c:\home\dvlp\ManagedXLL-branches-4_0\MetroFramework\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Trusted HWID Spoofer - Made By Trusted Cheat's/Trusted HWID Spoofer - Made By Trusted Cheat's.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Trusted HWID Spoofer - Made By Trusted Cheat's/Trusted HWID Spoofer - Made By Trusted Cheat's.exe
Resource
win10v2004-20240709-en
General
-
Target
Trusted HWID Spoofer - Made By Trusted Cheat's.rar
-
Size
5.7MB
-
MD5
7f8730b82c6a0e0bfa8a685b30cdff1d
-
SHA1
f98ea9941373c51047fca969b145bbb1b3810be2
-
SHA256
14823d27592d903575d8b2d5f064b42c97a4b1e23d68e8c9f43e9fb4f80efe93
-
SHA512
65d34314f95f563b770a494e3d411f18e57a8b0bc92add42452448852483f7e4e600c5ef7326d3ef38745a8ea80087aeea7114442106e23b02d03e9f9d99f36d
-
SSDEEP
98304:Kz2Gv2BfGOnEAnJ8tJFLKE5MGGe7APhCiUEcWpP75tso7C/yjiTtuLehY7x:KzgeOEAJEJtKEpE5CiRPdio4uLeS7x
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Trusted HWID Spoofer - Made By Trusted Cheat's/MetroFramework.Fonts.dll unpack001/Trusted HWID Spoofer - Made By Trusted Cheat's/MetroFramework.dll unpack001/Trusted HWID Spoofer - Made By Trusted Cheat's/Trusted HWID Spoofer - Made By Trusted Cheat's.exe
Files
-
Trusted HWID Spoofer - Made By Trusted Cheat's.rar.rar
Password: TRNe5N^5wTBB$
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/at.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/at.vienna.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/au.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/au.sydney.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/ca.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/ca.toronto.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/ch.zurich.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/de.erfurt.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/de.frankfurt.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/de.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/dk.copenhagen.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/dk.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/es.madrid.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/es.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/fi.helsinki.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/fi.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/fr.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/fr.paris.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/gb.london.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/gb.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/jp.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/jp.tokyo.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/nl.amsterdam.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/nl.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/no.oslo.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/no.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/ro.bucharest.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/ro.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/se.gothenburg.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/se.malmo.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/se.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/se.stockholm.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/se.sundsvall.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/sg.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/sg.singapore.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/us.atlanta.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/us.chicago.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/us.dallas.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/us.los-angeles.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/us.miami.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/us.new-york.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/TCP/us.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/at.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/at.vienna.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/au.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/au.sydney.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/ca.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/ca.toronto.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/ch.zurich.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/de.erfurt.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/de.frankfurt.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/de.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/dk.copenhagen.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/dk.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/es.madrid.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/es.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/fi.helsinki.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/fi.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/fr.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/fr.paris.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/gb.london.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/gb.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/jp.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/jp.tokyo.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/nl.amsterdam.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/nl.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/no.oslo.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/no.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/ro.bucharest.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/ro.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/se.gothenburg.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/se.malmo.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/se.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/se.stockholm.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/se.sundsvall.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/sg.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/sg.singapore.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/us.atlanta.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/us.chicago.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/us.dallas.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/us.los-angeles.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/us.miami.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/us.new-york.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/.ovpn file's/UDP/us.ovpn.com.ovpn
-
Trusted HWID Spoofer - Made By Trusted Cheat's/MetroFramework.Fonts.dll.dll windows:4 windows x86 arch:x86
Password: TRNe5N^5wTBB$
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 654KB - Virtual size: 653KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Trusted HWID Spoofer - Made By Trusted Cheat's/MetroFramework.dll.dll windows:4 windows x86 arch:x86
Password: TRNe5N^5wTBB$
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Trusted HWID Spoofer - Made By Trusted Cheat's/Trusted HWID Spoofer - Made By Trusted Cheat's.exe.exe windows:4 windows x86 arch:x86
Password: TRNe5N^5wTBB$
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
;ci} { Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