FLOSS static ASCII strings
!This program cannot be run in DOS mode.
.text
`.rdata
@.data
.reloc
GNPj2h
.vbsu
.batu
.cmdu
.ps1u
PhoQ@
PhdQ@
Ph'Q@
Ph0Q@
Pj	h'Q@
SWVh:Q@
xordu?
SQRWVi
^_ZY[
<Ar	<Zw
CreateWindowExA
DefWindowProcA
DispatchMessageA
EnumWindows
GetClassNameA
GetMessageA
GetWindowTextA
GetWindowThreadProcessId
LoadCursorA
LoadIconA
RegisterClassA
SendMessageA
ShowWindow
TranslateMessage
UpdateWindow
wsprintfA
user32.dll
CloseHandle
CreateEventA
CreateFileA
CreateMutexA
CreateThread
DeleteFileA
ExitProcess
FileTimeToSystemTime
GetCommandLineA
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempPathA
GetVolumeInformationA
LocalAlloc
LocalFree
OpenMutexA
OpenProcess
SetEvent
SetFilePointer
Sleep
SystemTimeToFileTime
VirtualAlloc
VirtualFree
WaitForSingleObject
WriteFile
kernel32.dll
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
advapi32.dll
WSACleanup
WSAStartup
closesocket
connect
htons
ioctlsocket
select
setsockopt
shutdown
socket
wsock32.dll
CommandLineToArgvW
shell32.dll
WSAIoctl
freeaddrinfo
getaddrinfo
ws2_32.dll
CoCreateInstance
CoInitialize
CoUninitialize
ole32.dll
GetUserNameExA
GetUserNameExW
secur32.dll
GetModuleFileNameExA
psapi.dll
BEGINDATA
HOST1:85.25.207.68
HOST2:moscow11.icu
PORT1:4208
Fwow64
start
ALLUSERSPROFILE
win32app
Microsoft
kernel32.dll
IsWow64Process
RtlGetVersion
powershell
-WindowStyle Hidden -ep bypass -file "
ntdll.dll
LdrLoadDll
GET %s HTTP/1.0
Host: %s
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0
Connection: close
0"0O0T0b0y0
5.8?8d8u8
9F9|:
:,<n=
=8>o>d?
051H1_3
7'818V8`8
?N?T?Z?`?f?l?r?x?~?
0 0&0,02080>0D0J0P0V0\0b0h0n0t0z0

FLOSS static Unicode strings
{jjjj


FLOSS decoded 6 strings
Microsoft
win32app
 $.0<IWfv|
-WindowStyle Hidden -ep bypass -file "
kernel32.dll
ntdll.dll

FLOSS extracted 0 stackstrings

Finished execution after 54.818507 seconds
