[nassimalina]

Ponhub.com Brute Checker.7z
╔═.✵.══════════╗
go to the link for download
↓↓↓
mega4up.com/hr51lopjcj84
↓↓↓
virus scan report:

https://www.virustotal.com/gui/file/1cd4.../detection

[miso]

im gonna do a deep analysis tomorrow

Virustotal Scan [2/60] (.7z archive)

Virustotal Scan [11/72] (ncrewprog.exe)

[mothered]

Moved from Hacking Tools to Cracking Tools.

For future reference, checkers and the like belong here.

[miso]

@mothered this is a legit application, it indeed does webrequests to pornhub.com with the accounts

Tools Used:
- HxD
- MiTeC EXE Explorer
- Notepad
- ExeInfo PE
- Resource Hacker (just to dump the icon)

Extracted resources (manually done):
Close Icon (32x32):
Unknown (128x128):
Unknown (32x32):
Tick in a circle (200x200):
Telegram Icon (32x32):
Information Icon (32x32):
Gray Square (10x10) [its the same color as the thread background color]:

Code:

[AppDetails] App Info: StringFileInfo [Hex] = 000004b0 Copyright = "Copyright  2019" InternalName = "ncrewprod.exe" OriginalFileName = "ncrewprod.exe" FileVersion = 1.0.0.0 ProductVersion = 1.0.0.0 AssemblyVersion = 1.0.0.0 Framework = .NET Framework 4.7.2 [/AppDetails] [chara.URLDumper]: Found 4 Links: - https://google.com/ - https://t.me/Qpride - https://www.pornhub.com/login - https://www.pornhub.com/front/authenticate [/chara.URLDumper] [chara.FilePathDumper]: Found 2 Links: - Error.txt - ].txt [/chara.FilePathDumper] [HOST::EXEPEINFO]: string(AppCompiler) = "Borland Delphi ( 2.0 - 7.0 ) 1992 - www.borland.com , Overlay : 49E76C... Nothing discovered" string(LamerUnpackInfo) = "Not packed , try OllyDbg v2 - www.ollydbg.de or IDA v7 www.hex-rays.com  or  x64 debug v0024 www.x64dbg.com" [/HOST::EXEPEINFO]: [chara.DeObTester]: HasObfuscator = Coudn't Find Any [/chara.DeObTester] [other] found an email: jhpark1105@gmail.com [/other]