CRACKEDBYL1nc0InNEWDCRat.rar
- SHA256 01cc2b1bca4a1a99bb6ae311ff222b788700913cb0ba765dbdee7f25160bf91a
Overview
overview
10Static
static
10[CRACKED B...at.exe
windows7-x64
3[CRACKED B...at.exe
windows10-2004-x64
6[CRACKED B...xa.dll
windows7-x64
3[CRACKED B...xa.dll
windows10-2004-x64
3[CRACKED B...BC.exe
windows7-x64
1[CRACKED B...BC.exe
windows10-2004-x64
1[CRACKED B...BT.exe
windows7-x64
1[CRACKED B...BT.exe
windows10-2004-x64
1[CRACKED B...LC.exe
windows7-x64
1[CRACKED B...LC.exe
windows10-2004-x64
1[CRACKED B...lt.exe
windows7-x64
3[CRACKED B...lt.exe
windows10-2004-x64
3[CRACKED B...C3.dll
windows7-x64
3[CRACKED B...C3.dll
windows10-2004-x64
3[CRACKED B...xt.dll
windows7-x64
3[CRACKED B...xt.dll
windows10-2004-x64
3[CRACKED B...64.dll
windows7-x64
1[CRACKED B...64.dll
windows10-2004-x64
3[CRACKED B...on.exe
windows7-x64
3[CRACKED B...on.exe
windows10-2004-x64
3[CRACKED B...ip.exe
windows7-x64
3[CRACKED B...ip.exe
windows10-2004-x64
3[CRACKED B...ib.dll
windows7-x64
1[CRACKED B...ib.dll
windows10-2004-x64
1[CRACKED B...le.exe
windows7-x64
7[CRACKED B...le.exe
windows10-2004-x64
7[CRACKED B...or.exe
windows7-x64
7[CRACKED B...or.exe
windows10-2004-x64
7[CRACKED B...nc.vbe
windows7-x64
1[CRACKED B...nc.vbe
windows10-2004-x64
1[CRACKED B...ss.exe
windows7-x64
1[CRACKED B...ss.exe
windows10-2004-x64
3Behavioral task
behavioral1
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/DCRat.exe
Resource
win7-20241023-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/DCRat.exe
Resource
win10v2004-20250314-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/7zxa.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/7zxa.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRBC.exe
Resource
win7-20241023-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRBC.exe
Resource
win10v2004-20250314-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRBT.exe
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRBT.exe
Resource
win10v2004-20250314-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRLC.exe
Resource
win7-20250207-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRLC.exe
Resource
win10v2004-20250314-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/Default.exe
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/Default.exe
Resource
win10v2004-20250314-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/NCC3.dll
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/NCC3.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/RarExt.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/RarExt.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/RarExt64.dll
Resource
win7-20241023-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/RarExt64.dll
Resource
win10v2004-20250313-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/WinCon.exe
Resource
win7-20250207-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/WinCon.exe
Resource
win10v2004-20250314-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/Zip.exe
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral22
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/Zip.exe
Resource
win10v2004-20250314-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dnlib.dll
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dnlib.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dotNET_Reactor.Console.exe
Resource
win7-20250207-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral26
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dotNET_Reactor.Console.exe
Resource
win10v2004-20250314-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral27
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dotNET_Reactor.exe
Resource
win7-20240903-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral28
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dotNET_Reactor.exe
Resource
win10v2004-20250314-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral29
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/enc.vbe
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/enc.vbe
Resource
win10v2004-20250314-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/mpress.exe
Resource
win7-20241010-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/mpress.exe
Resource
win10v2004-20250314-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target CRACKEDBYL1nc0InNEWDCRat.rar
- Size 97.2MB
- Sample250325-hkdpfssves
- SHA256 01cc2b1bca4a1a99bb6ae311ff222b788700913cb0ba765dbdee7f25160bf91a
- MD5 7e51293bc2161cb1daf677e7c95f4811
- SHA1 a228a7c2e2efd5abd891b8cfc0d33f3b536a36f3
- SHA512 04bed232d385c16425e94782ecc55ea6a33e8c92b18859c4dcd7d4697c483c5b3f46c0835bd134a3cbf1da47d22197ce7cdc7a9c06b5e9e9c76dc8d4fd766163
- SSDEEP 3145728:yEaICN96e3iUVcIEg2njK723B+CTfg8B1:yEaICr6ejSIEgeK75CTfg01
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- DCRat payload 1 IoCs
resource yara_rule static1/unpack001/[CRACKED BY L1nc0In] NEW DCRat/Patcher/stub.bin family_dcrat_v2 - Dcrat family
- Unsigned PE 15 IoCs
Checks for missing Authenticode signature.
