Static task
static1
General
-
Target
1515.rar
-
Size
5.9MB
-
MD5
3b9553688c8a19e3044dd5e2843f9c51
-
SHA1
9ffa5bfd5c988979cf0d414a853eb260ab88e6b2
-
SHA256
4018a61b067f53d23458d4c5915f62a5a30c5cb8e702e4d2d175f62edeb8b6cd
-
SHA512
e1b42f5362222a20b531b31c93c7438149015e7bb224667ab8025bd899ddb74f9d747b3df24a5e4d8ba9b615e83dfc672c3e9bbb0298d0632f4c5814f1a59983
-
SSDEEP
98304:DsRx2hTrqWwz6cVqY+zopbjfZ5jecBwCRQ903sY/djQtpIeN7jEuz679hUutSjM:DsmhXPwz6co5UpbTEP903sY/ZEPGbtS4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Hogwarts.exe
Files
-
1515.rar.rar
Password: 1515
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Autofills/Google_[Chrome]_Default.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Autofills/Google_[Chrome]_Profile 3.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Autofills/Google_[Chrome]_Profile 4.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Autofills/Microsoft_[Edge]_Default.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Cookies/Google_[Chrome]_Default Network.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Cookies/Google_[Chrome]_Profile 1.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Cookies/Google_[Chrome]_Profile 3 Network.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Cookies/Google_[Chrome]_Profile 4 Network.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Cookies/Microsoft_[Edge]_Default Network.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/DomainDetects.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/FileGrabber/Users/moh baathem/Documents/worksheets Grade (5) week 5 Term 3.docx.docx office2007
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/ImportantAutofills.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/InstalledBrowsers.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/InstalledSoftware.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Passwords.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/ProcessList.txt
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Screenshot.jpg.jpg
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Steam/DialogConfig.vdf
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/Steam/config.vdf
-
1/AEA88AD46C7E84605BD89FEE5B78A7B672_2023_01_02T04_33_29_187183/UserInformation.txt
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Autofills/Microsoft_[Edge]_Default.txt
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Autofills/Opera GX_Unknown.txt
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Cookies/Firefox_00s54k75.default-release.txt
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Cookies/Microsoft_[Edge]_Default Network.txt
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Cookies/Opera GX_Unknown Network.txt
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Discord/Tokens.txt
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/DomainDetects.txt
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/ImportantAutofills.txt
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/InstalledSoftware.txt
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Passwords.txt
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/ProcessList.txt
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Screenshot.jpg.jpg
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/DialogConfig.vdf
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/DialogConfigOverlay_1440x1080.vdf
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/DialogConfigOverlay_1440x900.vdf
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/DialogConfigOverlay_1920x1009.vdf
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/DialogConfigOverlay_1920x1080.vdf
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/DialogConfigOverlay_2560x1440.vdf
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/config.vdf
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/coplay_76561198848999815.vdf
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/coplay_76561199436490538.vdf
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/libraryfolders.vdf
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/loginusers.vdf
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/ssfn11452725096558861
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/Steam/ssfn380554174753723714
-
1/ATE835DCB2444D60BBA19E880667DA1A6B_2023_01_03T05_18_48_757076/UserInformation.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Autofills/BraveSoftware_[Brave-Browser]_Default.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Autofills/Microsoft_[Edge]_Default.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Autofills/Opera GX_Unknown.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Cookies/BraveSoftware_[Brave-Browser]_Default Network.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Cookies/Google_[Chrome]_Default Network.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Cookies/Microsoft_[Edge]_Default Network.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Cookies/Opera GX_Unknown Network.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/DomainDetects.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/FileGrabber/Users/phoen/Documents/Hunt Challenge Point System.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/ImportantAutofills.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/InstalledBrowsers.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/InstalledSoftware.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Passwords.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/ProcessList.txt
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Screenshot.jpg.jpg
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/DialogConfig.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/DialogConfigOverlay_1152x864.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/DialogConfigOverlay_1280x600.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/DialogConfigOverlay_1280x720.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/DialogConfigOverlay_1280x768.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/DialogConfigOverlay_1280x960.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/DialogConfigOverlay_1536x864.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/DialogConfigOverlay_1680x1050.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/DialogConfigOverlay_1920x1080.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/DialogConfigOverlay_1920x991.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/DialogConfigOverlay_800x600.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/config.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/coplay_76561198388916849.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/libraryfolders.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/loginusers.vdf
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/ssfn7139207050908600
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/Steam/ssfn8282119723405510129
-
