437ACDF3CE445CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB320A90 Relevance: 16.7, APIs: 2, Strings: 9, Instructions: 191COMMON
                                                                                                                        Download Yara Rule

                                                                                                                        Control-flow Graph

                                                                                                                        • Executed
                                                                                                                        • Not Executed
                                                                                                                        control_flow_graph 935 7ffdfb320a90-7ffdfb320adf 937 7ffdfb320ae1-7ffdfb320af1 935->937 938 7ffdfb320af4-7ffdfb320b0a 935->938 937->938 939 7ffdfb320b82-7ffdfb320b94 938->939 940 7ffdfb320b0c 938->940 943 7ffdfb320cf4-7ffdfb320cf7 939->943 944 7ffdfb320b9a 939->944 941 7ffdfb320b10-7ffdfb320b13 940->941 945 7ffdfb320b15-7ffdfb320b1f 941->945 946 7ffdfb320b4c-7ffdfb320b53 941->946 947 7ffdfb320d5f-7ffdfb320da0 943->947 948 7ffdfb320cf9-7ffdfb320cfc 943->948 949 7ffdfb320ba0-7ffdfb320ba3 944->949 950 7ffdfb320b20-7ffdfb320b28 945->950 951 7ffdfb320b55-7ffdfb320b5a 946->951 952 7ffdfb320b79-7ffdfb320b80 946->952 973 7ffdfb320da7-7ffdfb320dbe 947->973 948->947 953 7ffdfb320cfe-7ffdfb320d3d 948->953 954 7ffdfb320ba9-7ffdfb320bac 949->954 955 7ffdfb320cac-7ffdfb320cb5 949->955 950->950 959 7ffdfb320b2a-7ffdfb320b35 _strnicmp 950->959 951->952 961 7ffdfb320b5c-7ffdfb320b6f call 7ffdfb31a7e0 951->961 952->939 952->941 953->973 956 7ffdfb320bb3-7ffdfb320bbb 954->956 957 7ffdfb320ce7-7ffdfb320cee 955->957 958 7ffdfb320cb7-7ffdfb320cbc 955->958 956->956 962 7ffdfb320bbd-7ffdfb320bc8 _strnicmp 956->962 957->943 957->949 958->957 963 7ffdfb320cbe-7ffdfb320ce5 958->963 959->952 964 7ffdfb320b37-7ffdfb320b40 959->964 970 7ffdfb320b71-7ffdfb320b73 961->970 962->957 966 7ffdfb320bce-7ffdfb320bdb 962->966 963->957 974 7ffdfb320d3f-7ffdfb320d5d 963->974 967 7ffdfb320c46-7ffdfb320ca7 964->967 968 7ffdfb320b46-7ffdfb320b4a 964->968 966->958 971 7ffdfb320be1-7ffdfb320c41 966->971 976 7ffdfb320dc3-7ffdfb320dd7 967->976 968->951 970->952 970->974 971->976 973->976 974->976
                                                                                                                        APIs
                                                                                                                        • _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB320B2D
                                                                                                                        • _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0 ref: 00007FFDFB320BC0
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _strnicmp
                                                                                                                        • String ID: -data option isn't supported for %s images$IMAGE$LOOKUP$NOT_DATA_FORMAT$PHOTO$PHOTO_FORMAT$UNRECOGNIZED_DATA$couldn't recognize image data$image format "%s" is not supported
                                                                                                                        • API String ID: 2635805826-3952471749
                                                                                                                        • Opcode ID: fe8a1428c86a6f4c259cb3c0ceaaefa02c52ef0184d486d7fe044d9d392678df
                                                                                                                        • Instruction ID: a58593e79bf2991d0d7352764f4c7147c3167974c01f853d14429d213eaf3c3c
                                                                                                                        • Opcode Fuzzy Hash: fe8a1428c86a6f4c259cb3c0ceaaefa02c52ef0184d486d7fe044d9d392678df
                                                                                                                        • Instruction Fuzzy Hash: 51912C65B4AA8786EB54AF11E460BA967E1FB48B98F444132CE6D473ECDF3CE548C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BD690 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 113registrywindowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: HandleLoadModule$ClassCursorIconRegister
                                                                                                                        • String ID: TkTopLevel$Unable to register TkTopLevel class
                                                                                                                        • API String ID: 1220223050-2494010311
                                                                                                                        • Opcode ID: d95be2fde495b25a383373344f9ea24be3c5431bd0b544cf80a4d0b24179be97
                                                                                                                        • Instruction ID: d6622dbc24be0fb8cb73853d1f37975129337286c8f642837162dc695d61bbc0
                                                                                                                        • Opcode Fuzzy Hash: d95be2fde495b25a383373344f9ea24be3c5431bd0b544cf80a4d0b24179be97
                                                                                                                        • Instruction Fuzzy Hash: 8E516F31B4AB8386EB189B10E4606B977A4FB84B84F118536D96E437F8DF3CE455CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C5C00 Relevance: 10.7, APIs: 7, Instructions: 225windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CompositionContextString$CountMessageProcReleaseSendTickWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 568510177-0
                                                                                                                        • Opcode ID: 3af1a7b433b6aa20c32006c3ac12bcb407cb63fe6fd156464f24aec8048010e5
                                                                                                                        • Instruction ID: c3c537df80d79d4060f4a5d2e4b19fa6c70acc8de3a2fe374b1656e5d997dab2
                                                                                                                        • Opcode Fuzzy Hash: 3af1a7b433b6aa20c32006c3ac12bcb407cb63fe6fd156464f24aec8048010e5
                                                                                                                        • Instruction Fuzzy Hash: 63A1DE62F1AB8386E714CB659464ABC27E1FB58BA8F044135EE6D837F9DF38E4518700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C5250 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 206windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Window$ClientLongMovePlacementRectVisible
                                                                                                                        • String ID: ,
                                                                                                                        • API String ID: 2284278383-3772416878
                                                                                                                        • Opcode ID: 5677b9517fb50ca5eb19b2c0f0437919f7ba2252812a8755d2510d2bf76a121a
                                                                                                                        • Instruction ID: cb422d94128838f4093071d01e901652fdded2364af27bf60d40d26bf1fb2cda
                                                                                                                        • Opcode Fuzzy Hash: 5677b9517fb50ca5eb19b2c0f0437919f7ba2252812a8755d2510d2bf76a121a
                                                                                                                        • Instruction Fuzzy Hash: FBA12972B056828BE768CF38D565B7D77A1FB44B68F144135DA2D876A8CF38E8508B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2B3E40 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 138COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ObjectSelect$FaceTextmemset
                                                                                                                        • String ID: unicode$utf-16
                                                                                                                        • API String ID: 920176757-3317161374
                                                                                                                        • Opcode ID: e7e2d39dda480d17febe76ba2aea890b954c2e7c0901f282c8aa1a49deda5bbe
                                                                                                                        • Instruction ID: fa2ba62b9e3b5ae8f6088a47c1a0344fa145245861e4eb1196ac6a7edf9ad77f
                                                                                                                        • Opcode Fuzzy Hash: e7e2d39dda480d17febe76ba2aea890b954c2e7c0901f282c8aa1a49deda5bbe
                                                                                                                        • Instruction Fuzzy Hash: 93516E7670AB8786EB149B11E8647A973E1FB48B94F448136DE6D477A8DF3CE064C340
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2A68D0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 66COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Window$CreateHandleLongModule
                                                                                                                        • String ID: BUTTON$STATIC
                                                                                                                        • API String ID: 4115577067-3385952364
                                                                                                                        • Opcode ID: 2bed71731eab65cce4ab4e9f0e18d46ba4b275ff4e7492dc4a64f194afd80a3f
                                                                                                                        • Instruction ID: 05cf891f5656314d0cde9c286bf621612dc84e1782da08078905bba53464b1c6
                                                                                                                        • Opcode Fuzzy Hash: 2bed71731eab65cce4ab4e9f0e18d46ba4b275ff4e7492dc4a64f194afd80a3f
                                                                                                                        • Instruction Fuzzy Hash: 25311836709B828BD750CF25E850A5AB7E5F748B88F14413AEA9D93B68DF3CE4518B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB31A940 Relevance: 9.1, APIs: 2, Strings: 4, Instructions: 94COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memset$_stricmp
                                                                                                                        • String ID: IMAGE$PNG$ZLIB_INIT$zlib initialization failed
                                                                                                                        • API String ID: 3026489053-4061978001
                                                                                                                        • Opcode ID: 5c1e9e4833572b630bd5c8ea07bf2014429ef1a6a9226aa2c39e0d034d789c0e
                                                                                                                        • Instruction ID: bb1a8e65e927504beeeffb95e118459453c246dfdf6d6c8fb8a43e0478bf75fa
                                                                                                                        • Opcode Fuzzy Hash: 5c1e9e4833572b630bd5c8ea07bf2014429ef1a6a9226aa2c39e0d034d789c0e
                                                                                                                        • Instruction Fuzzy Hash: 73418076B4AA8383E710AB11E560BB973A0FB89B85F444132DA6D47BA9DF3CD545CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2AE980 Relevance: 9.1, APIs: 6, Instructions: 65windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Palette$ModeRealizeSelect
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3073415821-0
                                                                                                                        • Opcode ID: 06f0baecdb756decac43179160e73aa0f29262ddb9304ed7c5d09c55bc936182
                                                                                                                        • Instruction ID: 63ffc616b8ac94b9a938028840dcd9d94f9e0e8ee949c6c48637b22c9d53650b
                                                                                                                        • Opcode Fuzzy Hash: 06f0baecdb756decac43179160e73aa0f29262ddb9304ed7c5d09c55bc936182
                                                                                                                        • Instruction Fuzzy Hash: 70317F26715B82C2DB54EF16E4A466DA364F748FC0F185032DE5E577A9CF3CE4518300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB375F50 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 112COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Window$ColorLongProc
                                                                                                                        • String ID: #%04X%04X%04X$Ttk
                                                                                                                        • API String ID: 3223664542-2938447076
                                                                                                                        • Opcode ID: b7beb31e0df3b080ec4497e91dcc1c8f8241d996f3c89413baac79b945f63759
                                                                                                                        • Instruction ID: 65bb0f2f2efc3c6816574e36a9f6d8c57955ac3ee63960b9c3fe2dc2ac912c19
                                                                                                                        • Opcode Fuzzy Hash: b7beb31e0df3b080ec4497e91dcc1c8f8241d996f3c89413baac79b945f63759
                                                                                                                        • Instruction Fuzzy Hash: 98519D36B5AA9682EB00AB15E864B7A77E1FB84BC4F504032DE6D477A8DF3CD454C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2D4570 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 272COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: DeleteObject
                                                                                                                        • String ID: GC already registered in Tk_GetGC$called GCInit after GCCleanup$gray50
                                                                                                                        • API String ID: 1531683806-823200916
                                                                                                                        • Opcode ID: d4f61a2dd53c3e6ce4fb164659ece5fc940a58531a88d74beaac1fd3d70e014c
                                                                                                                        • Instruction ID: e39d1c23001e41edfd3f0e5e5b35c4a14b4e120feb26e3ef5ac0066c8a53e977
                                                                                                                        • Opcode Fuzzy Hash: d4f61a2dd53c3e6ce4fb164659ece5fc940a58531a88d74beaac1fd3d70e014c
                                                                                                                        • Instruction Fuzzy Hash: 6CE13676B06B828AE710CF65D460BAC37A5F748B88F058136CE6D977A8DF38D454C740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2B3C50 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 111COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: DeleteObject
                                                                                                                        • String ID: unicode$utf-16
                                                                                                                        • API String ID: 1531683806-3317161374
                                                                                                                        • Opcode ID: 0756e2dfd691b1e934e4e5270af3a6727ba5a6b5723d1195d0da5b99e0b33e8b
                                                                                                                        • Instruction ID: c980023c90e8c9619b0bdd38d697e18cba99ad97e0d784b8c5823cde7869835a
                                                                                                                        • Opcode Fuzzy Hash: 0756e2dfd691b1e934e4e5270af3a6727ba5a6b5723d1195d0da5b99e0b33e8b
                                                                                                                        • Instruction Fuzzy Hash: 29515C3AB0AB8786DB449B06E5A467877A4FB84F80F058536CA2D477B8DF38E454C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BCDA0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 56COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Window$CreateHandleModule
                                                                                                                        • String ID: TkChild
                                                                                                                        • API String ID: 1084761317-227893619
                                                                                                                        • Opcode ID: c9fe2abb82e580163a2428423a825b6c84ae4f00c944f8885d94c984aa77f129
                                                                                                                        • Instruction ID: 77b87194b0589838ade4e2d69a953f7973944ff1ac465f7009bc431ad5a4c408
                                                                                                                        • Opcode Fuzzy Hash: c9fe2abb82e580163a2428423a825b6c84ae4f00c944f8885d94c984aa77f129
                                                                                                                        • Instruction Fuzzy Hash: 66210C76A097828BE764CF29E450A1ABBE1F748B84F144135EB9D83F68DF3CE4508B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB31CDE0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CreateDeleteIndirectObjectRectstrncmp
                                                                                                                        • String ID: tried to delete photo image when instances still exist
                                                                                                                        • API String ID: 3169462253-2722655475
                                                                                                                        • Opcode ID: 419782726299dbf6c91504e9da5d62b8177e7300e44eba71a79a818844e047fc
                                                                                                                        • Instruction ID: eb64b8a09c26302bf934cc4eec7049b9515de25d4f6c95bbbf7eb3bf86fca233
                                                                                                                        • Opcode Fuzzy Hash: 419782726299dbf6c91504e9da5d62b8177e7300e44eba71a79a818844e047fc
                                                                                                                        • Instruction Fuzzy Hash: 73516176B5AB8283EB10EB15E864A7833E8FB89B84F565131DE1D477A8DF38D444C300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C5CC0 Relevance: 4.6, APIs: 3, Instructions: 126COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: LongWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1378638983-0
                                                                                                                        • Opcode ID: a1e6ad4ea3411add519fa9eb8cf82d93a8a70270f0d3c039aa034d9a8afe12c1
                                                                                                                        • Instruction ID: 9cba8451efb88322cf422d7488c7c5e10cb518fb53e74c55f8aefe56bfc63072
                                                                                                                        • Opcode Fuzzy Hash: a1e6ad4ea3411add519fa9eb8cf82d93a8a70270f0d3c039aa034d9a8afe12c1
                                                                                                                        • Instruction Fuzzy Hash: 51518E76B0AB8387E7569F51E860AB97BA1FB487A4F144035DA6D43BACCF3CE4548600
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C60D4 Relevance: 4.6, APIs: 3, Instructions: 84windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: FocusMessageProcSendWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1049918876-0
                                                                                                                        • Opcode ID: a28c5906340cbd8dba03ecb1c669f7f3a0f2295e088e7b6a36978aab7d45cd75
                                                                                                                        • Instruction ID: b5f88990f79b106879882365be48a23482a9f6e2adf1336ada15fa21e4f0f323
                                                                                                                        • Opcode Fuzzy Hash: a28c5906340cbd8dba03ecb1c669f7f3a0f2295e088e7b6a36978aab7d45cd75
                                                                                                                        • Instruction Fuzzy Hash: AB319566B0AA4386EB678F54D860AB873A1FF44BA5F141031DA1D83BFDCF79E8558340
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C6520 Relevance: 4.6, APIs: 3, Instructions: 83windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Window$AdjustIconicMessageRectSendShowZoomed
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1553605848-0
                                                                                                                        • Opcode ID: ba368dd3b3d08e854c30df18118885776be7c4de02c2de1edd678b48d21df41a
                                                                                                                        • Instruction ID: 856b05b78f0fda758155f5fc549322b73f4a4b4195864d5850ca466e51fea805
                                                                                                                        • Opcode Fuzzy Hash: ba368dd3b3d08e854c30df18118885776be7c4de02c2de1edd678b48d21df41a
                                                                                                                        • Instruction Fuzzy Hash: C941B671B0968386E7668F15D864BB927A0FB84BA8F244035DA6D4B7ECCF7CE491C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33CCE0 Relevance: 3.9, APIs: 1, Strings: 1, Instructions: 418COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: bad frame factor in ArrangePacking
                                                                                                                        • API String ID: 0-4121849145
                                                                                                                        • Opcode ID: da2c3561bdb54c3055f988eb7722a3676269eda198c2d6ddac4b2784838315ab
                                                                                                                        • Instruction ID: f874959a286d5d5d7c5ffa18504b659fec2da5463852f28a978a193ef072e95e
                                                                                                                        • Opcode Fuzzy Hash: da2c3561bdb54c3055f988eb7722a3676269eda198c2d6ddac4b2784838315ab
                                                                                                                        • Instruction Fuzzy Hash: 6E02AE32B1A2928BC764DF19D154B6E77E0FB88B44F198135DE5943BA8CB39E881CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2D32B0 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 194COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • GetSystemMetrics.USER32 ref: 00007FFDFB2D32EA
                                                                                                                          • Part of subcall function 00007FFDFB2A6870: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FFDFB2A68BB
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MetricsSystem__stdio_common_vsprintf
                                                                                                                        • String ID: pathName ?-option value ...?
