[hack3628]

Educational Purposes only....

Download: 

Code:

Link removed-Staff

vt:

Code:

virustotal.com/gui/file/1af91304aa014caaab4cba6c850d2faa534442f1c5a2c5eddd4d4dee27a1fa51/detection

[mothered]

Moved from The Lounge forum to Cracking Tools.

[miso]

Educational Purposes only....

Download: 

Code:

ufile.io/a023pwzv

vt:

Code:

virustotal.com/gui/file/1af91304aa014caaab4cba6c850d2faa534442f1c5a2c5eddd4d4dee27a1fa51/detection

(currently settings up linux mint)

im gonna reverse this as soon as i get a windows VM up & running, in the meanwhile, here's what i got from the app:



Username: Nicolas
Framework used: .NET Framework 4.5
(Get.NETAppCreator glitches due to Wine)

[Tibo inc]

Educational Purposes only....

Download: 

Code:

ufile.io/a023pwzv

vt:

Code:

virustotal.com/gui/file/1af91304aa014caaab4cba6c850d2faa534442f1c5a2c5eddd4d4dee27a1fa51/detection

(currently settings up linux mint)

im gonna reverse this as soon as i get a windows VM up & running, in the meanwhile, here's what i got from the app:



Username: Nicolas
Framework used: .NET Framework 4.5
(Get.NETAppCreator glitches due to Wine)

I ran it in sandboxie and it immediately crashed. I personally wouldn't trust this but I don't know much about viruses

[mothered]

I ran it in sandboxie and it immediately crashed. I personally wouldn't trust this but I don't know much about viruses

If you have time, can you please scan the executable and post the link?

I want to see whether the checksum matches with the OP's virus scan report.

[Tibo inc]

I ran it in sandboxie and it immediately crashed. I personally wouldn't trust this but I don't know much about viruses

If you have time, can you please scan the executable and post the link?

I want to see whether the checksum matches with the OP's virus scan report.

Here is the virus total

Here is some "backstory"

[mothered]

I ran it in sandboxie and it immediately crashed. I personally wouldn't trust this but I don't know much about viruses

If you have time, can you please scan the executable and post the link?

I want to see whether the checksum matches with the OP's virus scan report.

Here is the virus total

Here is some "backstory"

Thanks for this.

The checksum of your online virus scan report differs to the OP's, which means that his/her scan Is not relative to the contribution.
It's been tampered with to some degree, hence for the safety of our community, I've removed the link.

[miso]

If you have time, can you please scan the executable and post the link?

I want to see whether the checksum matches with the OP's virus scan report.

Here is the virus total

Here is some "backstory"

Thanks for this.

The checksum of your online virus scan report differs to the OP's, which means that his/her scan Is not relative to the contribution.
It's been tampered with to some degree, hence for the safety of our community, I've removed the link.

Virustotal Scan (CrackedByRzr;exe) [2/69]

[miso]

@mothered , Relay app to download a highly-detected app. Thread is fake
i've done everything on my phone lmao, still setting up a windows vm on linux mint

tools used: HEX & Text editor

Virustotal Scan (Agent.exe) [20/72]

image.png (1):


Full log:

Code:

Form1: button1 (Button1_Click) |- has image (image.png) |- Font: Microsoft Sans Serif button2 (Button2_Click) label1 |- Font: Segoe UI checkbox1 |- Text: Auto Update checkbox2 |- Text: Re-new Trial progressbar1 Code: |- Contains fake error message |- Title: "Error!"p |- Content: C:\Users\{0}\AppData\Local\Temp\qThe application was unable to start correctly 0xc000007b urls: https://bitbucket.org/xenon49834/j3qyjxfv9wrg8d3batgynfqv/downloads/JpW5MsCN5gnSxXWgamvquHp2.txt agent.exe (is obfuscated): http://www.noshaemhhhttrdzze.com/

[mothered]

@mothered , Relay app to download a highly-detected app. Thread is fake
i've done everything on my phone lmao, still setting up a windows vm on linux mint

tools used: HEX & Text editor

Virustotal Scan (Agent.exe) [20/72]

image.png (1):


Full log:

Code:

Form1: button1 (Button1_Click) |- has image (image.png) |- Font: Microsoft Sans Serif button2 (Button2_Click) label1 |- Font: Segoe UI checkbox1 |- Text: Auto Update checkbox2 |- Text: Re-new Trial progressbar1 Code: |- Contains fake error message |- Title: "Error!"p |- Content: C:\Users\{0}\AppData\Local\Temp\qThe application was unable to start correctly 0xc000007b urls: https://bitbucket.org/xenon49834/j3qyjxfv9wrg8d3batgynfqv/downloads/JpW5MsCN5gnSxXWgamvquHp2.txt agent.exe (is obfuscated): http://www.noshaemhhhttrdzze.com/

Thanks for your In depth analysis.

There's enough evidence to conclude the file Is Infected.
Action has been taken against the OP accordingly.