1/AU2F717FBF407D1B2AC309216027596E9A_2023_01_03T08_00_04_535523/UserInformation.txt
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/Aurora.Aurora
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/BraveSoftware_Login Data.db
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/BraveSoftware_Web Data.db
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/Debug.txt
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/Google_Cookies.db
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/Google_Login Data.db
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/Microsoft_Cookies.db
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/Microsoft_Login Data.db
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/Microsoft_Web Data.db
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/Mozilla_cookies.sqlite.db
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/Opera Software_Login Data.db
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/Opera Software_Web Data.db
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cache/Steam_Cookies.db
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cookies/Google.txt
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Cookies/Microsoft.txt
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Password/Google.txt
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Passwords.txt
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/Screenshot (0_1920x1080).png.png
-
1/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/[BR]543eac13-becc-4488-95fb-01d8287187bd_@Ventenda/UserInformation.txt
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Autofills/Microsoft.txt
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Cache/Aurora.Aurora
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Cache/Debug.txt
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Cache/Microsoft_Cookies.db
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Cache/Microsoft_Login Data.db
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Cache/Microsoft_Web Data.db
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Cache/Opera Software_Login Data.db
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Cache/Opera Software_Web Data.db
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Cache/Steam_Cookies.db
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Cookies/Microsoft.txt
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Password/Microsoft.txt
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Passwords.txt
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/Screenshot (0_1920x1080).png.png
-
1/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/[HU]c4685ddb-b6f9-4a3e-8805-efbf43e34f95_@Ventenda/UserInformation.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Autofills/Google.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Autofills/Opera Software.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Aurora.Aurora
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Debug.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Google_Cookies.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Google_Login Data.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Google_Web Data.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Microsoft_Cookies.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Microsoft_Guest Profile_Login Data.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Microsoft_Guest Profile_Web Data.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Microsoft_Login Data.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Microsoft_Profile 1_Cookies.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Microsoft_Profile 1_Login Data.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Microsoft_Profile 1_Web Data.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Microsoft_Web Data.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Mozilla_cookies.sqlite.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Opera Software_Cookies.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Opera Software_Login Data.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Opera Software_Web Data.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cache/Steam_Cookies.db
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Card/Microsoft.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Card/Microsoft_Profile 1.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cookies/Google.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cookies/Microsoft.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cookies/Microsoft_Profile 1.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cookies/Mozilla.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Cookies/Opera Software.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Password/Google.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Password/Microsoft_Profile 1.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Password/Opera Software.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Passwords.txt
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Screenshot (0_1366x768).png.png
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Telegram/4ED7D5A0BCFA99D4s
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Telegram/D877F783D5D3EF8C/configs
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Telegram/D877F783D5D3EF8C/maps
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Telegram/D877F783D5D3EF8Cs
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Telegram/F1C4C24194019BF8s
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Telegram/countries
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Telegram/key_datas
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Telegram/prefix
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Telegram/settingss
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Telegram/shortcuts-custom.json
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Telegram/shortcuts-default.json
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/Telegram/usertag
-
1/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/[MM]4696168d-8b37-4492-b825-839b9fbbfdf8_@Ventenda/UserInformation.txt
-
FastColoredTextBox.dll
-
GameDev.dll
-
Hogwarts.exe.exe windows x86
Password: 1515
ef2a5385d81720e77693d85ac42793fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
kernel32
GetStdHandle
CreateFileW
GetModuleHandleW
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
HeapSize
RaiseException
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
WriteConsoleW
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetFileSizeEx
SetFilePointerEx
CloseHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
ReadConsoleW
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 261KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.grr Size: 1.1MB - Virtual size: 1.1MB
-
OpenSource.dll
-
ReadME.dll
-
Setup.dll
-
Textures.dll
-
Themes.dll
-
Update.dll
-
exploit-main.dll