                                                                                                                        • API String ID: 2968932569-1831586811
                                                                                                                        • Opcode ID: 246e4a3e8c38a7b0815b22da340ce2a0966459d97e02a97ab6054007c486c478
                                                                                                                        • Instruction ID: 4095e6a1439e9faba5aea4ca8833a6027e4439c3e364f40a5ad0f4b0f9cf436e
                                                                                                                        • Opcode Fuzzy Hash: 246e4a3e8c38a7b0815b22da340ce2a0966459d97e02a97ab6054007c486c478
                                                                                                                        • Instruction Fuzzy Hash: 6AA12A7A606B8286D7409F21F9507DA33A8F748F8CF584139CE994B368DF38D069E354
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2A8350 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 54COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: ButtonProc called on an invalid HWND
                                                                                                                        • API String ID: 0-237202145
                                                                                                                        • Opcode ID: c30736873f5bf611dc5309c698b01d44c728c3bf6bfa2fa56b58abadda6ba518
                                                                                                                        • Instruction ID: ecaa2af0c82cccdcf613ecf26f6240d01993c19a2ed36e81f9fcfd10b0c3af71
                                                                                                                        • Opcode Fuzzy Hash: c30736873f5bf611dc5309c698b01d44c728c3bf6bfa2fa56b58abadda6ba518
                                                                                                                        • Instruction Fuzzy Hash: 73110862B0A74386FB159B16E870BB96394BF84B94F444031DD5D4B7FDEE3CE4468600
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2A842B Relevance: 3.0, APIs: 2, Instructions: 24COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Paint$Begin
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3787552996-0
                                                                                                                        • Opcode ID: 9fd992efd1b0deaf19a78b5c7727eccbc3fb7dc87f49c619d90c407faab77712
                                                                                                                        • Instruction ID: 813ec947fd219f3fd93a0d451dc2a1a50d5233ddae26b8270a6617793902d625
                                                                                                                        • Opcode Fuzzy Hash: 9fd992efd1b0deaf19a78b5c7727eccbc3fb7dc87f49c619d90c407faab77712
                                                                                                                        • Instruction Fuzzy Hash: 05F01216B4964392FB01AB11B4757B96351BB89B95F455031CD2F4A6A9DE3CE0468300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33AC60 Relevance: 2.7, APIs: 2, Instructions: 206stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strchrstrncpy
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3824778938-0
                                                                                                                        • Opcode ID: 6ba011300e732b7b233a468c1468cec9e14b461cebba7a79a8b27c0b68961da2
                                                                                                                        • Instruction ID: daa23ef587308b3e05905c79aca684d497417a00428aca1f6ab50d83b54fd23f
                                                                                                                        • Opcode Fuzzy Hash: 6ba011300e732b7b233a468c1468cec9e14b461cebba7a79a8b27c0b68961da2
                                                                                                                        • Instruction Fuzzy Hash: AA91AF36746A8687EB54DF19D460A6E77E0FB84F89B488431CE1E077B9DF38D8958700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB31A7E0 Relevance: 2.6, APIs: 2, Instructions: 82COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memset
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2221118986-0
                                                                                                                        • Opcode ID: a21565d3b1bd8f9bcab2ac970454b69758344bbb42b2eeeb318d61a694fbada9
                                                                                                                        • Instruction ID: 8f98273d10a5d9ceeb5a4d78b0b9e3c4c876409251a62175b8542c954c0cb575
                                                                                                                        • Opcode Fuzzy Hash: a21565d3b1bd8f9bcab2ac970454b69758344bbb42b2eeeb318d61a694fbada9
                                                                                                                        • Instruction Fuzzy Hash: 49315172B49A8686EB10EF15E460BA977E4FB89B84F045031DF5D477A9EF3CE4458B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB30EF40 Relevance: 1.8, APIs: 1, Instructions: 285COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MoveWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2234453006-0
                                                                                                                        • Opcode ID: f36a7b771d9287d190cc2a27129ebf3f907c1b2331ccb56ed6a1569907b68014
                                                                                                                        • Instruction ID: 46e9eed54f769ac81e58717151f63caa0baa0c1e1641e69df149a21abe6e3f4e
                                                                                                                        • Opcode Fuzzy Hash: f36a7b771d9287d190cc2a27129ebf3f907c1b2331ccb56ed6a1569907b68014
                                                                                                                        • Instruction Fuzzy Hash: B6C1DF37B196868BD764EF28D194A6D37E4FB84B88F094135DE99037A8CF38E840CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33D2B9 Relevance: 1.6, APIs: 1, Instructions: 90COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MoveWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2234453006-0
                                                                                                                        • Opcode ID: cb8e7ab5fdd193f8f94d236aaa42d47be34aa2e6e96563f7fc0755cf656f1edc
                                                                                                                        • Instruction ID: f8e80935171d7bc70c9c726e5da2bf3591ad027fb4296775629dc7ee2504f6c7
                                                                                                                        • Opcode Fuzzy Hash: cb8e7ab5fdd193f8f94d236aaa42d47be34aa2e6e96563f7fc0755cf656f1edc
                                                                                                                        • Instruction Fuzzy Hash: BF415E76B49682CBD760DF29E05476A77A0F784B94F184122DE9943BBCCF39E884CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB374255 Relevance: 1.6, APIs: 1, Instructions: 88COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Window
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2353593579-0
                                                                                                                        • Opcode ID: 36ffd885c79dfb69fc8fa6697619711ee2d51c805fbd8cbdaa83b20644380b8c
                                                                                                                        • Instruction ID: d915ba2d28c722efd280aefe7bf04bc1f92fb0724ff98e6cc042cede6eba9fa4
                                                                                                                        • Opcode Fuzzy Hash: 36ffd885c79dfb69fc8fa6697619711ee2d51c805fbd8cbdaa83b20644380b8c
                                                                                                                        • Instruction Fuzzy Hash: 18414C62B4A64382EB659F15A1A0B7867E1EB94F84F1A8036DE6D473A8DF38E450C710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33D23C Relevance: 1.6, APIs: 1, Instructions: 86COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MoveWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2234453006-0
                                                                                                                        • Opcode ID: b84cba83043d34279f43df5a5533b37e7e422f269afec6057bba3df07f12d8d4
                                                                                                                        • Instruction ID: 42e6c1284fe64a942437a2ef134338c59802bc03b608c1781a73dfc21ed19474
                                                                                                                        • Opcode Fuzzy Hash: b84cba83043d34279f43df5a5533b37e7e422f269afec6057bba3df07f12d8d4
                                                                                                                        • Instruction Fuzzy Hash: 3C412F76B49682CBD760DF69E05476A7BA0F784B98F144126DE99037BCCF39E884CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33D1D1 Relevance: 1.6, APIs: 1, Instructions: 85COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MoveWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2234453006-0
                                                                                                                        • Opcode ID: 67a801a71555985164219935c2b22a54800a9382c8f99c77e0d462c87f9da2d5
                                                                                                                        • Instruction ID: 5e97d43a36247195fe84ecf9c2816f2c6ae1a87512f0d46ff674a590147eca16
                                                                                                                        • Opcode Fuzzy Hash: 67a801a71555985164219935c2b22a54800a9382c8f99c77e0d462c87f9da2d5
                                                                                                                        • Instruction Fuzzy Hash: E6414E76B59682CBD760DF29E05476A77A0F784F94F144126DE9903BB8CF39E884CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33D296 Relevance: 1.6, APIs: 1, Instructions: 83COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MoveWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2234453006-0
                                                                                                                        • Opcode ID: d260301bf72e31e522f03ba1edd1ae325938edd90f31076aac8685bd03c92e58
                                                                                                                        • Instruction ID: 6fc245891ad99345037ce10b0bb052ddb2d82b15a000c73a2e4f790beca221dd
                                                                                                                        • Opcode Fuzzy Hash: d260301bf72e31e522f03ba1edd1ae325938edd90f31076aac8685bd03c92e58
                                                                                                                        • Instruction Fuzzy Hash: 25411B76B59682CBD760EF19E050B6A77E0F784B94F184126DE99437B8CF39E884CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33D177 Relevance: 1.6, APIs: 1, Instructions: 83COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MoveWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2234453006-0
                                                                                                                        • Opcode ID: c9ce851ecc015ea66da7ea672dd0b543ab3c976624d91d771fe30809b5ccf675
                                                                                                                        • Instruction ID: f9030ea835cefda312717c7364ea27687fc048b97564f76d1a6bb690ae7fdfc1
                                                                                                                        • Opcode Fuzzy Hash: c9ce851ecc015ea66da7ea672dd0b543ab3c976624d91d771fe30809b5ccf675
                                                                                                                        • Instruction Fuzzy Hash: 8D413C76B4A682CBD760EF59E05076A7BA0F784B94F084126DE59037BCCF39E884CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33D20A Relevance: 1.6, APIs: 1, Instructions: 82COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MoveWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2234453006-0
                                                                                                                        • Opcode ID: 3b7fb4d25c1e1c6dedb57ff25bc9cf215c214349485538398f13c7be18020daf
                                                                                                                        • Instruction ID: bd7d425ee9da9024688b47d255632d7664109f0801cb7b5d9fc0b3366b4364e9
                                                                                                                        • Opcode Fuzzy Hash: 3b7fb4d25c1e1c6dedb57ff25bc9cf215c214349485538398f13c7be18020daf
                                                                                                                        • Instruction Fuzzy Hash: 7E413D76B49682CBD7609F65E05476A7BA0F784B98F144126DE9D03BB8CF39E884CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33D274 Relevance: 1.6, APIs: 1, Instructions: 79COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MoveWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2234453006-0
                                                                                                                        • Opcode ID: 55f2ab09d778e80c3518a0b875e05479f3736250461c956e825fa31f984dfe0e
                                                                                                                        • Instruction ID: a164c062ee77577743c1fcecc4965e1e76445dad7d4edcca84bce785994735f9
                                                                                                                        • Opcode Fuzzy Hash: 55f2ab09d778e80c3518a0b875e05479f3736250461c956e825fa31f984dfe0e
                                                                                                                        • Instruction Fuzzy Hash: 5C410C76B49682CBD760AF55E05076A7BA0F784B98F144126DE5903BB8CF39E884CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33D1A7 Relevance: 1.6, APIs: 1, Instructions: 79COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MoveWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2234453006-0
                                                                                                                        • Opcode ID: 31d529fcbffae9900d3bb37daa2fcf46b9c0c3e213c22d94d6536b3bc7b109a2
                                                                                                                        • Instruction ID: db046d6aab800c83502271dfd7188f216a9c8d06436e5306636b2dfedcbee07e
                                                                                                                        • Opcode Fuzzy Hash: 31d529fcbffae9900d3bb37daa2fcf46b9c0c3e213c22d94d6536b3bc7b109a2
                                                                                                                        • Instruction Fuzzy Hash: 30410B76B49682CBD760EF55E05076A7BA0F784B98F144126DE5D13BB8CF39E884CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BCF40 Relevance: 1.6, APIs: 1, Instructions: 77COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ShowWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1268545403-0
                                                                                                                        • Opcode ID: 2a56dacb3386ef147778ecf52b70171ae3b42b012822174fb57a4fee3c21b108
                                                                                                                        • Instruction ID: 8cd3bf8973e137ff18b2345eb6bb227d300f81c57c4afb0f0db490c78c47c09d
                                                                                                                        • Opcode Fuzzy Hash: 2a56dacb3386ef147778ecf52b70171ae3b42b012822174fb57a4fee3c21b108
                                                                                                                        • Instruction Fuzzy Hash: 07311F327096468AEB64CF15E0547AA77E0FB88B88F044535DB9D877A9DF3DD4458B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33D29F Relevance: 1.6, APIs: 1, Instructions: 76COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MoveWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2234453006-0
                                                                                                                        • Opcode ID: a29e79ffa8212695ae1f8decc8f5e8dc93ee2094abb368431c4beee106c9c2e3
                                                                                                                        • Instruction ID: ada0eb249a4e5e253f3e509f34ec4c6af3bce510d4234dd086d79942068bc435
                                                                                                                        • Opcode Fuzzy Hash: a29e79ffa8212695ae1f8decc8f5e8dc93ee2094abb368431c4beee106c9c2e3
                                                                                                                        • Instruction Fuzzy Hash: F9410976B4A682CBDB60EF55E05076A77A0F784B98F144126DE59037B8CF39E884CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BF200 Relevance: 1.6, APIs: 1, Instructions: 60COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: HandleLoadModule$ClassCursorIconRegisterShowWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3163394910-0
                                                                                                                        • Opcode ID: 3f086d7d6162192c85f3862b1eef622d5feb99d653a8db293011f420a0d105e9
                                                                                                                        • Instruction ID: e325a5c9534bfa4ca03518a7e54939d2b92192e213730d413cd4920b109e5307
                                                                                                                        • Opcode Fuzzy Hash: 3f086d7d6162192c85f3862b1eef622d5feb99d653a8db293011f420a0d105e9
                                                                                                                        • Instruction Fuzzy Hash: F2218836B096838AE7548F21D4A4BB937A1EB44B54F188535CA1D873D9DF78D9C1CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33BB10 Relevance: 1.6, APIs: 1, Instructions: 308COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • memcpy.VCRUNTIME140(?,?,?,?,00000008,00000000,000000D0,?,?,00007FFDFB33ACB2), ref: 00007FFDFB33BE59
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memcpy
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3510742995-0
                                                                                                                        • Opcode ID: fbcb2bb6e432a4987b9f74048de9f04632af755269406f9f8a5ac9f2ffe8a8db
                                                                                                                        • Instruction ID: 42dd6577444c158330cd42730fee06df2707608e5504e60c90f7f71b82a448ed
                                                                                                                        • Opcode Fuzzy Hash: fbcb2bb6e432a4987b9f74048de9f04632af755269406f9f8a5ac9f2ffe8a8db
                                                                                                                        • Instruction Fuzzy Hash: 2FF119BB602B85CBCB50DF09E0905AEB7B4F788B84B598126CB9E43764EF39D595C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2CB040 Relevance: 1.5, APIs: 1, Instructions: 292COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memset
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2221118986-0
                                                                                                                        • Opcode ID: 32108d93366a595e0dde9fb969241fa5500e3fe9cf9af712be67e7bddf23e9b9
                                                                                                                        • Instruction ID: cab197fa9cdb5dcf7ab4635d4bcd2defcc0e9e5d90555d8830da8aa77273f9b9
                                                                                                                        • Opcode Fuzzy Hash: 32108d93366a595e0dde9fb969241fa5500e3fe9cf9af712be67e7bddf23e9b9
                                                                                                                        • Instruction Fuzzy Hash: A1F1DC75B4A68797EB489B58E8A0A643BE1EB84724F514739E53DC72F8DF3CE8448700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BF330 Relevance: 1.5, APIs: 1, Instructions: 33COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ShowWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1268545403-0
                                                                                                                        • Opcode ID: 8bf8888a1e7a846f504f2452cd735e6b21774eebd42e8d034fae26394ca79355
                                                                                                                        • Instruction ID: 2ce71edcd21a039ecac250736a4af9b223bd2fc6c3421b3322a18d516a350759
                                                                                                                        • Opcode Fuzzy Hash: 8bf8888a1e7a846f504f2452cd735e6b21774eebd42e8d034fae26394ca79355
                                                                                                                        • Instruction Fuzzy Hash: 99F01272F09583C6FBA14A55C4A4BFD1251DB94715F28D031D92C8E7ECDE39E9D28B02
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Non-executed Functions

                                                                                                                        Function 00007FFDFB2B5820 Relevance: 54.7, APIs: 28, Strings: 3, Instructions: 461windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Palette$Select$ObjectRealize$ColorsCompatibleCreateDeleteUpdate$BitmapModeRelease
                                                                                                                        • String ID: $Only ZPixmap types are implemented$XGetImageZPixmap Failure
                                                                                                                        • API String ID: 201852730-2551037732
                                                                                                                        • Opcode ID: 31a1a6a3e732442c6c53be00d306d7d7bc4a28003169d2a62e1a6ece7fe89732
                                                                                                                        • Instruction ID: f4c137ec3709eafb920542af5974328c8b55650310c74fbd9ee33f1a14283e3d
                                                                                                                        • Opcode Fuzzy Hash: 31a1a6a3e732442c6c53be00d306d7d7bc4a28003169d2a62e1a6ece7fe89732
                                                                                                                        • Instruction Fuzzy Hash: 4E22BF76B19B8287E7609F15E464A29B7A5FB88B84F048135DE9D47BB8DF3CE444CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB3139E0 Relevance: 42.4, APIs: 5, Strings: 19, Instructions: 367stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strtol
                                                                                                                        • String ID: -encoding$-translation$BITMAP$BITMAP_FILE$FORMAT$IMAGE$OBSOLETE$SAFE$_height$_width$_x_hot$_y_hot$binary$can't get bitmap data from a file in a safe interpreter$char$couldn't read bitmap file "%s": %s$format error in bitmap data$format error in bitmap data; looks like it's an obsolete X10 bitmap file${
                                                                                                                        • API String ID: 76114499-2400064599
                                                                                                                        • Opcode ID: 1c7554f77191ff1e6898d3d6da5df5270871cc0dbc626651ba39d2d4da167d32
                                                                                                                        • Instruction ID: 36d7a772d64355e86bec331a9e71088ea0a8a1154849e0a569e103d29c60e635
                                                                                                                        • Opcode Fuzzy Hash: 1c7554f77191ff1e6898d3d6da5df5270871cc0dbc626651ba39d2d4da167d32
                                                                                                                        • Instruction Fuzzy Hash: 1C028166F4EA87A2EB54AB15E460AB967E4FB45B84F446032D95E036FCDF3CE409C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB329E90 Relevance: 40.6, APIs: 8, Strings: 15, Instructions: 374stringlibraryloaderCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Modulestrcmp$AddressFileHandleLibraryLoadNameProcabortstrncmp
                                                                                                                        • String ID: -display$-encoding$-file$8.1$8.6$DISPLAY$Error in startup script$Tk_MainEx$application-specific initialization failed$argc$argv$argv0$env$errorInfo$tcl_interactive
                                                                                                                        • API String ID: 1130958833-3198950010
                                                                                                                        • Opcode ID: 6525440e8a2550b77d5966217c0ccfb38f9060643f5bbf5dbb42726dd96d9671
                                                                                                                        • Instruction ID: c6c111ef222cc6172077134670c1be2b556c35fa4ef01e8cc5fb071073cef5b7
                                                                                                                        • Opcode Fuzzy Hash: 6525440e8a2550b77d5966217c0ccfb38f9060643f5bbf5dbb42726dd96d9671
                                                                                                                        • Instruction Fuzzy Hash: 58022765B4AB8783EB54AB15E874AB927E0FB88B84F444175DE2D077B8DF3CE4498700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB365AF0 Relevance: 33.6, APIs: 14, Strings: 5, Instructions: 308stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365B0D
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365B27
                                                                                                                        • strtol.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365B56
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365B74
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365B87
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365BA3
                                                                                                                        • strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365BF6
                                                                                                                        • strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365C2E
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365C4E
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365C67
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365C83
                                                                                                                        • strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365CBA
                                                                                                                        • strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365D1B
                                                                                                                        • strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 00007FFDFB365D57
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: isspace$strncmp$strtol
                                                                                                                        • String ID: any$chars$display$indices$lines
                                                                                                                        • API String ID: 4113025079-3942299149
                                                                                                                        • Opcode ID: 88a044ced7e41f3187a9aa61500ded6032811800416baca816d082589540cd6b
                                                                                                                        • Instruction ID: adf923b19c189635b53c8325e8ae14d78cd84e7884a002d73354590517c00f32
                                                                                                                        • Opcode Fuzzy Hash: 88a044ced7e41f3187a9aa61500ded6032811800416baca816d082589540cd6b
                                                                                                                        • Instruction Fuzzy Hash: 83C1C361B4E6974BFB606B25D830F7A6AD2AF45BC4F059030DEA9476E9DF2CE5048700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C7840 Relevance: 26.6, APIs: 13, Strings: 2, Instructions: 381COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: FromPointWindowmemset
                                                                                                                        • String ID: &$CLIPBOARD
                                                                                                                        • API String ID: 908244748-1846057221
                                                                                                                        • Opcode ID: f944c00dba8368204128266605b366e7fddd6f0feb7b1fb2a622e363cf2e73bf
                                                                                                                        • Instruction ID: dbd8df4afbff2836edcebf67b7d1b04e0ca3dca758a54dbeacbc1285521f4f66
                                                                                                                        • Opcode Fuzzy Hash: f944c00dba8368204128266605b366e7fddd6f0feb7b1fb2a622e363cf2e73bf
                                                                                                                        • Instruction Fuzzy Hash: DCF1C3B2B0A6828BE7548F29D4A4A7D7BA5F744768F144135DA5A86BFCDF3CE440CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2B5FB0 Relevance: 26.5, APIs: 10, Strings: 5, Instructions: 228windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Palette$ModePixelRealizeReleaseSelectmemset
                                                                                                                        • String ID: ($XGetImage Failure$XGetImage: not implemented for empty bitmap handles$XGetImage: not implemented for format != XYPixmap$XGetImage: not implemented for plane_mask != 1
                                                                                                                        • API String ID: 2805359893-309510434
                                                                                                                        • Opcode ID: f4b38e2b7c496316216f3f8e80cc98c81955683f5c505ca69771f59fe7e39331
                                                                                                                        • Instruction ID: c6d3efa756fe21e04f49d3d42e762404aa307082a737899218bae440ca9d6631
                                                                                                                        • Opcode Fuzzy Hash: f4b38e2b7c496316216f3f8e80cc98c81955683f5c505ca69771f59fe7e39331
                                                                                                                        • Instruction Fuzzy Hash: B4B18176609B828BD7249F15F86076AB7E4FB48B84F508135CA9E477A8DF3CE454CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2ADBA0 Relevance: 24.7, APIs: 11, Strings: 3, Instructions: 187windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Window$EnableItemmemset$MessageSendText
                                                                                                                        • String ID: #$TkFontchooserFontChanged$TkFontchooserVisibility
                                                                                                                        • API String ID: 1523678569-1243688034
                                                                                                                        • Opcode ID: aea30625f4a88a9af742a2edfab62899dbd7e510e60ec0e1c90d4bf6aa36f317
                                                                                                                        • Instruction ID: 094682bdadb770a8c501b527b8d1076d41f502eab5422c3de6cde0944a1a3e9a
                                                                                                                        • Opcode Fuzzy Hash: aea30625f4a88a9af742a2edfab62899dbd7e510e60ec0e1c90d4bf6aa36f317
                                                                                                                        • Instruction Fuzzy Hash: 32916D26B1AB8782EB14EF25E46067963A5FB88B88F144131EA5D877B8DF3CE545C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BB830 Relevance: 16.6, APIs: 11, Instructions: 74keyboardCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: State
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1649606143-0
                                                                                                                        • Opcode ID: 71179b07a3cfb676c0b9cdb905561c169f62e376f9d787c8a61972f6599a070f
                                                                                                                        • Instruction ID: 1d2a3b1c349359de3bcd6743b09b65f9afc9e98fb1e35fa5461e0606fcb73004
                                                                                                                        • Opcode Fuzzy Hash: 71179b07a3cfb676c0b9cdb905561c169f62e376f9d787c8a61972f6599a070f
                                                                                                                        • Instruction Fuzzy Hash: A721C136B843834BF7042BA6D8E177461C3EFD8360F950038CB1B033A58E7DE8525611
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2A7CE0 Relevance: 16.2, APIs: 5, Strings: 4, Instructions: 414COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        • Tk_SizeOfBitmap received unknown bitmap argument, xrefs: 00007FFDFB2A7F06
                                                                                                                        • buttons, xrefs: 00007FFDFB2A7DA2
                                                                                                                        • FindResourceW() failed for buttons bitmap resource, resources in tk_base.rc must be linked into Tk dll or static executable, xrefs: 00007FFDFB2A7DC1
                                                                                                                        • abcdefghijklmnopqurstuvwzyABCDEFGHIJKLMNOPQURSTUVWZY, xrefs: 00007FFDFB2A7FC0
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Resource$FindHandleLoadLockModulememcpy
                                                                                                                        • String ID: FindResourceW() failed for buttons bitmap resource, resources in tk_base.rc must be linked into Tk dll or static executable$Tk_SizeOfBitmap received unknown bitmap argument$abcdefghijklmnopqurstuvwzyABCDEFGHIJKLMNOPQURSTUVWZY$buttons
                                                                                                                        • API String ID: 770267298-1510936104
                                                                                                                        • Opcode ID: 1e9dcef794e574b1a1b2e47c0ebac33e2e1e8309b994d30a854d4bc0423421b4
                                                                                                                        • Instruction ID: 90691ad6fe8fef7ce62a9a98699be8a56f01bd458b84fbbb986643815688d22d
                                                                                                                        • Opcode Fuzzy Hash: 1e9dcef794e574b1a1b2e47c0ebac33e2e1e8309b994d30a854d4bc0423421b4
                                                                                                                        • Instruction Fuzzy Hash: F502E472B0AB8286D755DF25E464A7977A8FB48B88F054235CE1D9B7B8DF38E841C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2E3100 Relevance: 15.9, APIs: 4, Strings: 5, Instructions: 170COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: BitsClientRectRelease
                                                                                                                        • String ID: %02x$($XGetGeometry: invalid pixmap$XGetGeometry: invalid window$XGetGeometry: unable to get bitmap size
                                                                                                                        • API String ID: 3715867303-295437046
                                                                                                                        • Opcode ID: 4cd913fc0f06fe70660fb1eae611370a926ec9571d64f51eb40862e6f5e8f706
                                                                                                                        • Instruction ID: 2d996f2c6532ea8c7755fb85ea0afed79313c0025c946f90d762e1a98305cb46
                                                                                                                        • Opcode Fuzzy Hash: 4cd913fc0f06fe70660fb1eae611370a926ec9571d64f51eb40862e6f5e8f706
                                                                                                                        • Instruction Fuzzy Hash: E8717576B0968387E7649F15E8A0A79B7A0FB89B94F404035DE5D477A8DF3CE848CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB305070 Relevance: 15.3, APIs: 10, Instructions: 302COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: floor
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3192247854-0
                                                                                                                        • Opcode ID: ecc45b72e5976c1cb42514ddd3b3ffe938b790385a9b6b0fc8179c9a6ea9944b
                                                                                                                        • Instruction ID: b5323bddb90ec9bd1679ddcb720411075c748f69229ce5d0f19951e2518b498d
                                                                                                                        • Opcode Fuzzy Hash: ecc45b72e5976c1cb42514ddd3b3ffe938b790385a9b6b0fc8179c9a6ea9944b
                                                                                                                        • Instruction Fuzzy Hash: B7D1CB32A59F414FD313DB3590516A9B3A5EF697C8F158322EE4A73668DB38E4928B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2AD830 Relevance: 14.2, APIs: 3, Strings: 5, Instructions: 200COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CapsDevicememcpy
                                                                                                                        • String ID: (background event handler)$bold$italic$overstrike$underline
                                                                                                                        • API String ID: 58821350-4131028843
                                                                                                                        • Opcode ID: 19b2ebe4bbf4c4c2eabb20d07b26bf24704f6c152ad02e61977d25b192713ecd
                                                                                                                        • Instruction ID: 4812c9632dea287477c791416688c4c3e132bd60f224aff8e85bbdb0e371faa1
                                                                                                                        • Opcode Fuzzy Hash: 19b2ebe4bbf4c4c2eabb20d07b26bf24704f6c152ad02e61977d25b192713ecd
                                                                                                                        • Instruction Fuzzy Hash: F7910A75749AC686EB149B16E8746B96BA1FB88FD1F058172CE2E477B8CF3CD4498300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB32FE20 Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 97registryCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ClassRegister$HandleModule
                                                                                                                        • String ID: $EmbeddedMenuWindowClass$Failed to register embedded menu window class$Failed to register menu window class$MenuWindowClass
                                                                                                                        • API String ID: 1731912960-3560269961
                                                                                                                        • Opcode ID: a022b8830e441842a9a8304d1e35901ee6ea373eb2ea9fa27b82487967bb60bd
                                                                                                                        • Instruction ID: 1f7e00a2b6e63ac49de1c730a63083afde127a3c2aa9d4fd9be0605a070ee95e
                                                                                                                        • Opcode Fuzzy Hash: a022b8830e441842a9a8304d1e35901ee6ea373eb2ea9fa27b82487967bb60bd
                                                                                                                        • Instruction Fuzzy Hash: 54510431B4AA8382EB44AB24E8A1A7A37E5FB48B44F418539D56D462FDDF3CE548C740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB39DEDC Relevance: 13.6, APIs: 9, Instructions: 72COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ExceptionFilterPresentUnhandledmemset$CaptureContextDebuggerEntryFeatureFunctionLookupProcessorUnwindVirtual
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 313767242-0
                                                                                                                        • Opcode ID: d713b5c3903ad16a91f2e831f9e188148cb2b0bdc9453c5a021fc85c4598fa02
                                                                                                                        • Instruction ID: 528fce9de2feaf4f1f01e187bf74c4d200d58edbfccb1c3fab4cbaac67192ef7
                                                                                                                        • Opcode Fuzzy Hash: d713b5c3903ad16a91f2e831f9e188148cb2b0bdc9453c5a021fc85c4598fa02
                                                                                                                        • Instruction Fuzzy Hash: A0314F7274AB8287EB60AF64E8907E973A1FB44748F44403ADA5E47BA8DF3CD548C710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2B77F0 Relevance: 10.7, APIs: 7, Instructions: 171keyboardwindowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Menu$AsyncState$ClientCountCursorFromItemMetricsPointPopupRemoveScreenSystemTrackWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2544695384-0
                                                                                                                        • Opcode ID: 9568fd061a9f2f6a94635d952d63ee5aec49dc68a00bf56b5b9d330bf0a8569a
                                                                                                                        • Instruction ID: 7cc4c4919fa573ed92521f496973bdd9db5aa804a626f554633108baa8c063ea
                                                                                                                        • Opcode Fuzzy Hash: 9568fd061a9f2f6a94635d952d63ee5aec49dc68a00bf56b5b9d330bf0a8569a
                                                                                                                        • Instruction Fuzzy Hash: B0715D36B0AA878BE7149F15E460A7977A0FB88B94F058035DA6D477B8DF3CE445CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C7560 Relevance: 9.1, APIs: 6, Instructions: 132clipboardwindowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Clipboard$ClientCloseFromMessageOpenOwnerPointScreenSendWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 547624150-0
                                                                                                                        • Opcode ID: 50c050e6ba8adeb545d51ef4364c5782a148867e16aaf5f60730c1d8cdd133d8
                                                                                                                        • Instruction ID: 4f06c9b51144a0a97c84988e182f588c408a5ac4104a3b6dd63be4e286f21304
                                                                                                                        • Opcode Fuzzy Hash: 50c050e6ba8adeb545d51ef4364c5782a148867e16aaf5f60730c1d8cdd133d8
                                                                                                                        • Instruction Fuzzy Hash: 3B5190A1B0F68786EB549B15A474A7962D0EF48790F584431DA2DC67FDCF7CE8848740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB319380 Relevance: 7.8, APIs: 1, Strings: 4, Instructions: 291COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: DATA_OVERFLOW$IMAGE$PNG$PNG image data overflow
                                                                                                                        • API String ID: 0-2868080888
                                                                                                                        • Opcode ID: 8a07c798814ccc11f8feaf03e9f9310ba297d43b12835714239a1a71fe75fa2b
                                                                                                                        • Instruction ID: fe1277fa7710b47e2143061ee07addcb43bdf1643b136d2a0bd3a991b8c6f730
                                                                                                                        • Opcode Fuzzy Hash: 8a07c798814ccc11f8feaf03e9f9310ba297d43b12835714239a1a71fe75fa2b
                                                                                                                        • Instruction Fuzzy Hash: A4C12362A0D593ABE7559F28C470A797BE8FB06B4CF042131DA9A472EDDA3CE446C710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB34D960 Relevance: 6.4, APIs: 1, Strings: 3, Instructions: 443COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memset
                                                                                                                        • String ID: Selection$TkBTreeLinesTo couldn't find line$TkBTreeLinesTo couldn't find node
                                                                                                                        • API String ID: 2221118986-1902325206
                                                                                                                        • Opcode ID: a9933b06f6296695de140f34be7c71b18952673b2221db9b48e682d4cd158d6a
                                                                                                                        • Instruction ID: 4668ce82fdab55fa0539dc36c6d3ccf74b51003961cd549c9cb1d2c93371924a
                                                                                                                        • Opcode Fuzzy Hash: a9933b06f6296695de140f34be7c71b18952673b2221db9b48e682d4cd158d6a
                                                                                                                        • Instruction Fuzzy Hash: 9A228D32B4AA87C7EB60EF15D560AAA77E0FB45B84F454036DA5D077A8DF38E944C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB37D2E0 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 341COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CreateMessage$BitmapDeleteErrorFormatFreeLastLocalObjectReleaseSection
                                                                                                                        • String ID: GC already registered in Tk_GetGC$called GCInit after GCCleanup
                                                                                                                        • API String ID: 1892380217-2292843906
                                                                                                                        • Opcode ID: e28f66729b6a01e0569325b4f9f94d1caa9341088604f7263f1709b2c421f344
                                                                                                                        • Instruction ID: 878411eba03ba349eae28b29c366fb84c73ea581e6bfd740a0791f3472c2cdb5
                                                                                                                        • Opcode Fuzzy Hash: e28f66729b6a01e0569325b4f9f94d1caa9341088604f7263f1709b2c421f344
                                                                                                                        • Instruction Fuzzy Hash: 14F17B76B05B828BD754CF25E494AAD7BE4F788B88F108129DE5D97B68DF38E440CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB303C20 Relevance: 79.0, APIs: 20, Strings: 25, Instructions: 283stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303C5A
                                                                                                                        • _stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303C72
                                                                                                                        • _stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303C9A
                                                                                                                        • _stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303CB2
                                                                                                                        • _stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303CCA
                                                                                                                        • _stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303CE2
                                                                                                                        • _stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303CFA
                                                                                                                        • _stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303D12
                                                                                                                        • _stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303D32
                                                                                                                        • _stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303D55
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303D9A
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303DB7
                                                                                                                        • _stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303E9A
                                                                                                                        • strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303F24
                                                                                                                        • strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303F40
                                                                                                                        • strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB303F8B
                                                                                                                        • strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB304045
                                                                                                                        • strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB30409A
                                                                                                                        • strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FFDFB2E2F43), ref: 00007FFDFB3040AD
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _stricmp$strcmp$isspace$_strnicmp
                                                                                                                        • String ID: -Roman$Arial$AvantGarde$Bold$Book$Bookman$Courier$Courier New$Demi$Geneva$Helvetica$Italic$Light$Medium$Monaco$New York$NewCenturySchlbk$NewCenturySchoolbook$Oblique$Palatino$Times$Times New Roman$ZapfChancery$ZapfDingbats$itc
                                                                                                                        • API String ID: 2126113721-1508206677
                                                                                                                        • Opcode ID: 05d649ef54f6f2b5fa6cc892f6930ee6b35da58b7b8b094f7b2943411ffb9a9a
                                                                                                                        • Instruction ID: 1e3aad16397833466e36fbd81fbc1903e78a172abaf44cf300e64664ab04c72f
                                                                                                                        • Opcode Fuzzy Hash: 05d649ef54f6f2b5fa6cc892f6930ee6b35da58b7b8b094f7b2943411ffb9a9a
                                                                                                                        • Instruction Fuzzy Hash: B2D16C65B8EA5393EB54AB169870A7867E1AF09BD4F484131C9AD476FCEF3CE509C300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB33D580 Relevance: 60.5, APIs: 6, Strings: 34, Instructions: 483stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: BAD_PARAMETER$FIGHT$GEOMETRY$HIERARCHY$OLDPACK$TCL$WRONGARGS$anchor$b$bad option "%s": should be top, bottom, left, right, expand, fill, fillx, filly, padx, pady, or frame$bottom$can't pack %s inside %s$cannot use geometry manager %s inside %s which already has slaves managed by %s$e$expand$f$f$fill$fillx$filly$frame$l$left$p$pack$padx$pady$r$right$t$top$wrong # args: "%s" option must be followed by screen distance$wrong # args: "frame" option must be followed by anchor point$wrong # args: window "%s" should be followed by options
                                                                                                                        • API String ID: 1114863663-2989344275
                                                                                                                        • Opcode ID: 1b8d2ed6e79c1b51a7d390a0d1b28a277218bde6f40bcba8ad56eb2ce3e460ac
                                                                                                                        • Instruction ID: 187e7d7ed47613bf3364be4c1f7d896f2800c8e58a70ef3d0a3439db7a45763b
                                                                                                                        • Opcode Fuzzy Hash: 1b8d2ed6e79c1b51a7d390a0d1b28a277218bde6f40bcba8ad56eb2ce3e460ac
                                                                                                                        • Instruction Fuzzy Hash: 3F327176B4AA8783EB609B55E464BBA77E0FB45B84F444032DA6E476B8DF3CE444C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2AF810 Relevance: 58.0, APIs: 32, Strings: 1, Instructions: 241windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Create$Brush$CompatibleFillObjectRectSelectSolid$BitmapPattern
                                                                                                                        • String ID: unexpected drawable type in stipple
                                                                                                                        • API String ID: 2830929341-1374382833
                                                                                                                        • Opcode ID: 5854d94da5e0868eaf0cd4f77ead971610f3f40ad33ca18ff7b21339699717ed
                                                                                                                        • Instruction ID: 952713723be449693194f2259c2f907a5742a53fb236f7640c43467cdf00470b
                                                                                                                        • Opcode Fuzzy Hash: 5854d94da5e0868eaf0cd4f77ead971610f3f40ad33ca18ff7b21339699717ed
                                                                                                                        • Instruction Fuzzy Hash: 38B13E76B09A9287DB149F11E464A7EB3A5FB89B85F044135DE9A47BACDF3CE044CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2AFCD0 Relevance: 54.5, APIs: 29, Strings: 2, Instructions: 203windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Object$Select$Create$Brush$Delete$Solid$CompatibleFillModePoly$BitmapPattern
                                                                                                                        • String ID: $unexpected drawable type in stipple
                                                                                                                        • API String ID: 900603657-2568577462
                                                                                                                        • Opcode ID: b2b622912e4038b8f2ebe3374388d5f248c80d1cf978de778e31fffca50a75e1
                                                                                                                        • Instruction ID: 30e74a4ce752141ef93cfdccdf583850655520ed7acf6cee6e65969b794938cc
                                                                                                                        • Opcode Fuzzy Hash: b2b622912e4038b8f2ebe3374388d5f248c80d1cf978de778e31fffca50a75e1
                                                                                                                        • Instruction Fuzzy Hash: CB911D3A75978287DB10EF12E414A6A77A5FB89BC8F104135DE9A57B6CCF3CE4458B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2ABF60 Relevance: 42.4, APIs: 13, Strings: 11, Instructions: 351stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CurrentDirectorymemset$Path$BrowseEnableFolderFromFullListMallocNameWindowstrcmpwcsncpy
                                                                                                                        • String ID: -xpstyle$::tk::winChooseDirFlags$DIRDIALOG$FILEDIALOG$PSEUDO$Please choose a directory, then select OK.$VALUE$error: not a file system folder$option$value for "%s" missing$value for "-xpstyle" missing
                                                                                                                        • API String ID: 1517725768-2564141266
                                                                                                                        • Opcode ID: 10c83d3983d9f5d6424bbb9c6adce500a6b93dc3d3388855b69038c2e9d76582
                                                                                                                        • Instruction ID: 24058e71a4dd51fec3c53603944abbf8969b48a728503b56b3512e26cd93dd89
                                                                                                                        • Opcode Fuzzy Hash: 10c83d3983d9f5d6424bbb9c6adce500a6b93dc3d3388855b69038c2e9d76582
                                                                                                                        • Instruction Fuzzy Hash: CF025D26705BC796EB14AF25D8606F937A5FB48B98F404132CA2D4BBE8DF38E545C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB371DD0 Relevance: 35.4, APIs: 7, Strings: 13, Instructions: 404stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: isdigitstrncmp
                                                                                                                        • String ID: %s, $INAPPROPRIATE$LOOKUP$VALUE$VISUAL$VISUALID$WINDOW$bad X identifier for visual: "%s"$bad window path name "%s"$couldn't find an appropriate visual$default$or default$unknown or ambiguous visual name "%s": class must be
                                                                                                                        • API String ID: 3225286371-3323866090
                                                                                                                        • Opcode ID: fe6052262b0e883a1d0376253991569531bc9f9b8047829562a76194a8cdf1b3
                                                                                                                        • Instruction ID: 2d9dd917c4236d66283768e4b1c1a0776fd95913889c66e49959c109c629650c
                                                                                                                        • Opcode Fuzzy Hash: fe6052262b0e883a1d0376253991569531bc9f9b8047829562a76194a8cdf1b3
                                                                                                                        • Instruction Fuzzy Hash: 52126976B4AB8787EB54AF15E860A7967E0FB49B84F244032DA6D473A8DF3CE445C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB375240 Relevance: 35.1, APIs: 1, Strings: 19, Instructions: 138libraryloaderCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: AddressProc
                                                                                                                        • String ID: -colormap$-display$-geometry$-help$-name$-sync$-use$-visual$8.6$Colormap for main window$Display to use$Id of window in which to embed application$Initial geometry for window$Marks the end of the options$Name to use for application$Print summary of command-line options and abort$Tk_SafeInit$Use synchronous mode for display server$Visual for main window
                                                                                                                        • API String ID: 190572456-2287684462
                                                                                                                        • Opcode ID: 775eb15b3778692dcd3d53bf4eafc7f653d52965759a28a5dfd829da84ea8db0
                                                                                                                        • Instruction ID: def5275969306ccaa4840728528c64dbec10213f29f8cb2b54ac354ae62c82c2
                                                                                                                        • Opcode Fuzzy Hash: 775eb15b3778692dcd3d53bf4eafc7f653d52965759a28a5dfd829da84ea8db0
                                                                                                                        • Instruction Fuzzy Hash: 3E81B636646BC699E7619F20FC907EA73E8F748308F504235DA9C0BB68EF799258D740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB31F270 Relevance: 31.9, APIs: 3, Strings: 15, Instructions: 389stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • strncmp.API-MS-WIN-CRT-STRING-L1-1-0 ref: 00007FFDFB31F353
                                                                                                                          • Part of subcall function 00007FFDFB2F5DF0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0 ref: 00007FFDFB2F5EC5
                                                                                                                          • Part of subcall function 00007FFDFB2F5DF0: _stricmp.API-MS-WIN-CRT-STRING-L1-1-0 ref: 00007FFDFB2F5EF6
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _stricmp_strnicmpstrncmp
                                                                                                                        • String ID: , or $BAD_OPTION$BAD_VALUE$IMAGE$MISSING_VALUE$PHOTO$compositing rule$non-negative$or two$positive$the "%s" option requires a value$the "%s" option requires one %s integer values$to four$unrecognized option "%s": must be $value(s) for the %s option must be %s
                                                                                                                        • API String ID: 189998849-772142661
                                                                                                                        • Opcode ID: 08ce675272b46ab3034ba40d03b172560e706e9e5000d661e5ff9a3f588e9c0b
                                                                                                                        • Instruction ID: 6ee52659750bb24063146625a54c090d483310be2ee485895d2be0700302b985
                                                                                                                        • Opcode Fuzzy Hash: 08ce675272b46ab3034ba40d03b172560e706e9e5000d661e5ff9a3f588e9c0b
                                                                                                                        • Instruction Fuzzy Hash: B702AA72B4AA8797EB20AF15E860B7967E4FB85B84F105135DA6D437B8DF3CE4448B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB371100 Relevance: 27.1, APIs: 4, Strings: 14, Instructions: 130stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: INDEX$LOOKUP$SCROLL_UNITS$TCL$VALUE$bad argument "%s": must be units or pages$moveto$moveto fraction$option$pages$scroll$scroll number units|pages$units$unknown option "%s": must be moveto or scroll
                                                                                                                        • API String ID: 1114863663-3258978467
                                                                                                                        • Opcode ID: 59cb03b6a07fafe8a236509cca580f10d4622a2ff37cfa4c6f3de02c5649b324
                                                                                                                        • Instruction ID: af734f8c43ab47856ba2f58f436b9853b4ede8574fdcb5d1817783f90827fabc
                                                                                                                        • Opcode Fuzzy Hash: 59cb03b6a07fafe8a236509cca580f10d4622a2ff37cfa4c6f3de02c5649b324
                                                                                                                        • Instruction Fuzzy Hash: A1510866B4EB8782EB10AB55E464AB967E0FB49BC4F544032CD2D477A8DF3CE505C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C1E10 Relevance: 26.6, APIs: 8, Strings: 7, Instructions: 311windowstringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Icon$Destroy$FileInfo$CreateIndirectmemsetstrcmp
                                                                                                                        • String ID: -default$H$ICONBITMAP$OPTION$Tk_SizeOfBitmap received unknown bitmap argument$illegal option "%s" must be "-default"$window ?-default? ?image?
                                                                                                                        • API String ID: 1970194709-3871694194
                                                                                                                        • Opcode ID: e25985d23da4d5311c65bb1bbb579826646a8fa551ffc8da1199a6a75bc92467
                                                                                                                        • Instruction ID: 6463104a346af2a558d7bc8e5c3e2a20870e46fe05cc5d00636acba65b227dab
                                                                                                                        • Opcode Fuzzy Hash: e25985d23da4d5311c65bb1bbb579826646a8fa551ffc8da1199a6a75bc92467
                                                                                                                        • Instruction Fuzzy Hash: 83E1397670AB8786EB58AF12E4647B967A0FB88B94F084035CE5E477A8DF3CE455C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB373870 Relevance: 26.4, APIs: 2, Strings: 13, Instructions: 184stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • strrchr.VCRUNTIME140(?,?,?,?,?,?,?,?,00000000,00007FFDFB2D3378), ref: 00007FFDFB3738A3
                                                                                                                        • strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,00000000,00007FFDFB2D3378), ref: 00007FFDFB373935
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncpystrrchr
                                                                                                                        • String ID: .$CONTAINER$CREATE$DEAD_PARENT$LOOKUP$NO_MAIN_WINDOW$NULL main window$VALUE$WINDOW$WINDOW_PATH$bad window path name "%s"$can't create window: its parent has -container = yes$can't create window: parent has been destroyed
                                                                                                                        • API String ID: 3639506716-1666016940
                                                                                                                        • Opcode ID: 4d3e35b1b10a6eef41c1cd492deebc48c40b4835a2fcb02ab4f41fdf5f879da9
                                                                                                                        • Instruction ID: 542a45dd13537c66d4c832a02d3fa67a8d9da265582972a4b61c9b8ffb4bc894
                                                                                                                        • Opcode Fuzzy Hash: 4d3e35b1b10a6eef41c1cd492deebc48c40b4835a2fcb02ab4f41fdf5f879da9
                                                                                                                        • Instruction Fuzzy Hash: E1811C65B8EA8782EB54AB11E8649B927A1FB49F94F544031DD2E0B7ACDF3CE506C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BD870 Relevance: 24.8, APIs: 6, Strings: 8, Instructions: 270windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Class$LongMessageSend$HandleLoadModule$CursorIconRegister
                                                                                                                        • String ID: Can't set icon; window has no wrapper.$FAILED$ICON$LOOKUP$TOPLEVEL$Unable to set icon$WRAPPER$window "%s" isn't a top-level window
                                                                                                                        • API String ID: 3636279047-342970489
                                                                                                                        • Opcode ID: a68680e95bfe352883cc2749a1ee15a0ee3b3eb6e347293859f6212960409028
                                                                                                                        • Instruction ID: 7d01feb232f69058a3398807f89c41a077dddddc2b290184e5a3a9434c51242e
                                                                                                                        • Opcode Fuzzy Hash: a68680e95bfe352883cc2749a1ee15a0ee3b3eb6e347293859f6212960409028
                                                                                                                        • Instruction Fuzzy Hash: C2C15521B4A6878AEB689F11D460AF927A1FB45BD4F458132C96E877FDCF3CE4458B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C1940 Relevance: 24.8, APIs: 9, Strings: 5, Instructions: 257windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MessageSend
                                                                                                                        • String ID: %dx%d%c%d%c%d$GEOMETRY$VALUE$bad geometry specifier "%s"$window ?newGeometry?
                                                                                                                        • API String ID: 3850602802-2571681712
                                                                                                                        • Opcode ID: b540065594f82900c896df0ce51114d15bcd4159008a30291455e3b624a17c51
                                                                                                                        • Instruction ID: 136ca72d088509a1e04877c8142c9fea6de2746a5c07f5e269996dbdb8151901
                                                                                                                        • Opcode Fuzzy Hash: b540065594f82900c896df0ce51114d15bcd4159008a30291455e3b624a17c51
                                                                                                                        • Instruction Fuzzy Hash: 5CC17CB6B0968287E7588B25E860BB977A0F744BA5F044131DFAD837A8DF3CE455CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BDF00 Relevance: 23.1, APIs: 2, Strings: 11, Instructions: 374COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: -encoding$-translation$Error converting to internal format$FORMAT$ICON$Invalid file header$READ$binary$error opening file "%s" for reading: %s$error reading file: %s$error seeking in file: %s
                                                                                                                        • API String ID: 0-1482656021
                                                                                                                        • Opcode ID: 1d3be55ff07dc83df80faf6eef418b5ef0f003445f5813d67b438c9e71c2744b
                                                                                                                        • Instruction ID: 7880232586062c667fead31e67a84b426a8a774819bb4ac3743a78bf22b7bee8
                                                                                                                        • Opcode Fuzzy Hash: 1d3be55ff07dc83df80faf6eef418b5ef0f003445f5813d67b438c9e71c2744b
                                                                                                                        • Instruction Fuzzy Hash: 87F14D7674AA8286EB589F16E47497837A1FB88B91F458531CE6E873B8DF3CE444C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2A97A0 Relevance: 23.0, APIs: 2, Strings: 11, Instructions: 221COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ChooseColorEnableWindow_stricmp_strnicmp
                                                                                                                        • String ID: #%02x%02x%02x$COLORDIALOG$H$LOOKUP$NO_MAIN_WINDOW$NULL main window$VALUE$WINDOW$bad window path name "%s"$option$value for "%s" missing
                                                                                                                        • API String ID: 620147127-2582839937
                                                                                                                        • Opcode ID: 34a4f0974b3f3d545910c0ff656c2140f180aa044d73d506b2a3164a8f194fbb
                                                                                                                        • Instruction ID: ec9fe629ff9ff818879518efaed111b5b941b8cf575fb7f3bf0e5f84dc62af51
                                                                                                                        • Opcode Fuzzy Hash: 34a4f0974b3f3d545910c0ff656c2140f180aa044d73d506b2a3164a8f194fbb
                                                                                                                        • Instruction Fuzzy Hash: CEA16D35B4AB8396E7549F16E464BB967A4FB88B84F044035DE6D8B7A8CF3CE445C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB36735B Relevance: 19.7, APIs: 2, Strings: 11, Instructions: 170stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: LOOKUP$MARK_GRAVITY$TEXT_MARK$VALUE$bad mark gravity "%s": must be left or right$current$insert$left$markName ?gravity?$right$there is no mark named "%s"
                                                                                                                        • API String ID: 1114863663-1664192075
                                                                                                                        • Opcode ID: 09a9a40bf1c768c92b4c620a668665fac39a364dd9e96b327b843771aca3eda5
                                                                                                                        • Instruction ID: b8466226a513acec5baceee288e340b5cf994026cb51ba6604d346043bd653f0
                                                                                                                        • Opcode Fuzzy Hash: 09a9a40bf1c768c92b4c620a668665fac39a364dd9e96b327b843771aca3eda5
                                                                                                                        • Instruction Fuzzy Hash: 88812D6178AA87C6DB54AB11E474AB977E2FB85B84F844032DE6E473A8CF3CE545C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB31D999 Relevance: 18.2, APIs: 2, Strings: 10, Instructions: 237COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _strnicmp$strncmp
                                                                                                                        • String ID: ?-option value ...?$BAD_FROM$IMAGE$LOOKUP$PHOTO$PHOTO_FORMAT$coordinates for -from option extend outside image$image string format "%s" is %s$not supported$unknown
                                                                                                                        • API String ID: 3400795787-2515806417
                                                                                                                        • Opcode ID: ca78bf9f8396cd7180f6e19218bd492a7b114981c5936a1b4de527549d92b2d0
                                                                                                                        • Instruction ID: aba9c834305955520fdca48f98f0a972816fe4ca0ac94577f9b9f1a4f5806c9d
                                                                                                                        • Opcode Fuzzy Hash: ca78bf9f8396cd7180f6e19218bd492a7b114981c5936a1b4de527549d92b2d0
                                                                                                                        • Instruction Fuzzy Hash: C3B16066F4AB8796EB04AB51D860AB827E4FB46B98F045135DE2E477F8DF38E444C300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB36FA90 Relevance: 18.2, APIs: 12, Instructions: 175COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: floor
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3192247854-0
                                                                                                                        • Opcode ID: 6e0db7c009c115e1dbba3e36edab12541f58be6f7269bb922b185718e99d214d
                                                                                                                        • Instruction ID: fb95ed6834a5ba0dca459a8850ad04945ff2bc49d93d63ca8d5186bd417b9b73
                                                                                                                        • Opcode Fuzzy Hash: 6e0db7c009c115e1dbba3e36edab12541f58be6f7269bb922b185718e99d214d
                                                                                                                        • Instruction Fuzzy Hash: B381B502E59E8F89F3436B3440229B5A3D96F7A3C5F159333E96A361B5EF2971D38100
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2E33D0 Relevance: 17.6, APIs: 4, Strings: 6, Instructions: 104COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: BitsClientRectRelease
                                                                                                                        • String ID: StippleFill$%d %d $($XGetGeometry: invalid pixmap$XGetGeometry: invalid window$XGetGeometry: unable to get bitmap size
                                                                                                                        • API String ID: 3715867303-1272586390
                                                                                                                        • Opcode ID: bd77e10ebd8af0b2187c5d6ce23084923057583f88d8ab423a9242eecac3c1dc
                                                                                                                        • Instruction ID: f1b8e25a85f7dce42b0e609eb85df719a5c882bc8aeccda66d03516424ac5aea
                                                                                                                        • Opcode Fuzzy Hash: bd77e10ebd8af0b2187c5d6ce23084923057583f88d8ab423a9242eecac3c1dc
                                                                                                                        • Instruction Fuzzy Hash: 06415336B0969787EB60AF16E464B7977A0FB48B94F404035DA6D877ACDF3CE4488B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BB320 Relevance: 17.6, APIs: 4, Strings: 6, Instructions: 73COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CreateHandleModuleWindow
                                                                                                                        • String ID: EmbeddedMenuWindow$EmbeddedMenuWindowClass$Failed to create the embedded menu window$Failed to create the menu window$MenuWindow$MenuWindowClass
                                                                                                                        • API String ID: 1178124398-1932805642
                                                                                                                        • Opcode ID: d5b5036ffa92656af0fac3d254847f4de292e65320bca40e0d980e21efc52895
                                                                                                                        • Instruction ID: 45e9bb9312e0e97490c9276f568b9b1a3201fccea18fc42c3a8f05b06aa0e9a6
                                                                                                                        • Opcode Fuzzy Hash: d5b5036ffa92656af0fac3d254847f4de292e65320bca40e0d980e21efc52895
                                                                                                                        • Instruction Fuzzy Hash: 4E41073674AB8386EB549B14E4A06697BE0FB88B84F15413AD99D437BCDF3CE055CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB32B430 Relevance: 16.1, APIs: 2, Strings: 7, Instructions: 386COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memset
                                                                                                                        • String ID: -menu$MENU$Menu$No more menus can be allocated.$SYSTEM_RESOURCES$normal$pathName ?-option value ...?
                                                                                                                        • API String ID: 2221118986-2269277396
                                                                                                                        • Opcode ID: c0d941b2b64ff97b629d7ac979c56382cc8f0849e5d8a5aa354cb7f5578aab5c
                                                                                                                        • Instruction ID: 43e5ff565548b26572674e9f3089c5d3db7fb33371bcd4ce2d34612beda9d568
                                                                                                                        • Opcode Fuzzy Hash: c0d941b2b64ff97b629d7ac979c56382cc8f0849e5d8a5aa354cb7f5578aab5c
                                                                                                                        • Instruction Fuzzy Hash: 36025A7A74AB8682DB14AF15E4606A977E0FB88F94F148136CE6D477A8EF3CE445C340
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2F5DF0 Relevance: 15.9, APIs: 3, Strings: 6, Instructions: 196COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: _stricmp_strnicmp
                                                                                                                        • String ID: COLOR$LOOKUP$VALUE$invalid color name "%s"$system$unknown color name "%s"
                                                                                                                        • API String ID: 4098154984-1350147216
                                                                                                                        • Opcode ID: 2e445e2f8a2d78092b3b84ea6e91544645c84520715be370ebf5ff0f6ecec050
                                                                                                                        • Instruction ID: 799804d5b6baf7c546657ea97be85ae7079e8a12c1d7769ed71467e3afb3ef19
                                                                                                                        • Opcode Fuzzy Hash: 2e445e2f8a2d78092b3b84ea6e91544645c84520715be370ebf5ff0f6ecec050
                                                                                                                        • Instruction Fuzzy Hash: 0F91AD76B09A82C6EB50CF11E864BA977A5FB85B88F444132DE5E873A8DF3CE444C740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2DDB90 Relevance: 15.9, APIs: 4, Strings: 5, Instructions: 130stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strtod$_hypotstrncmp
                                                                                                                        • String ID: CANVAS$ITEM_INDEX$LINE$bad index "%s"$end
                                                                                                                        • API String ID: 2305060144-2871392188
                                                                                                                        • Opcode ID: b07271e07a74f03d721e1af68afb421e855502a8c98aab9d12dd81b2a1bc90ca
                                                                                                                        • Instruction ID: 14ac2382073e458f4e0cc90c2625944736666b7d17bf44229deddc74b0a1fc21
                                                                                                                        • Opcode Fuzzy Hash: b07271e07a74f03d721e1af68afb421e855502a8c98aab9d12dd81b2a1bc90ca
                                                                                                                        • Instruction Fuzzy Hash: F1516E32B4AA878ADB159F25D4606B977A0FF48B84F448232DE6D473A8DF3CE545C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2D72C0 Relevance: 15.3, APIs: 10, Instructions: 293COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: atan2$_hypot
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1930852395-0
                                                                                                                        • Opcode ID: f3bca40368aa862d2f97f88ee8e4efab3c3941233b408a6259aa97296116004c
                                                                                                                        • Instruction ID: 36993d2c2f2539b0828ca4a1b67bda47e0f3dfbb7f8486ccfc14d97efcf1c429
                                                                                                                        • Opcode Fuzzy Hash: f3bca40368aa862d2f97f88ee8e4efab3c3941233b408a6259aa97296116004c
                                                                                                                        • Instruction Fuzzy Hash: A8E16432915F898AD363CF3494516EAB364FF6E3D5F109322EB9A76575DF38A1828300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2F57C7 Relevance: 15.2, APIs: 1, Strings: 9, Instructions: 152stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strcmp
                                                                                                                        • String ID: 0x%lx$%s %d$NONE$VISUAL$can't find any visuals for screen$includeids$unknown$unknown$window ?includeids?
                                                                                                                        • API String ID: 1004003707-1879718011
                                                                                                                        • Opcode ID: 302b7e454d427ffe930f418c6494c7f1607e396571a1cea9461c63c52864ace1
                                                                                                                        • Instruction ID: d4469550aa0f38fa8d9d1f7f828747d9465f88a0fb22b76acb8bcce7efecdbf0
                                                                                                                        • Opcode Fuzzy Hash: 302b7e454d427ffe930f418c6494c7f1607e396571a1cea9461c63c52864ace1
                                                                                                                        • Instruction Fuzzy Hash: 0C718D76B0AA86C6EB44DF15D4609B97BA4FB48B94F448132CE2D973A8DF38E446C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB323B90 Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 226COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        • Fail to create pixmap with Tk_GetPixmap in TkImgPhotoInstanceSetSize, xrefs: 00007FFDFB323C53
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memset$memcpy$DeleteObject
                                                                                                                        • String ID: Fail to create pixmap with Tk_GetPixmap in TkImgPhotoInstanceSetSize
                                                                                                                        • API String ID: 3824102683-276313315
                                                                                                                        • Opcode ID: 0d7e4ba3c1fa7429d64256aee0cb097f2337c7359f90d3c0400d5dc2287be7ac
                                                                                                                        • Instruction ID: 7ea0ae7e469c76fe78dbfe1be9dbcf74865331957d85c1ad786556a91ee35cca
                                                                                                                        • Opcode Fuzzy Hash: 0d7e4ba3c1fa7429d64256aee0cb097f2337c7359f90d3c0400d5dc2287be7ac
                                                                                                                        • Instruction Fuzzy Hash: 70A15C32B45A528BDB24EB19D4A1A7D77E2FB84B84F004136DE5D43BA8DF39E845CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C3B10 Relevance: 14.2, APIs: 1, Strings: 7, Instructions: 172COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: ICON$SELF$TRANSIENT$can't make "%s" a master: it is an icon for %s$can't make "%s" a transient: it is an icon for %s$setting "%s" as master creates a transient/master cycle$window ?master?
                                                                                                                        • API String ID: 0-1237605634
                                                                                                                        • Opcode ID: 3eb233a4ed8f4784f485b33f62e33693819cf2c2c5ebd14cfbce1ae5b681eb2a
                                                                                                                        • Instruction ID: acf1b554e01b00617fb0798238dfb4d6d1a4561a23a1366c1fbcff425a0c287d
                                                                                                                        • Opcode Fuzzy Hash: 3eb233a4ed8f4784f485b33f62e33693819cf2c2c5ebd14cfbce1ae5b681eb2a
                                                                                                                        • Instruction Fuzzy Hash: 0C814A71B0AB8782EB549B16D5A4BB967A1FB48B94F084432DE2D877BCCF3CE4458740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C9FAB Relevance: 14.1, APIs: 2, Strings: 6, Instructions: 136stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmpstrtol
                                                                                                                        • String ID: "%s" option requires an additional argument$ARG$INTEGER$MISSING$expected %s argument for "%s" but got "%s"$integer
                                                                                                                        • API String ID: 826613874-1598512142
                                                                                                                        • Opcode ID: b3ad5ceb6f2eb501605b98779fa210828681e0c8b282bd6f9da46d1ab53b2909
                                                                                                                        • Instruction ID: 0aed32bde1c9ff7ed04535399ce6a3813b15baf94a2870a47880d89c68fe299a
                                                                                                                        • Opcode Fuzzy Hash: b3ad5ceb6f2eb501605b98779fa210828681e0c8b282bd6f9da46d1ab53b2909
                                                                                                                        • Instruction Fuzzy Hash: 5D519EA2B0AA8785EB619F05E460B7967A0FB45BA4F045132CE6E877ECCF3CE441C740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2CA059 Relevance: 14.1, APIs: 2, Strings: 6, Instructions: 135stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmpstrtod
                                                                                                                        • String ID: "%s" option requires an additional argument$ARG$FLOAT$MISSING$expected %s argument for "%s" but got "%s"$floating-point
                                                                                                                        • API String ID: 1067362368-3606263203
                                                                                                                        • Opcode ID: e1826304d8cd0dc696530cb59c8d60975446d8b9f8c7729ea9acfb31f092940c
                                                                                                                        • Instruction ID: 43315a85a8a24e7bbb339caf37d13d4ee5bec496e11173451f4066498d029c1b
                                                                                                                        • Opcode Fuzzy Hash: e1826304d8cd0dc696530cb59c8d60975446d8b9f8c7729ea9acfb31f092940c
                                                                                                                        • Instruction Fuzzy Hash: 25518066B0AA8785EB619F05E460B7967A0FB45BA4F045132CE6E477ECCF3CE445C740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2A90B0 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 103windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Palette$Entries$CapsDeviceIndexNearestRelease
                                                                                                                        • String ID: Tried to free a color that isn't allocated
                                                                                                                        • API String ID: 4205069011-2779224477
                                                                                                                        • Opcode ID: eab7953c60a2a30dbc23622fbd1888aa1d6037c6d7554f485e38f62513e59e22
                                                                                                                        • Instruction ID: 7c3f353b9547deb618e7417ff9ac37b5a3e5fc1b5f0c8cba174f52362c55ec4f
                                                                                                                        • Opcode Fuzzy Hash: eab7953c60a2a30dbc23622fbd1888aa1d6037c6d7554f485e38f62513e59e22
                                                                                                                        • Instruction Fuzzy Hash: 6E418F36719A8282EB04DB26E86883D77A5FB88B90F114135DE5E877A8DF3CE405CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BB6C2 Relevance: 14.1, APIs: 4, Strings: 4, Instructions: 91COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: BitsClientRectRelease
                                                                                                                        • String ID: ($XGetGeometry: invalid pixmap$XGetGeometry: invalid window$XGetGeometry: unable to get bitmap size
                                                                                                                        • API String ID: 3715867303-1062310972
                                                                                                                        • Opcode ID: 50fd3f02188caa23b94b9ba4b6d0efd7dbc8e5e75ed74c764118041867d2fccf
                                                                                                                        • Instruction ID: afdab1a7c22132854c390f8351d0b21ddb8f70accf128f2522c3e8e9d34e0827
                                                                                                                        • Opcode Fuzzy Hash: 50fd3f02188caa23b94b9ba4b6d0efd7dbc8e5e75ed74c764118041867d2fccf
                                                                                                                        • Instruction Fuzzy Hash: 93411F76709A838AE7609F15E464B6D77A0FB48B84F408535DA9D877ACCF3CE449CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB377E30 Relevance: 13.8, APIs: 1, Strings: 8, Instructions: 321COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: MISSING$Missing value for "%s".$REQUIRED$TTK$Ttk$VSAPI$missing required arguments 'class' and/or 'partId'$option
                                                                                                                        • API String ID: 0-1444459223
                                                                                                                        • Opcode ID: 28b5e4a1d1c7a925a9917ab9ce786b4f8d0f34081dec90b72739fd5668c3f888
                                                                                                                        • Instruction ID: b38b2eb1d5a6ceaed2f9f237e75a48ff7b95a0bd455b339648361a0cdf431323
                                                                                                                        • Opcode Fuzzy Hash: 28b5e4a1d1c7a925a9917ab9ce786b4f8d0f34081dec90b72739fd5668c3f888
                                                                                                                        • Instruction Fuzzy Hash: D0F16C76B09B8686EB14AF15E8606AE7BE1FB48B88F104136DE5D477A8DF3CD548C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB39D75C Relevance: 13.7, APIs: 9, Instructions: 230COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Initialize__scrt_acquire_startup_lock__scrt_dllmain_after_initialize_c__scrt_dllmain_crt_thread_attach__scrt_initialize_crt__scrt_release_startup_lock
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 349153199-0
                                                                                                                        • Opcode ID: f60d5a3652d2e80e6d90f2cf5ccf06eafa4475a69d57026e1e74f8958da8b3a9
                                                                                                                        • Instruction ID: 251c4364a8e80ecbba30e4d9ec9dc68494c69be1a68e9f4b682659ba31f85b1b
                                                                                                                        • Opcode Fuzzy Hash: f60d5a3652d2e80e6d90f2cf5ccf06eafa4475a69d57026e1e74f8958da8b3a9
                                                                                                                        • Instruction Fuzzy Hash: 8C81AC21F8E24387FB54BB699462AB926D2AF95788F444035D97D837FEDE3CE8058700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2A9CD0 Relevance: 13.7, APIs: 3, Strings: 6, Instructions: 168stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memset$strcmp
                                                                                                                        • String ID: -xpstyle$FILEDIALOG$VALUE$option$value for "%s" missing$value for "-xpstyle" missing
                                                                                                                        • API String ID: 4285334728-3137637625
                                                                                                                        • Opcode ID: 7d761e278274960795548e1108c0030fd5dc58b13ae1ea00c22dce4565d1a762
                                                                                                                        • Instruction ID: 8e7776b38de72c68f0025cf1734152dee24ede8ee2b3f9434a9117fa689e1bd5
                                                                                                                        • Opcode Fuzzy Hash: 7d761e278274960795548e1108c0030fd5dc58b13ae1ea00c22dce4565d1a762
                                                                                                                        • Instruction Fuzzy Hash: D2818F76B0AA8792EB14EB15E460ABA73A5FB88B84F404132DE5D477ACDF3CE145C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB30B2F0 Relevance: 13.6, APIs: 3, Strings: 6, Instructions: 71stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: JUSTIFY$VALUE$bad justification "%s": must be left, right, or center$center$left$right
                                                                                                                        • API String ID: 1114863663-1981215257
                                                                                                                        • Opcode ID: b31141ee62b558c986496a74525ebeee0c3c3722696a62403dc0f2cb3a9d82ee
                                                                                                                        • Instruction ID: 7d0712dddaddcc331d9bef3036c1084ce7fb1ab2963df21efcbf612ee705f3d5
                                                                                                                        • Opcode Fuzzy Hash: b31141ee62b558c986496a74525ebeee0c3c3722696a62403dc0f2cb3a9d82ee
                                                                                                                        • Instruction Fuzzy Hash: 8431BE69B4968382EB009B16E46027963E1FB45BD8F588171DEAD077ECDF3CE446C701
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB30B140 Relevance: 13.6, APIs: 3, Strings: 6, Instructions: 71stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: CAP$VALUE$bad cap style "%s": must be butt, projecting, or round$butt$projecting$round
                                                                                                                        • API String ID: 1114863663-941674569
                                                                                                                        • Opcode ID: fee941a46fe4c8d76ce32e60095a2b42eb3e56421b91d9ccb8fcab411fd29f8b
                                                                                                                        • Instruction ID: 3a01ebb58cca78d49fbb668783623c1f2be67c9e46ff6628d078de1863910ee4
                                                                                                                        • Opcode Fuzzy Hash: fee941a46fe4c8d76ce32e60095a2b42eb3e56421b91d9ccb8fcab411fd29f8b
                                                                                                                        • Instruction Fuzzy Hash: 2C319869B49A8382EB009B06E46077923E0BB45BD8F484131CEAD077BDEF3CE146C701
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2EDE90 Relevance: 12.7, APIs: 1, Strings: 6, Instructions: 412COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CreateMessage$BitmapDeleteErrorFormatFreeLastLocalObjectReleaseSection
                                                                                                                        • String ID: "$CANVAS$GC already registered in Tk_GetGC$SCROLL_REGION$bad scrollRegion "%s"$called GCInit after GCCleanup
                                                                                                                        • API String ID: 1892380217-3500747879
                                                                                                                        • Opcode ID: 8fb7eb02a151afbc9cf74589d9eb637b56c59fac7a7946a5319a2a1195bb9101
                                                                                                                        • Instruction ID: a3213b052b917d3ab169dbc3fa879255ee4fb8141497bd96df1bb94e57ef0ab8
                                                                                                                        • Opcode Fuzzy Hash: 8fb7eb02a151afbc9cf74589d9eb637b56c59fac7a7946a5319a2a1195bb9101
                                                                                                                        • Instruction Fuzzy Hash: 24224676705B8686EB54DF26E460BAD37A1FB88B88F044036CE6D977A8DF38E454C740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2B73C0 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 236windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Menu$CountDestroyDrawInsertItemRemoveSystem
                                                                                                                        • String ID: .system
                                                                                                                        • API String ID: 3512009929-2053189015
                                                                                                                        • Opcode ID: 6cae8fd17f34155e0c91d174716c24ffd8440d4f93f6a5e5eb54b19094500aad
                                                                                                                        • Instruction ID: 7faea4482520bd7988167c547c00e42d1ea99d3c8634a51b647b733f46bbc86e
                                                                                                                        • Opcode Fuzzy Hash: 6cae8fd17f34155e0c91d174716c24ffd8440d4f93f6a5e5eb54b19094500aad
                                                                                                                        • Instruction Fuzzy Hash: 51B1733671AA8686EB25CB15E464B7977A1FB88B84F048135DE6E477B8DF3CE441CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB30BE60 Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 188COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Cursor$Capture
                                                                                                                        • String ID: GRAB$GRABBED$grab failed: another application has grab
                                                                                                                        • API String ID: 3198408678-3878467564
                                                                                                                        • Opcode ID: dad5115b9e30cd38ee97b81aa9e27861ca0ac6e0cf43807c9d02d0dc7028662a
                                                                                                                        • Instruction ID: 6288d8e493ca8be156de67b9828757c57054aabbe24fada0a26a3606f302feba
                                                                                                                        • Opcode Fuzzy Hash: dad5115b9e30cd38ee97b81aa9e27861ca0ac6e0cf43807c9d02d0dc7028662a
                                                                                                                        • Instruction Fuzzy Hash: 91916E3674A68287EB14EF15E460AA977E0FF88B88F444131DA9E47BA9DF3CE455C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2CC030 Relevance: 12.4, APIs: 1, Strings: 6, Instructions: 175COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: isprint
                                                                                                                        • String ID: %s-$-%u$<<%s>>$Double-$Quadruple-$Triple-
                                                                                                                        • API String ID: 3707773532-11434533
                                                                                                                        • Opcode ID: c0e08eedeb8e068c1fd20f1d63954dd6b8224c5fdabeeb564ef7255839b6278d
                                                                                                                        • Instruction ID: f3ea1c4a35979ce588f9ec9be65a33b2c114a295ef8b3a096330ce3a808bf024
                                                                                                                        • Opcode Fuzzy Hash: c0e08eedeb8e068c1fd20f1d63954dd6b8224c5fdabeeb564ef7255839b6278d
                                                                                                                        • Instruction Fuzzy Hash: B18190B6B0AA8386EB649F1AD460A7967A1FB45BD0F445031CE6E47BB8CF3CE444C340
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB30B740 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 145stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • strtod.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,?,?,?,?,?,00007FFDFB30B6F3), ref: 00007FFDFB30B7CA
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,00007FFDFB30B6F3), ref: 00007FFDFB30B7F3
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,00007FFDFB30B6F3), ref: 00007FFDFB30B908
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: isspace$strtod
                                                                                                                        • String ID: FRACTIONAL_PIXELS$VALUE$bad screen$bad screen distance "%s"
                                                                                                                        • API String ID: 442120894-3131690245
                                                                                                                        • Opcode ID: 8dfa7e9f78f740b46a3a0475078a063135f90e08b70804e15cb64e3040f849d4
                                                                                                                        • Instruction ID: 56216c571a65cf9b160b7091bc53bf8baf47384ea86385f76cf3bc05f4f55819
                                                                                                                        • Opcode Fuzzy Hash: 8dfa7e9f78f740b46a3a0475078a063135f90e08b70804e15cb64e3040f849d4
                                                                                                                        • Instruction Fuzzy Hash: 8F617F6AB49A8786DB549F25D060A7973E0FF55BC8F088232D99E173B9DF3CE0468701
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB363A30 Relevance: 12.2, APIs: 1, Strings: 7, Instructions: 239stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: (processing "%.40s" option)$#%d$Either a "-name" or a "-image" argument must be provided to the "image create" subcommand$IMAGE_CREATE_USAGE$TEXT$VALUE_MISSING$value for "%s" missing
                                                                                                                        • API String ID: 1114863663-2852547179
                                                                                                                        • Opcode ID: 6fc7fe953c8b7ff014ea3bdafb20065b8353970a990788b312c06aae37c76e00
                                                                                                                        • Instruction ID: dc6f4cde3809facf2209fa82e154037cdcba1ea36171e3e3d3ad865d96336fe8
                                                                                                                        • Opcode Fuzzy Hash: 6fc7fe953c8b7ff014ea3bdafb20065b8353970a990788b312c06aae37c76e00
                                                                                                                        • Instruction Fuzzy Hash: A9B17D36B4AB8786EB50AF15E464AB967A1FB88B94F044131DE6E477E8DF3CD405C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB317B00 Relevance: 12.2, APIs: 1, Strings: 7, Instructions: 238COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memcpy
                                                                                                                        • String ID: EARLY_END$EOF$IMAGE$PNG$channel read failed: %s$unexpected end of file$unexpected end of image data
                                                                                                                        • API String ID: 3510742995-1708351035
                                                                                                                        • Opcode ID: 93bced0b82a3faa930af59cd9a9970b205fb7f29d7fba7ae7f23bab67619e878
                                                                                                                        • Instruction ID: 6342d08f77b4df1f629b5b6d45688441741c41529c79b5f242250c9837b7fa1b
                                                                                                                        • Opcode Fuzzy Hash: 93bced0b82a3faa930af59cd9a9970b205fb7f29d7fba7ae7f23bab67619e878
                                                                                                                        • Instruction Fuzzy Hash: F6B17FA6B4AA8792EB109F259460B793BE1FB45B84F089131CE6D077A9DF3CE445C740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C9DE0 Relevance: 12.2, APIs: 1, Strings: 7, Instructions: 191stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: AMBIGUOUS$API_ABUSE$ARG$UNRECOGNIZED$ambiguous option "%s"$bad argument type %d in Tk_ArgvInfo$unrecognized argument "%s"
                                                                                                                        • API String ID: 1114863663-1680451580
                                                                                                                        • Opcode ID: 4782460638ff28e2a6ed027618969a2ada2167d93ef53e651af2a097859ccf1a
                                                                                                                        • Instruction ID: f5f0ed83c85cb62781061c9585e91310643e91c4c2307cc66f90982b6e684620
                                                                                                                        • Opcode Fuzzy Hash: 4782460638ff28e2a6ed027618969a2ada2167d93ef53e651af2a097859ccf1a
                                                                                                                        • Instruction Fuzzy Hash: 7881AD76B0AA8786EB619B05E860BBA77A0FB55B94F044132CE5D877ACCF3CE445C740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BF690 Relevance: 12.1, APIs: 1, Strings: 7, Instructions: 148stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: ?boolean?$LOOKUP$TOPLEVEL$option$option window ?arg ...?$tracing$window "%s" isn't a top-level window
                                                                                                                        • API String ID: 1114863663-1970093346
                                                                                                                        • Opcode ID: 030d2df6f86db98be90e1f72575fdebced554a435d2cfc87e00946f99c977189
                                                                                                                        • Instruction ID: 52441ce2c1bb9317ae5c1660bf4f30f8dbfce84d82169aacffd2ce7eadbd0159
                                                                                                                        • Opcode Fuzzy Hash: 030d2df6f86db98be90e1f72575fdebced554a435d2cfc87e00946f99c977189
                                                                                                                        • Instruction Fuzzy Hash: 0D518276B0AA8796EB14DB55D860ABD23A4FB48B84F448432CE2D877B8DF3CE545C740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB399F90 Relevance: 12.1, APIs: 1, Strings: 7, Instructions: 129COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memset
                                                                                                                        • String ID: #$Cannot delete root item$ROOT$TREE$TTK$TreeviewSelect$items
                                                                                                                        • API String ID: 2221118986-2347191746
                                                                                                                        • Opcode ID: 2863dbb0642079feac273ac412789f3e329ca05715a8cc78f72b57c13d446a49
                                                                                                                        • Instruction ID: 9379ad21331785d579f73d92066c47218d7a1b15f0aa5d6c7f3e2f41c38e2195
                                                                                                                        • Opcode Fuzzy Hash: 2863dbb0642079feac273ac412789f3e329ca05715a8cc78f72b57c13d446a49
                                                                                                                        • Instruction Fuzzy Hash: C6515C3274AB8B83EB54EB12E560AA977E1FB48B88F044535DE6D077A8DF3CE5458340
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2A9FED Relevance: 12.1, APIs: 1, Strings: 7, Instructions: 112stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strcmp
                                                                                                                        • String ID: -xpstyle$LOOKUP$NO_MAIN_WINDOW$NULL main window$WINDOW$bad window path name "%s"$option
                                                                                                                        • API String ID: 1004003707-853872699
                                                                                                                        • Opcode ID: f68739bc49b372af0123cddd5d110f9f0d0c18da064812332e661aa23b62c7ce
                                                                                                                        • Instruction ID: 82219d0023796c76cd0f7ad1ee2277981e98cca044728a9c4aa839722d7fa5bb
                                                                                                                        • Opcode Fuzzy Hash: f68739bc49b372af0123cddd5d110f9f0d0c18da064812332e661aa23b62c7ce
                                                                                                                        • Instruction Fuzzy Hash: 36514A76B4AB8792EB149B15E4746B967A4FF89B84F044032CE2D4B7A8DF3CE446C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BD410 Relevance: 12.1, APIs: 8, Instructions: 60windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: PaletteRectSelect$BrushCreateDeleteFillObjectReleaseSolidWindow
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1881377833-0
                                                                                                                        • Opcode ID: ee1fc9b2c598e497d733940babaa20dc1482da0b3d7769bc4772980bd7ad1694
                                                                                                                        • Instruction ID: e3cc0ec2ee492c0253cf3e9565ef0e3bd9e1f1b8836848b5d46fd42538adc509
                                                                                                                        • Opcode Fuzzy Hash: ee1fc9b2c598e497d733940babaa20dc1482da0b3d7769bc4772980bd7ad1694
                                                                                                                        • Instruction Fuzzy Hash: 5F214C36719A428BEB54AF26E86456A73A1FB8DFC8F044035DE9E47768DE3CE0458B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB316020 Relevance: 10.8, APIs: 2, Strings: 5, Instructions: 291COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: GIF$IMAGE$MALFORMED$error reading GIF image: %s$malformed image
                                                                                                                        • API String ID: 0-4136127321
                                                                                                                        • Opcode ID: fedb1562ed183d033e759b5e36068e204e2b6058cb4f0b41f5984ba8c23f28b5
                                                                                                                        • Instruction ID: 55ed997017451ac19f6b639ad174767786ce8331aeb8df1e77ff7d9c647ec33a
                                                                                                                        • Opcode Fuzzy Hash: fedb1562ed183d033e759b5e36068e204e2b6058cb4f0b41f5984ba8c23f28b5
                                                                                                                        • Instruction Fuzzy Hash: 01D1D732B4E69286D7109B15E860BAAB7E4F78A784F045135EA9D43BEDDF3CD445CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB31D1D2 Relevance: 10.8, APIs: 2, Strings: 5, Instructions: 254stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp$memcpy
                                                                                                                        • String ID: {}$-data$-data {} {} {}$-format$-format {} {} {}
                                                                                                                        • API String ID: 2549481713-3415009684
                                                                                                                        • Opcode ID: 75b700865f3d022eed0657b5821c6194d8aad7b270f1fdd98874105a01ccb2ae
                                                                                                                        • Instruction ID: 1475bd5ca07de6fe80085414d25630083c4034f5da311a507204bfea81966cd2
                                                                                                                        • Opcode Fuzzy Hash: 75b700865f3d022eed0657b5821c6194d8aad7b270f1fdd98874105a01ccb2ae
                                                                                                                        • Instruction Fuzzy Hash: 07B14F65B4A68393EB14AB56A878AB927E1FB4ABC4F445431CD2E077B8DF3CE445C300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2FF450 Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 229COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: fabs$memcmp
                                                                                                                        • String ID: (in command executed by spinbox)$%lf$down
                                                                                                                        • API String ID: 1615362767-1224525252
                                                                                                                        • Opcode ID: a0bc780d8814dee1cbc2825dbe60097a2194cae40d1440581dd0d66949e6cb1e
                                                                                                                        • Instruction ID: f75f84cf9dd6e4eab75cd2285593c00e4ddeee28eaf01af417cf26701cc5689d
                                                                                                                        • Opcode Fuzzy Hash: a0bc780d8814dee1cbc2825dbe60097a2194cae40d1440581dd0d66949e6cb1e
                                                                                                                        • Instruction Fuzzy Hash: 83C18E36B0AAC7C2EB519F25D460ABA67A0FB89B84F044232CE6D477ACDF3CD5458700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2B3560 Relevance: 10.7, APIs: 7, Instructions: 204COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Object$MetricsSelectText_stricmp$Delete
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3730606855-0
                                                                                                                        • Opcode ID: e8218b8a645185f960bc0342bcf7a3b6dd1e201e973912dee5f455428b3627ae
                                                                                                                        • Instruction ID: 36ffb58a0377e85909b64d7d39664f9aeb1867f24125babb19c997171812da99
                                                                                                                        • Opcode Fuzzy Hash: e8218b8a645185f960bc0342bcf7a3b6dd1e201e973912dee5f455428b3627ae
                                                                                                                        • Instruction Fuzzy Hash: 9CA1C426719F868AD7129F35D4605A963A4FF59BC4F008332EE5D53B68DF38E486CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB34B17F Relevance: 10.7, APIs: 1, Strings: 6, Instructions: 156stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: ": should be "-command"$-command$?-command command?$TkBTreeLinesTo couldn't find line$TkBTreeLinesTo couldn't find node$wrong option "
                                                                                                                        • API String ID: 1114863663-3890656830
                                                                                                                        • Opcode ID: 64ca3cee4f43ebdcd45856186e202ca6fdfbe70e0bc33a1c3918c02f39a80ad8
                                                                                                                        • Instruction ID: 5943c59b84b8b2ecbbce841fdcab66c340c4eadf08ac150d1a85b80ed5c423c6
                                                                                                                        • Opcode Fuzzy Hash: 64ca3cee4f43ebdcd45856186e202ca6fdfbe70e0bc33a1c3918c02f39a80ad8
                                                                                                                        • Instruction Fuzzy Hash: DB71F92AB4AA87C3EB54AB16D464A7977E4FB48F84F094171CE6D073B8DF38E9458301
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB301E30 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 122COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: printf
                                                                                                                        • String ID: focus cleared after %s died$forwarding focus to %s after %s died$releasing focus to root after %s died
                                                                                                                        • API String ID: 3524737521-3504952018
                                                                                                                        • Opcode ID: aed2d57de07a5d37f97fb9204d8ed0dd5f7b958d39045c27056f24617ce957fc
                                                                                                                        • Instruction ID: c6a2c2fdb6fc39439dffc013f16a3cb717f55312fc79885f356e651346f21a37
                                                                                                                        • Opcode Fuzzy Hash: aed2d57de07a5d37f97fb9204d8ed0dd5f7b958d39045c27056f24617ce957fc
                                                                                                                        • Instruction Fuzzy Hash: 06513B7264AF8282DB649F11E450BA977E4FB44BC8F188535EBAD077A8DF38D855C300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2E7D80 Relevance: 10.6, APIs: 2, Strings: 5, Instructions: 106stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: LOOKUP$SMOOTH$ambiguous smooth method "%s"$bezier$smoothMethod
                                                                                                                        • API String ID: 1114863663-1216440562
                                                                                                                        • Opcode ID: c1e567aa46e1fd8fd5259557a2ee301fc0e34aebfcb21525e2bcc8f2c1454afe
                                                                                                                        • Instruction ID: 6e4006d5b126e422ce5fe680269808127daa2f3242952a71192a4221a21cdd11
                                                                                                                        • Opcode Fuzzy Hash: c1e567aa46e1fd8fd5259557a2ee301fc0e34aebfcb21525e2bcc8f2c1454afe
                                                                                                                        • Instruction Fuzzy Hash: 57415026B4AB8382EB509F12E820AB967A4FB45B94F484031DE6D477BCDF3CE446C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2E3690 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 94stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: isspace$strtod
                                                                                                                        • String ID: CANVAS$POINTS$bad distance "%s"
                                                                                                                        • API String ID: 442120894-3072977745
                                                                                                                        • Opcode ID: d10588029180334d7fa07a1af415b9c47d36a737bd18fd1edcb30811c8581142
                                                                                                                        • Instruction ID: 25850331b5c867a019d3cc42e89d3341a5c33f8dd096f62688d3ec82104c74e8
                                                                                                                        • Opcode Fuzzy Hash: d10588029180334d7fa07a1af415b9c47d36a737bd18fd1edcb30811c8581142
                                                                                                                        • Instruction Fuzzy Hash: E341D461B0EA8782E7528B22A4B0A7AB7F0BF49B86F444131DA5D577F8DF3DE4418700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2B0040 Relevance: 10.6, APIs: 7, Instructions: 66windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ModePalette$DeleteObjectRealizeReleaseSelect
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3511821735-0
                                                                                                                        • Opcode ID: 44490bb2eedf07de0f0a93b270647fcd6f2e883f4a4dddcb82cd56644a364d9b
                                                                                                                        • Instruction ID: ddb81a40fa40d5ab179c2a4b869f36a2aba9f3a885b3f9762edba5baa0536aff
                                                                                                                        • Opcode Fuzzy Hash: 44490bb2eedf07de0f0a93b270647fcd6f2e883f4a4dddcb82cd56644a364d9b
                                                                                                                        • Instruction Fuzzy Hash: 45210C35B0964287EB14EB12E46056A73A1FB89FD4F144131DE9D47BADCF3CE1528B44
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB343800 Relevance: 9.2, APIs: 3, Strings: 2, Instructions: 476COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: DeleteObject$CreateMessage$BitmapErrorFormatFreeLastLocalReleaseSection
                                                                                                                        • String ID: GC already registered in Tk_GetGC$called GCInit after GCCleanup
                                                                                                                        • API String ID: 450180425-2292843906
                                                                                                                        • Opcode ID: 496dfc1ad23ecb3163f852ba8dc5a9a77af0c788a041b816fb6c2e65d5b77d05
                                                                                                                        • Instruction ID: 72698cdd570b7c4c8e6c397ed5165470968163107b839b6cdcd61c1782f94754
                                                                                                                        • Opcode Fuzzy Hash: 496dfc1ad23ecb3163f852ba8dc5a9a77af0c788a041b816fb6c2e65d5b77d05
                                                                                                                        • Instruction Fuzzy Hash: AA424476605B82CAD764DF21E894BAD7BB4F788B88F014126DEAD477A8CF38D594C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB339560 Relevance: 9.1, APIs: 1, Strings: 5, Instructions: 117stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: LOOKUP$OPTION$ambiguous option "%s"$couldn't find synonym for option "%s"$unknown option "%s"
                                                                                                                        • API String ID: 1114863663-765166007
                                                                                                                        • Opcode ID: 038b2e3330d5fbfe93899b13400df1ba4388a16df574226d91088d0e3e688b3d
                                                                                                                        • Instruction ID: 93763245861c02d470c0f41fb1f2070484f3597ca09e40ac11aa6f95fc566b7b
                                                                                                                        • Opcode Fuzzy Hash: 038b2e3330d5fbfe93899b13400df1ba4388a16df574226d91088d0e3e688b3d
                                                                                                                        • Instruction Fuzzy Hash: D4413C62B4A643D2EB51AB15E46067A62E0BB45BA4F484231DE6E477FCCF3CE485C600
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB314010 Relevance: 9.1, APIs: 6, Instructions: 111COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000,00007FFDFB313BE1), ref: 00007FFDFB314043
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000,00007FFDFB313BE1), ref: 00007FFDFB314056
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000,00007FFDFB313BE1), ref: 00007FFDFB314084
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000,00007FFDFB313BE1), ref: 00007FFDFB3140D5
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000,00007FFDFB313BE1), ref: 00007FFDFB314117
                                                                                                                        • isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000,00007FFDFB313BE1), ref: 00007FFDFB314167
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: isspace
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3785662208-0
                                                                                                                        • Opcode ID: 35e145db685ce273285fc17d4865c1be36b76f72ea80924c7aefada051b6bfee
                                                                                                                        • Instruction ID: 364efdb2718ff54dd8ae461a1a31bfddc97062b199757d73d4e82f86bac0d77c
                                                                                                                        • Opcode Fuzzy Hash: 35e145db685ce273285fc17d4865c1be36b76f72ea80924c7aefada051b6bfee
                                                                                                                        • Instruction Fuzzy Hash: 8641F621F4A683A3E7505B2694B0A3867E9FB16B58F095131DA7D436F8CF3DE8548B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2A9F02 Relevance: 9.1, APIs: 1, Strings: 5, Instructions: 106stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strcmp
                                                                                                                        • String ID: -xpstyle$@Q$option$unicode$utf-16
                                                                                                                        • API String ID: 1004003707-4247030715
                                                                                                                        • Opcode ID: e674ac6053932bc2219dcbe53f09a6e74a3e51078cd40869430b8ce4603097fd
                                                                                                                        • Instruction ID: 8c0725182f8ea5e32f8d9a851ced710673fc20658af872288773ae0d6ce54d90
                                                                                                                        • Opcode Fuzzy Hash: e674ac6053932bc2219dcbe53f09a6e74a3e51078cd40869430b8ce4603097fd
                                                                                                                        • Instruction Fuzzy Hash: 31513A76B0AB8292EB249B15E464ABA67E4FB88B84F444036DA5D877BCDF3CD4458700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB31B7C0 Relevance: 9.1, APIs: 2, Strings: 4, Instructions: 96COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memset
                                                                                                                        • String ID: IMAGE$PNG$ZLIB_INIT$zlib initialization failed
                                                                                                                        • API String ID: 2221118986-4061978001
                                                                                                                        • Opcode ID: 4e1744f2ce02bd384f29b6ada58b980af4657cc3407e69f51b931669dbe6be59
                                                                                                                        • Instruction ID: b44943fc053c40c7c1b94c68e0951018ba08265e130614c2188be9df4d80dd1c
                                                                                                                        • Opcode Fuzzy Hash: 4e1744f2ce02bd384f29b6ada58b980af4657cc3407e69f51b931669dbe6be59
                                                                                                                        • Instruction Fuzzy Hash: A1418175B4AA8783EB10AB11E560BB973A0FB88B84F445031DA5D077A9DF3CD5498740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB3159B0 Relevance: 9.1, APIs: 4, Strings: 2, Instructions: 86stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: GIF87a$GIF89a
                                                                                                                        • API String ID: 1114863663-2918331024
                                                                                                                        • Opcode ID: a47371907900b61d1f99a0246e29cbb49c232022d542c0c7c6e318a99b759d9a
                                                                                                                        • Instruction ID: 8ded292205c9610e84401afbf624327cf9850b5c0806526834e600730e339812
                                                                                                                        • Opcode Fuzzy Hash: a47371907900b61d1f99a0246e29cbb49c232022d542c0c7c6e318a99b759d9a
                                                                                                                        • Instruction Fuzzy Hash: FE319522B8A64397EB10AF11E4A057A67E1FB85B84F405137DA9D866FCDF3CD445C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2F52A0 Relevance: 9.1, APIs: 1, Strings: 5, Instructions: 75stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                          • Part of subcall function 00007FFDFB2F5B10: strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,00007FFDFB2F4024), ref: 00007FFDFB2F5B69
                                                                                                                        • strcmp.API-MS-WIN-CRT-STRING-L1-1-0 ref: 00007FFDFB2F530A
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strcmpstrncmp
                                                                                                                        • String ID: ?-displayof window? id$?bad atom?$ATOM$LOOKUP$no atom exists with id "%s"
                                                                                                                        • API String ID: 1845225520-257443217
                                                                                                                        • Opcode ID: e30e16e10c5cd29a034dfa47fd1e4295028fcdadba5086db01832d86c1117325
                                                                                                                        • Instruction ID: b2514763d1138c93c9ab9d6ec7cf7b2f222ab55d4bc59be26fa2090affc0c51b
                                                                                                                        • Opcode Fuzzy Hash: e30e16e10c5cd29a034dfa47fd1e4295028fcdadba5086db01832d86c1117325
                                                                                                                        • Instruction Fuzzy Hash: AA313026B4ABC382E710AB65D464ABD27A1FB48B99F444132CE2D5B7ACDF3CE145C710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB3033E0 Relevance: 9.1, APIs: 1, Strings: 4, Instructions: 313COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: ObjectStock
                                                                                                                        • String ID: FONT$INTERNAL_PROBLEM$ansifixed$failed to allocate font due to internal system font engine problem
                                                                                                                        • API String ID: 3428563643-2695973982
                                                                                                                        • Opcode ID: 91ca7d19fa494d7f57c6f7d1ecd4c110ac9e5b07bbd78f532938f3cd6d090831
                                                                                                                        • Instruction ID: f7058d85679bf1e7dfed6116081aacb0922db1157bdf793be06dc6f637600d90
                                                                                                                        • Opcode Fuzzy Hash: 91ca7d19fa494d7f57c6f7d1ecd4c110ac9e5b07bbd78f532938f3cd6d090831
                                                                                                                        • Instruction Fuzzy Hash: 0BE19B7674AB8687DB649F16E460A6977E4FB48BC8F084136CE5E477A8DF38E444C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C5E37 Relevance: 9.1, APIs: 6, Instructions: 61COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CapsDevice$Release
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1035833867-0
                                                                                                                        • Opcode ID: da919b167b2d2db880862a623c689a940f5d39462a6c82fd7a135c5151f8cbab
                                                                                                                        • Instruction ID: b83bd90b1530c5be819801abc47211e8ab21df9389481ee1cdd601893b335cf8
                                                                                                                        • Opcode Fuzzy Hash: da919b167b2d2db880862a623c689a940f5d39462a6c82fd7a135c5151f8cbab
                                                                                                                        • Instruction Fuzzy Hash: A9213D76B5960287DB259F25E460A7933A1FB84BA5F40403ADA1F43BA9DF3CE4518B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB377140 Relevance: 9.1, APIs: 6, Instructions: 58windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Palette$ModeRealizeSelect$DeleteDrawEdgeRelease
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2205746550-0
                                                                                                                        • Opcode ID: 459eabd2be3b1ec8ca527e498cc30a88b4e1457007170cf8ea0243cc8729384d
                                                                                                                        • Instruction ID: f3299e81695a7e2163bdb233bb8b475a34eda69b2af887979e3d7e405d84fa8e
                                                                                                                        • Opcode Fuzzy Hash: 459eabd2be3b1ec8ca527e498cc30a88b4e1457007170cf8ea0243cc8729384d
                                                                                                                        • Instruction Fuzzy Hash: 02217F75B5978683EB50AB11F85056A73A1FB89BD4F145031EE6E4776CDE3CE0908B00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2AFC30 Relevance: 9.0, APIs: 6, Instructions: 40COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Path$Stroke$BeginCloseFigureFill
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1426282545-0
                                                                                                                        • Opcode ID: 28960997232ff0461e93403564a71207db1d6146813fbd019ff1d0159963ae2c
                                                                                                                        • Instruction ID: c3b81303b5812eccc45d68189c4d0af415df139bb26155b31887d4b80771ebce
                                                                                                                        • Opcode Fuzzy Hash: 28960997232ff0461e93403564a71207db1d6146813fbd019ff1d0159963ae2c
                                                                                                                        • Instruction Fuzzy Hash: D7015B25B09A43C6DB14EB12F6A497D73A2EB55FC8B044130DEAA47BB8DF3CE5418740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB301660 Relevance: 9.0, APIs: 3, Strings: 2, Instructions: 265COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID:
                                                                                                                        • String ID: Defocussed implicit Async$Focussed implicitly on %s
                                                                                                                        • API String ID: 0-3552124771
                                                                                                                        • Opcode ID: 920ec2f35f0c0a6c7cdab7a0f85c6ebd3e3d7cc93d385bde80aa5321d6becb7c
                                                                                                                        • Instruction ID: af4cff8d43aaa5a904d45d01c05c2a9c6b05f9029924075c1f225b90b44a0652
                                                                                                                        • Opcode Fuzzy Hash: 920ec2f35f0c0a6c7cdab7a0f85c6ebd3e3d7cc93d385bde80aa5321d6becb7c
                                                                                                                        • Instruction Fuzzy Hash: D7C17972B4AB8287EB609B54E054B6E37E4FF44B88F184035EB9D47BA8DF38E4519700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB3073A0 Relevance: 9.0, APIs: 3, Strings: 2, Instructions: 257COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: atof$atoi
                                                                                                                        • String ID: iso8859-1$normal
                                                                                                                        • API String ID: 342931922-3590427085
                                                                                                                        • Opcode ID: dbf60c2780e663ac52312b4439232f2bb9225a6d9374a33ecafbf2f4e56d19ae
                                                                                                                        • Instruction ID: c5e7967aef28fd351480d083103a3e3e071ab08380c7ac2a9aef7edb1a4d72dd
                                                                                                                        • Opcode Fuzzy Hash: dbf60c2780e663ac52312b4439232f2bb9225a6d9374a33ecafbf2f4e56d19ae
                                                                                                                        • Instruction Fuzzy Hash: 1BB1B422B89AC787EB659B2594606B937E1FF557C8F484131DAED062ECDF3CE5818700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB38FAA0 Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 150COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strchr
                                                                                                                        • String ID: orientation$pbar$trough
                                                                                                                        • API String ID: 2830005266-651220168
                                                                                                                        • Opcode ID: 535948df01ea5ba275d2a2862251ad4ed9ea06522c1d8a490dfbea219add28bc
                                                                                                                        • Instruction ID: 498830e043914d187078bf708bf4e14ebf372cc7571a4a1efbb3d4ba6bbe92ab
                                                                                                                        • Opcode Fuzzy Hash: 535948df01ea5ba275d2a2862251ad4ed9ea06522c1d8a490dfbea219add28bc
                                                                                                                        • Instruction Fuzzy Hash: D4716272A19A869AE7129F74D0505E973F4FF59788F008332EE0D67A68EF34E596C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C38D0 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 125windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MessageSendTextWindow
                                                                                                                        • String ID: window ?newTitle?
                                                                                                                        • API String ID: 893732450-417226443
                                                                                                                        • Opcode ID: 8c74e68171ef1c0bb3220698f2b731647f6854d312bc160e4b1651c8657b0b4a
                                                                                                                        • Instruction ID: 155cfce954c154ef5ac3cd93ed6c5a91bf1e169659fadc7f25a38d978dc726b9
                                                                                                                        • Opcode Fuzzy Hash: 8c74e68171ef1c0bb3220698f2b731647f6854d312bc160e4b1651c8657b0b4a
                                                                                                                        • Instruction Fuzzy Hash: D051637671AAC683EB549B11E460BB923A0FB88FA4F044631DE6E477E8CF3CD5558700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB329140 Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 125stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strtol
                                                                                                                        • String ID: LISTBOX_INDEX$VALUE$bad listbox index "%s": must be active, anchor, end, @x,y, or a number
                                                                                                                        • API String ID: 76114499-2473673577
                                                                                                                        • Opcode ID: 311d33b1df9397c9973cb5b7d795ca192bb6cc731d157cd16d97d1fb711e9167
                                                                                                                        • Instruction ID: 76bad0ea3ee27d26e4fde8b872b1d8c5300b3378431f2d9d8baedf2548d00cab
                                                                                                                        • Opcode Fuzzy Hash: 311d33b1df9397c9973cb5b7d795ca192bb6cc731d157cd16d97d1fb711e9167
                                                                                                                        • Instruction Fuzzy Hash: A7513A36749B8687EB189F25D464AA977A1FB88B80F448136CF5D47BA8DF3DE814C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2E7A40 Relevance: 7.8, APIs: 1, Strings: 4, Instructions: 252COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memcpy
                                                                                                                        • String ID: DASH$VALUE$bad dash list "%s": must be a list of integers or a format like "-.."$expected integer in the range 1..255 but got "%s"
                                                                                                                        • API String ID: 3510742995-3022990855
                                                                                                                        • Opcode ID: ff7f2ad2c5ce970df49d2c91d9d024016229b49c6df97058fffc60f9643b391f
                                                                                                                        • Instruction ID: 7e52410f0c5cc2828f35ccaac92350011e304ef18852f0e92430111e070a8bd1
                                                                                                                        • Opcode Fuzzy Hash: ff7f2ad2c5ce970df49d2c91d9d024016229b49c6df97058fffc60f9643b391f
                                                                                                                        • Instruction Fuzzy Hash: AAA18076B0AA8786EB54CF26D474A7967A1FB45B80F144031DEAD8B7E8DE3CE845C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB34544B Relevance: 7.6, APIs: 1, Strings: 4, Instructions: 107stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: activate element$arrow1$arrow2$slider
                                                                                                                        • API String ID: 1114863663-1361700830
                                                                                                                        • Opcode ID: 6d71767b591031cbf040cb49ee33ffcf308e2116310d88593a63e6beddd9646e
                                                                                                                        • Instruction ID: cd42bec46d7a73919e258dbef59ad3fdb0fe94563fe2eceab4bae5a393e098f1
                                                                                                                        • Opcode Fuzzy Hash: 6d71767b591031cbf040cb49ee33ffcf308e2116310d88593a63e6beddd9646e
                                                                                                                        • Instruction Fuzzy Hash: 6A511BA5B8AA87C3EB54AB11E474ABD37E1BB40B80F454571CA6E073E8CF3CE5588710
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C7B8F Relevance: 7.6, APIs: 5, Instructions: 106windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message$ClientCountPeekScreenTick
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1485206722-0
                                                                                                                        • Opcode ID: 5b2ca130a345014a14187298303c18e07f0ee7bfbdb8e88a649f2c615ce4ad27
                                                                                                                        • Instruction ID: 8ab80aa59509728bb3eab0384657f92ab95c6071834d4a12982aeae4b8a23762
                                                                                                                        • Opcode Fuzzy Hash: 5b2ca130a345014a14187298303c18e07f0ee7bfbdb8e88a649f2c615ce4ad27
                                                                                                                        • Instruction Fuzzy Hash: 7241A1B2B0A6828BE7108F39D494ABD7BA5F754368F500535DA6997AFCCB3CD440CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C7B7A Relevance: 7.6, APIs: 5, Instructions: 106windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message$ClientCountPeekScreenTick
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1485206722-0
                                                                                                                        • Opcode ID: 84834e4f85497fdefdf827ee31b069c734f028a88741af95a8c5cf4c336f29b3
                                                                                                                        • Instruction ID: ee3706d40aba80e51fa83a267269eefe9ce9140e2e8b92d2fad75567f23fb7e1
                                                                                                                        • Opcode Fuzzy Hash: 84834e4f85497fdefdf827ee31b069c734f028a88741af95a8c5cf4c336f29b3
                                                                                                                        • Instruction Fuzzy Hash: DA41A0B2B0A6828BE7108F39D4A4ABD7BA5F754368F500535DA6997AFCCB3CD440CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C7BA4 Relevance: 7.6, APIs: 5, Instructions: 105windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message$ClientCountPeekScreenTick
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1485206722-0
                                                                                                                        • Opcode ID: e51480fbda045a7729199b78982805dd31c808c772a1b2b494e7fcdc5b63368c
                                                                                                                        • Instruction ID: acac1a90ac69d3ee3fc6d839b25aa4ec4ae5b88c502919677d6a66d7c81378e1
                                                                                                                        • Opcode Fuzzy Hash: e51480fbda045a7729199b78982805dd31c808c772a1b2b494e7fcdc5b63368c
                                                                                                                        • Instruction Fuzzy Hash: 5F41A0B2B0A6828BE7108F39D494ABD7BA5F754368F100535DA6997AFCCB3CD440CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2F5A4C Relevance: 7.6, APIs: 1, Strings: 4, Instructions: 102stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,00007FFDFB2F4024), ref: 00007FFDFB2F5B69
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: -displayof$DISPLAYOF$NO_VALUE$value for "-displayof" missing
                                                                                                                        • API String ID: 1114863663-1107398220
                                                                                                                        • Opcode ID: 427daf0df973bb45e2963596b9bde1cb8850975a984e944e0abe1576cd356f22
                                                                                                                        • Instruction ID: 96d3973d12f176329266e499f5fc2a8d3fc888a4911017469ff32d33f1ccaf9b
                                                                                                                        • Opcode Fuzzy Hash: 427daf0df973bb45e2963596b9bde1cb8850975a984e944e0abe1576cd356f22
                                                                                                                        • Instruction Fuzzy Hash: D741C3DBF4DBC243EB014B10BC657A92BB1FB92B89F494066DE49437AAEE1CD006C701
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C7B73 Relevance: 7.6, APIs: 5, Instructions: 97windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message$ClientCountPeekScreenTick
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1485206722-0
                                                                                                                        • Opcode ID: 4dec2f3798839b0a977b2f4ef521ad81f4d09940a558a41601e32fcd3340dd38
                                                                                                                        • Instruction ID: d8dd3796b941212c96eb717682e2d79baba778136605049fc37a0a891ade1224
                                                                                                                        • Opcode Fuzzy Hash: 4dec2f3798839b0a977b2f4ef521ad81f4d09940a558a41601e32fcd3340dd38
                                                                                                                        • Instruction Fuzzy Hash: CD41AFB2B0A2828BE7108F79D0A4ABD7BA5F794368F100535DA5997AFCCB3CD440CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C7B65 Relevance: 7.6, APIs: 5, Instructions: 97windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message$ClientCountPeekScreenTick
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1485206722-0
                                                                                                                        • Opcode ID: f29d191c5333d7d8e47fe5d089a7922c67d5653bb243d95fe9bde3a50a48ef66
                                                                                                                        • Instruction ID: 22cd0ea0e3d4e58554c7394da6cfe0821a196882552d9324ef8474c4ebfb8551
                                                                                                                        • Opcode Fuzzy Hash: f29d191c5333d7d8e47fe5d089a7922c67d5653bb243d95fe9bde3a50a48ef66
                                                                                                                        • Instruction Fuzzy Hash: 6741AFB2B0A2828BE7108F79D0A4ABD7BA5F794368F100535DA5997AFCCB3CD440CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2C7B6C Relevance: 7.6, APIs: 5, Instructions: 97windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Message$ClientCountPeekScreenTick
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1485206722-0
                                                                                                                        • Opcode ID: 17bfa2f67a5a9c283115526b6f6a5c79e18a8c581edd0a516a32e8ac3f6ac08a
                                                                                                                        • Instruction ID: bbc78e92ff5cf48b661e8d035b28a832acb94d12c485caf95c644cd572c33e7e
                                                                                                                        • Opcode Fuzzy Hash: 17bfa2f67a5a9c283115526b6f6a5c79e18a8c581edd0a516a32e8ac3f6ac08a
                                                                                                                        • Instruction Fuzzy Hash: 9241AFB2B0A2828BE7108F79D0A4ABD7BA5F794368F100535DA5997AFCCB3CD440CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2F5B10 Relevance: 7.6, APIs: 1, Strings: 4, Instructions: 64stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,00007FFDFB2F4024), ref: 00007FFDFB2F5B69
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: -displayof$DISPLAYOF$NO_VALUE$value for "-displayof" missing
                                                                                                                        • API String ID: 1114863663-1107398220
                                                                                                                        • Opcode ID: 34e0a8fcf58fbb21c5e9e73f22943e0dcdf7f666ccbda82f5c0b30830affedac
                                                                                                                        • Instruction ID: 9e8b3d98d5211ed0244a1684a55739afff40657f5bc11e7e6a2156c9761f1683
                                                                                                                        • Opcode Fuzzy Hash: 34e0a8fcf58fbb21c5e9e73f22943e0dcdf7f666ccbda82f5c0b30830affedac
                                                                                                                        • Instruction Fuzzy Hash: 12214B25B4AB8382EB049B16E8646B967A1FB85BD4F144132DE6E877BCDF3CD405C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB39BCA0 Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 193COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: DeleteObject
                                                                                                                        • String ID: GC already registered in Tk_GetGC$called GCInit after GCCleanup
                                                                                                                        • API String ID: 1531683806-2292843906
                                                                                                                        • Opcode ID: 1ba56521c2b516465840409f63f88d48a1105e5086d60667dc32848df0d62b93
                                                                                                                        • Instruction ID: 370c7391cd805e2d4811a49f2f0c844e170273f8e4ea3b4ab5a21967bfd5562a
                                                                                                                        • Opcode Fuzzy Hash: 1ba56521c2b516465840409f63f88d48a1105e5086d60667dc32848df0d62b93
                                                                                                                        • Instruction Fuzzy Hash: A5A15876705B868BE710DF21E8906AD7BB5FB88B88F104126DE9D67B68CF38D455CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BBCA0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 64windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Focus$ForegroundWindow
                                                                                                                        • String ID: ChangeXFocus got null X window
                                                                                                                        • API String ID: 332191172-2759626269
                                                                                                                        • Opcode ID: 79e415d5b7c09eb9aba549897e044710052940487d3eed8ec156a0d58408c175
                                                                                                                        • Instruction ID: 5a6980a6564092d9bf2ecda1d58e9b117f71490c80ccd5b7fda02b079a359f78
                                                                                                                        • Opcode Fuzzy Hash: 79e415d5b7c09eb9aba549897e044710052940487d3eed8ec156a0d58408c175
                                                                                                                        • Instruction Fuzzy Hash: 3621DE3AB06A42C5EB54DF16E46466D63B0FB88F94F189135DE5E877A8DF3CD8428700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB3477B0 Relevance: 6.2, APIs: 2, Strings: 2, Instructions: 174stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memcpystrncpy
                                                                                                                        • String ID: (command handling selection)$%s %d %d
                                                                                                                        • API String ID: 1306114417-3905136827
                                                                                                                        • Opcode ID: bc447c51ded86011300dc18e3990b0b03abe62348ddbc5bb24eafc798974218c
                                                                                                                        • Instruction ID: 6230749d7443c6c535e99569ec792ed447ec15516ed4041a71edb8135dbf981b
                                                                                                                        • Opcode Fuzzy Hash: bc447c51ded86011300dc18e3990b0b03abe62348ddbc5bb24eafc798974218c
                                                                                                                        • Instruction Fuzzy Hash: 70716E36B49AC2C7DB249F16A864AB977A0FB45B94F048175CE6E077A8DF3CE548C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2E5773 Relevance: 6.2, APIs: 4, Instructions: 156COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: floor
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 3192247854-0
                                                                                                                        • Opcode ID: dca8c1aff2651996ee778c59b6f8e1188370eaf82d875e3b7a32c10e19399be3
                                                                                                                        • Instruction ID: a595c9fa1dff4a88b4ebac2f862f70d1073a49e9adcfbff7ffe77320e5ba5587
                                                                                                                        • Opcode Fuzzy Hash: dca8c1aff2651996ee778c59b6f8e1188370eaf82d875e3b7a32c10e19399be3
                                                                                                                        • Instruction Fuzzy Hash: F9717863E24FC58EE3039B3484111A9A368BFBB3D9B15D317EE5976426EF21B4D38600
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2B7A90 Relevance: 6.1, APIs: 4, Instructions: 85COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MetricsSystem
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 4116985748-0
                                                                                                                        • Opcode ID: 5e22646b2a0e381b911b4f96314bb50e102e7462fcd5d626d5eee1f6743d1311
                                                                                                                        • Instruction ID: 45b7d1b7a38b243562a96cf7bb950192ba0841c32016e2e589bd1a11fa6e5159
                                                                                                                        • Opcode Fuzzy Hash: 5e22646b2a0e381b911b4f96314bb50e102e7462fcd5d626d5eee1f6743d1311
                                                                                                                        • Instruction Fuzzy Hash: B8319E26B0665387E714EB259968B7923D1FB88B94F048035DF1D83BF9DE3DE8818B40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BBAF0 Relevance: 6.1, APIs: 4, Instructions: 65keyboardCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MetricsSystem$CursorInputSend
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2736685547-0
                                                                                                                        • Opcode ID: c1beda15105599e4b48286f23b5c0bd3eee2b766d56de1f3b1e3c102d41c3d64
                                                                                                                        • Instruction ID: cb63211e7760e72101721ef7bd8d612daa360c0e78abcf80bca310955ffc539d
                                                                                                                        • Opcode Fuzzy Hash: c1beda15105599e4b48286f23b5c0bd3eee2b766d56de1f3b1e3c102d41c3d64
                                                                                                                        • Instruction Fuzzy Hash: 2121F83770971247D7248F19A555A2D76E6FB84744F549138EA5D83BACCF3DE8448F00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB315C10 Relevance: 6.1, APIs: 2, Strings: 2, Instructions: 61stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,00007FFDFB314FCD), ref: 00007FFDFB315C69
                                                                                                                        • strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,00007FFDFB314FCD), ref: 00007FFDFB315C85
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: GIF87a$GIF89a
                                                                                                                        • API String ID: 1114863663-2918331024
                                                                                                                        • Opcode ID: 97deac9953d8300f190b3f53a88f85c78e122efde66bfbbbe5d1a961536ab3d6
                                                                                                                        • Instruction ID: 409f0523f57a1c87a8bf4b6f2a59f9ef72c0cb1cbee2160716b71380316d418f
                                                                                                                        • Opcode Fuzzy Hash: 97deac9953d8300f190b3f53a88f85c78e122efde66bfbbbe5d1a961536ab3d6
                                                                                                                        • Instruction Fuzzy Hash: 4F21B671B5D69352EB50AF16E86096A77E1EB85780F009031F9AE876ADDE3CE505CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB315B10 Relevance: 6.1, APIs: 2, Strings: 2, Instructions: 57stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: GIF87a$GIF89a
                                                                                                                        • API String ID: 1114863663-2918331024
                                                                                                                        • Opcode ID: a415bcbf246640b0b1fc0e99d50ef606468733d07f2de1a689c2366edf7ce0ac
                                                                                                                        • Instruction ID: bebb1089390785d4d6c515ea8c82e2f0e240408208d4c1ede839992fa93d383d
                                                                                                                        • Opcode Fuzzy Hash: a415bcbf246640b0b1fc0e99d50ef606468733d07f2de1a689c2366edf7ce0ac
                                                                                                                        • Instruction Fuzzy Hash: 052116766097818AD760DF15E450B5ABBE5F788B80F148135EA9C83B68DF38E444CF40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2B1180 Relevance: 6.0, APIs: 4, Instructions: 42COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Color$ModeText
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 2971265119-0
                                                                                                                        • Opcode ID: 8ff24b4d6cb84e5ce693fa236d7e32a9472d5901dab78fb5be6d747a13adf9cc
                                                                                                                        • Instruction ID: 61a8c9b8991a36e5a16177c33e376f9c1d6dcf3894c9cdb3471a0ae57a2d3c11
                                                                                                                        • Opcode Fuzzy Hash: 8ff24b4d6cb84e5ce693fa236d7e32a9472d5901dab78fb5be6d747a13adf9cc
                                                                                                                        • Instruction Fuzzy Hash: 0D017072B1968187D714DF11F95562AB3E2FB897A4F504035EA8D43B68DF3CD4548F00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2E1FCC Relevance: 6.0, APIs: 1, Strings: 3, Instructions: 36stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: USAGE$can't specify both -file and -channel$monochrome
                                                                                                                        • API String ID: 1114863663-3063129647
                                                                                                                        • Opcode ID: ee432efd05150fb423a4b6a01d6aaacfc2e1813a0624a59d5299ab59b97ba8ed
                                                                                                                        • Instruction ID: 933cad0249f6aada05534071d8c086727d30c628f71bb18537f5e71d8c9522e5
                                                                                                                        • Opcode Fuzzy Hash: ee432efd05150fb423a4b6a01d6aaacfc2e1813a0624a59d5299ab59b97ba8ed
                                                                                                                        • Instruction Fuzzy Hash: 87113C61F0A64389FB55AF62D474BB827A0AB447A8F140635C93F865FCDF7CA845C300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2E1FFD Relevance: 6.0, APIs: 1, Strings: 3, Instructions: 35stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: USAGE$can't specify both -file and -channel$monochrome
                                                                                                                        • API String ID: 1114863663-3063129647
                                                                                                                        • Opcode ID: b674ac22a3d2cc94870d6f7ca02447d0397f48d2e1a1346799e6f553c8dc373b
                                                                                                                        • Instruction ID: d4c3d78412bf5dc6219710e96262498ad812263e0c03164d964b79f68c6c003e
                                                                                                                        • Opcode Fuzzy Hash: b674ac22a3d2cc94870d6f7ca02447d0397f48d2e1a1346799e6f553c8dc373b
                                                                                                                        • Instruction Fuzzy Hash: 04016D61F0AA4389FB509F66D460BB827A0AB54768F084331C93F865FCDF3CA445C300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2E1FF6 Relevance: 6.0, APIs: 1, Strings: 3, Instructions: 32stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: USAGE$can't specify both -file and -channel$monochrome
                                                                                                                        • API String ID: 1114863663-3063129647
                                                                                                                        • Opcode ID: 8717231d908443e25c93b89c530ca940117f35b3125a9befa527314cf63da6ff
                                                                                                                        • Instruction ID: c62cfa2c5405b289e8fde1f4497719997101b03d8d7c85d3acacb744b52c87c1
                                                                                                                        • Opcode Fuzzy Hash: 8717231d908443e25c93b89c530ca940117f35b3125a9befa527314cf63da6ff
                                                                                                                        • Instruction Fuzzy Hash: E4012D61F4AA4389FB519F62D460BB827A0AB54768F140335C93F865FCDF3CA445C300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2F5172 Relevance: 6.0, APIs: 4, Instructions: 32COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MetricsSystem
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 4116985748-0
                                                                                                                        • Opcode ID: d4eea191784f4fd0ccd33f98db94fce9666b2e66e9365af663836613be627458
                                                                                                                        • Instruction ID: 63a207b1d1406333b9955fa2ebc944509723dca462f659d4b02fa8873ce23ba0
                                                                                                                        • Opcode Fuzzy Hash: d4eea191784f4fd0ccd33f98db94fce9666b2e66e9365af663836613be627458
                                                                                                                        • Instruction Fuzzy Hash: 5101861AB49A8283F3157B60A4257BD63A1FF487A9F801035CF1E437E8CF3CA4998300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2E2009 Relevance: 6.0, APIs: 1, Strings: 3, Instructions: 30stringCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: strncmp
                                                                                                                        • String ID: USAGE$can't specify both -file and -channel$monochrome
                                                                                                                        • API String ID: 1114863663-3063129647
                                                                                                                        • Opcode ID: 57a93220ab0a8f3a8e76bd33af17c1d138d2c92721b4d3cd229d9456d6caee5a
                                                                                                                        • Instruction ID: d1a31d7392334afc7d15320a7374ce833798733eed4cee1398cae2561cefaf2e
                                                                                                                        • Opcode Fuzzy Hash: 57a93220ab0a8f3a8e76bd33af17c1d138d2c92721b4d3cd229d9456d6caee5a
                                                                                                                        • Instruction Fuzzy Hash: CE014C61F0AA4389EB519F62D460BB827A0AB44B68F080335C93F866FCDF3CA445C300
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2A9720 Relevance: 6.0, APIs: 4, Instructions: 20windowCOMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: CountTick$MessagePeek
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 4145102785-0
                                                                                                                        • Opcode ID: 9759f63d5a398baef2fd32172b38041ad7bbe900bd143bafde52c79200c589dc
                                                                                                                        • Instruction ID: d9cbc1457a3d4db150e2314eeda2772352a5a3e932a01d5dcfcf048fabafb1ee
                                                                                                                        • Opcode Fuzzy Hash: 9759f63d5a398baef2fd32172b38041ad7bbe900bd143bafde52c79200c589dc
                                                                                                                        • Instruction Fuzzy Hash: DFE0E5B1F5654793E710AF11E89897C76A6FB50B0DF844030D12A825E4DF7CB58A8B14
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2F51FE Relevance: 6.0, APIs: 4, Instructions: 13COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MetricsSystem
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 4116985748-0
                                                                                                                        • Opcode ID: 39b57db8b7dba360505ec5a06b6f17545b8ab3729a53046363dbde48bcaeb08a
                                                                                                                        • Instruction ID: 0342129997224b746638c75e7bdc985f6547e2beffef2946da52f6254864a71e
                                                                                                                        • Opcode Fuzzy Hash: 39b57db8b7dba360505ec5a06b6f17545b8ab3729a53046363dbde48bcaeb08a
                                                                                                                        • Instruction Fuzzy Hash: 81E04C69B4A543D3F3043750D435A3C1693EF88795F941034CA2F867F88E7C78544315
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2F51C2 Relevance: 6.0, APIs: 4, Instructions: 12COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MetricsSystem
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 4116985748-0
                                                                                                                        • Opcode ID: 29262f1d02e6ed449e196d7ae963bdd8d546a82a04e012d83a936fb016eb3db9
                                                                                                                        • Instruction ID: 0e19c01dd49f103fd6e888dda82f40f7e1891d94fb7ec27516343ccd6260afed
                                                                                                                        • Opcode Fuzzy Hash: 29262f1d02e6ed449e196d7ae963bdd8d546a82a04e012d83a936fb016eb3db9
                                                                                                                        • Instruction Fuzzy Hash: B8D0426AB8AA4383F7083760D835A381693EF88795F942034CA2F867F88E7C68548315
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2F513F Relevance: 6.0, APIs: 4, Instructions: 10COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: MetricsSystem
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 4116985748-0
                                                                                                                        • Opcode ID: 66efd0c05d0c6530f575e06b3f0ba78321f906a030c7a152f5fcf908a65b9aea
                                                                                                                        • Instruction ID: 605185098c68dba8cf5193c9d97b3e79d936c09b842951cd8618106ebf5cafd5
                                                                                                                        • Opcode Fuzzy Hash: 66efd0c05d0c6530f575e06b3f0ba78321f906a030c7a152f5fcf908a65b9aea
                                                                                                                        • Instruction Fuzzy Hash: E6D0C259B4A54393F3483760D835B3C11D3EF88795F802038C62F816F88D7C38988325
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB309D10 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 261COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: DeleteObject
                                                                                                                        • String ID: GC already registered in Tk_GetGC$called GCInit after GCCleanup
                                                                                                                        • API String ID: 1531683806-2292843906
                                                                                                                        • Opcode ID: d211fad0a5e3517a9dea8da9d4bc941f4b4eab81ae30ad4052d95efd39235915
                                                                                                                        • Instruction ID: 7383347a5993fdec3fc72f40768c701076f8d4e83e1fdef540b8df0bbeee0a0a
                                                                                                                        • Opcode Fuzzy Hash: d211fad0a5e3517a9dea8da9d4bc941f4b4eab81ae30ad4052d95efd39235915
                                                                                                                        • Instruction Fuzzy Hash: E3C15776B4A6428BE710DF68D064AAD37F1FB18B88F050536DEAD477ACDA38E805C750
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB39B6D0 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 256COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: DeleteObject
                                                                                                                        • String ID: GC already registered in Tk_GetGC$called GCInit after GCCleanup
                                                                                                                        • API String ID: 1531683806-2292843906
                                                                                                                        • Opcode ID: 97c648f0ece240bf31a0463a30c35539799ac931f71777ca65d4c47729a1b44c
                                                                                                                        • Instruction ID: 6b2ddaa94d04428db43e6d1bb03811af393f23a78160f2810db38fb20ae19e10
                                                                                                                        • Opcode Fuzzy Hash: 97c648f0ece240bf31a0463a30c35539799ac931f71777ca65d4c47729a1b44c
                                                                                                                        • Instruction Fuzzy Hash: 5BC19676B15B818BE740DF65E450AAE77B5FB88B88F004126DE4D97BA8EF38D054CB40
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB333960 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 218COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: DeleteObject
                                                                                                                        • String ID: GC already registered in Tk_GetGC$called GCInit after GCCleanup
                                                                                                                        • API String ID: 1531683806-2292843906
                                                                                                                        • Opcode ID: 7081f304ac74c92951a803504e7a783ba784c2674fe41130bf443aa559e789b6
                                                                                                                        • Instruction ID: ea9a4b1a61bb5cb0aec7439db1ee85452020c9710b285b841110f79ddb2be461
                                                                                                                        • Opcode Fuzzy Hash: 7081f304ac74c92951a803504e7a783ba784c2674fe41130bf443aa559e789b6
                                                                                                                        • Instruction Fuzzy Hash: 8AB16272701B828AE754DF25D8A0BAD37B5F748B88F058126CEAC477A8DF38E494C740
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB387920 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 200COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: DeleteObject
                                                                                                                        • String ID: GC already registered in Tk_GetGC$called GCInit after GCCleanup
                                                                                                                        • API String ID: 1531683806-2292843906
                                                                                                                        • Opcode ID: 62177a6a8144101a3b482e9deb7661d7050f5d7d08c6a515827624fba929177b
                                                                                                                        • Instruction ID: 87387b7949c8ffe8e5528abce6fc4757e6a8a2ae51b20cef0fb4ae3af6284e61
                                                                                                                        • Opcode Fuzzy Hash: 62177a6a8144101a3b482e9deb7661d7050f5d7d08c6a515827624fba929177b
                                                                                                                        • Instruction Fuzzy Hash: A6A13676A05B82C6E754DF51E4907AE77B4F788B94F00812ADE9D47BA8DF38D494CB00
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB313750 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 166COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: DeleteObject$_stricmp_strnicmp
                                                                                                                        • String ID: (while configuring image "%s")
                                                                                                                        • API String ID: 3427489091-2813159774
                                                                                                                        • Opcode ID: fecd5878e2c67a52273f3dfd9190d5657217d698e6e010bc13d6eb2bba47edae
                                                                                                                        • Instruction ID: ae1c6b1ffc9151fc56eedf3ea7de5ee84820d2b00e81b4b91dd14b33734d7c72
                                                                                                                        • Opcode Fuzzy Hash: fecd5878e2c67a52273f3dfd9190d5657217d698e6e010bc13d6eb2bba47edae
                                                                                                                        • Instruction Fuzzy Hash: DC8169B6B06B4296DB54EF16D0A0A6937B9FB88FC4B059132DE6D477A8CF38E454C340
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB2BF3EC Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 146COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        • DestroyWindow.USER32(?,?,?,00007FFDFB373DAD), ref: 00007FFDFB2BF61D
                                                                                                                          • Part of subcall function 00007FFDFB2B1310: GetFocus.USER32 ref: 00007FFDFB2BEA92
                                                                                                                          • Part of subcall function 00007FFDFB2B1310: GetForegroundWindow.USER32 ref: 00007FFDFB2BEAA5
                                                                                                                          • Part of subcall function 00007FFDFB2B1310: IsWindow.USER32 ref: 00007FFDFB2BEAF1
                                                                                                                          • Part of subcall function 00007FFDFB2B1310: SetWindowLongPtrW.USER32 ref: 00007FFDFB2BEE65
                                                                                                                          • Part of subcall function 00007FFDFB2B1310: SetWindowLongPtrW.USER32 ref: 00007FFDFB2BEE86
                                                                                                                          • Part of subcall function 00007FFDFB2B1310: SetParent.USER32 ref: 00007FFDFB2BEE93
                                                                                                                          • Part of subcall function 00007FFDFB2B1310: SendMessageW.USER32 ref: 00007FFDFB2BEEAF
                                                                                                                          • Part of subcall function 00007FFDFB2B1310: SendMessageW.USER32 ref: 00007FFDFB2BEEC8
                                                                                                                          • Part of subcall function 00007FFDFB2B1310: GetDesktopWindow.USER32 ref: 00007FFDFB2BEEE0
                                                                                                                          • Part of subcall function 00007FFDFB2B1310: SetWindowLongPtrW.USER32 ref: 00007FFDFB2BEEF9
                                                                                                                        Strings
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: Window$Long$MessageSend$DesktopDestroyFocusForegroundParent
                                                                                                                        • String ID: couldn't unlink window in TkWmDeadWindow$numTransients should be 0
                                                                                                                        • API String ID: 1031645983-1239855352
                                                                                                                        • Opcode ID: d6b190077fb760b18d1987b5eeb8af9a709e2aed90162433a56498e1fa01ffda
                                                                                                                        • Instruction ID: ac70315ae7c2f0a5ff39dfbeb483cdb928ab8b5ce313787d4341ee327b2a5189
                                                                                                                        • Opcode Fuzzy Hash: d6b190077fb760b18d1987b5eeb8af9a709e2aed90162433a56498e1fa01ffda
                                                                                                                        • Instruction Fuzzy Hash: 41711B36706A8786EB599F25D5A0AB827A0FF84F84F088075CB6D477A8CF38E564C700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%

                                                                                                                        Function 00007FFDFB30FF30 Relevance: 5.1, APIs: 4, Instructions: 110COMMON
                                                                                                                        Download Yara Rule
                                                                                                                        APIs
                                                                                                                        Memory Dump Source
                                                                                                                        • Source File: 00000001.00000002.2914150571.00007FFDFB2A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFDFB2A0000, based on PE: true
                                                                                                                        • Associated: 00000001.00000002.2914125403.00007FFDFB2A0000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914235782.00007FFDFB39F000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914279431.00007FFDFB3EB000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914304573.00007FFDFB3EC000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914331809.00007FFDFB3F0000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914356268.00007FFDFB3F1000.00000008.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914381488.00007FFDFB3F3000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        • Associated: 00000001.00000002.2914406567.00007FFDFB3F5000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                        Joe Sandbox IDA Plugin
                                                                                                                        • Snapshot File: hcaresult_1_2_7ffdfb2a0000_Aimbot.jbxd
                                                                                                                        Similarity
                                                                                                                        • API ID: memcpymemset
                                                                                                                        • String ID:
                                                                                                                        • API String ID: 1297977491-0
                                                                                                                        • Opcode ID: b881d419e223d39fe836a36bdf1888140deef11a0747f9838951f222f3b7755b
                                                                                                                        • Instruction ID: b2a50d1f3376faba28284692e5bf2c744dce5584e7ae35affced1247509c705a
                                                                                                                        • Opcode Fuzzy Hash: b881d419e223d39fe836a36bdf1888140deef11a0747f9838951f222f3b7755b
                                                                                                                        • Instruction Fuzzy Hash: 1B41A9B6705B8A83DB54AF56E8E08697BA9FB8DFC07051026DE5D077A9CF38C8458700
                                                                                                                        Uniqueness

                                                                                                                        Uniqueness Score: -1.00%