resource unpack001/[CRACKED BY L1nc0In] NEW DCRat/DCRat/DCRat.exe unpack001/[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/7zxa.dll unpack001/[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRBC.exe unpack001/[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRBT.exe unpack001/[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRLC.exe unpack001/[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/Default.SFX unpack001/[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/WinCon.SFX unpack001/[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/Zip.SFX unpack001/[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dnlib.dll unpack001/[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dotNET_Reactor.exe unpack001/[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/mpress.exe unpack001/[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/TelegramNotifer/TelegramNotifer.dclib unpack001/[CRACKED BY L1nc0In] NEW DCRat/Patcher/Mono.Cecil.dll unpack001/[CRACKED BY L1nc0In] NEW DCRat/Patcher/Patcher.exe unpack001/[CRACKED BY L1nc0In] NEW DCRat/Patcher/stub.bin
File Explorer
-
CRACKEDBYL1nc0InNEWDCRat.rar.rar 97.2MB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/DCRat.exe.exe 72KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/Notify.wav938KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/background.cache.gif 30.7MB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/d7401f079967e4874dc9be4f077ff591797e2d70856eebd4e25b4bebe842a7b98KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/7zxa.dll.dll 160KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRBC.exe.exe 26KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRBT.exe.exe 23KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRLC.exe.exe 23KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/Default.SFX.exe 313KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/NCC3.dll.dll 72KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/RarExt.dll.dll 544KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/RarExt64.dll.dll 632KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/WinCon.SFX.exe 282KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/Zip.SFX.exe 265KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dnlib.dll.dll 1.1MB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dotNET_Reactor.Console.exe.exe 34KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dotNET_Reactor.exe.exe 13.3MB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/enc.vbe.vbe .jse 692B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/mpress.exe.exe 101KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/rar.exe.exe 623KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/wrar.exe.exe 2.4MB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/BrowsersStealer_native_table.json646B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/ClientsStealer_native_table.json553B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/CryptoStealer_table.json446B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/DomainsHighlighter_table.json334B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/FileGrabber_table.json325B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/Keylogger_native_table.json226B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/PluginsLoader_native.json1KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/eula40B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/exception-report.txt188B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IIlIllIIlIllllIIIlIIlllIIIIIlIlllIIIIllllllIlIIlllIlIlIlllIIIlIIllIIIIlIllIlIlIlIlIlIIlllIlllIIllIIllIlIlllIlIIlllIIIIll.jar.jar 688KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IIllIIIIIlIlIIlIIIllIllllIIIlllIIIlIlIIlIlIllllIIlIIllIlIlIllIIIIIlIlllllllIIIIlIIlIIllIIIlIlIlllIIIIllllIllIIIIIIlIllII.jar.jar 1.5MB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IlIIIIllIIIIIIIIIllIlIllIIIlIIllIIlIIllIIlIlIIIIIIIIIIlllIIlIllIIIlIlIllIllIlIlIlIlIllIlIllIlllIIllIlIllIlIIlllIIIIIlIlI.jar.jar 16KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IlIlIIIIIIlIIIIIIllIlIIlIllIllIlIIIlIllllIlIlllIIlIIllIllIIlIlllIIIllllIlIllIIIIIIIIIlIIlIllIIllIIlIllIIIIlIIllIllllIlIl.jar.jar 2.3MB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IllIIIIIIIlllIIIlIlIllIIIIIllIllIlIIlIllIlIIlIllIIlIlIlIlllllllIIlllllllIIlIIIlIlIlIIlIllllIlllIIllllIIlllllIllIIIlIlIlI.jar.jar 103KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IllIIIIIIlIIIIIlIllIIIIlIlIIIIlIIllIIllIIlIlllIlIlIlIIIlllllIlllIllIIIlllllIlIlIlIlllIlIIllIlIIlIlIIllIlIIllIlIlIIIlIIIl.jar.jar 31KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IlllIIlllllIIllIIIlIIlIlIlIllllIlllIllllIIIIIlIllIIIIllIIlllIllIlIlIlIIIIllIllIIllllllIllIIlllIIIlIllllIlIllIIIIIIIIlIll.jar.jar 19KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/lIIIIIIllIllllllIIlllIlIIIIlIIllllIIIIIIIIllIIIIIlIIIIIIIlllIIIIIIlIIIlIlIlIlIlIllIllIlIllIlIlIIllIlIIIIlllIllIIllIIlIIl.jar.jar 12KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/lIIlIIlllIIIIIIlllIllIIIlIlIllIlllIlIllIllllIllIIIlIlIIIlIllIllIIlllIlllllIIIlIIlIIlIIIlIlllIIllIIIIlllIIIIlIIlllIlllllI.jar.jar 250KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/lIlllIIlIIlllIIllIIIlIIIIIlIlIlIIIIlIllIIlllIlllIllIlllIlIlIlllIIllIIllIIIlIllIIIlllIlllllIlIlIIlIIIIIllllIlIllIIllIllII.jar.jar 40.9MB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/lIllllIllIlIIlIlIlllIIIllIIIIlIIllIllllIIlIIIIIlIIIlIIIIIIIIIIIIIIllIllIIlIlIlIlllllIlllllIIIIIIlIlIIIlIIllllIlIIIlIlllI.jar.jar 226KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/lIlllllIIlIllIllllIIIIlIIlIIIIIllIlllIIlIIllIllIIIlIIlllIllIIlllIIIlllIllllllllllIlIIIlIIlIllIIllIlllIlIlIIIIIIlllllIIlI.jar.jar 16KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/llIIIlllIIIllIIIIllIllIIlIIIlIllIlIIIIlIlIlIIllIIIlIIIlIIlllIIlIlIIIlIllllIIIIlIllIllllIlllIIlIIIIllIlIlIIlIIIllllllllIl.jar.jar 549KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/llIlIlIIIIIIllIllIIllIIlIlIlIllIIlllllIIlIIIIlIIIIIllIlIlIIIlIlIllllIlIlllIIlllIllIIIlIllllIIIllllIlllllIIIIIIllIlIIlIIl.jar.zip 19KB
-
META-INF/services/php.runtime.ext.support.Extension47B
-
org/develnext/jphp/ext/dctools/DCToolsExtension.class6KB
-
org/develnext/jphp/ext/dctools/classes/AES128CBCEncryption.class7KB
-
org/develnext/jphp/ext/dctools/classes/AES128ECBEncryption.class6KB
-
org/develnext/jphp/ext/dctools/classes/DeflateCompression.class3KB
-
org/develnext/jphp/ext/dctools/classes/DraggableTable.class10KB
-
org/develnext/jphp/ext/dctools/classes/GZipCompression.class3KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/llIlIlIIlllIllIlllIlIIIlIIIIlllIIIllIllllIIIIIIIIlllIlIIlllIIllIIllIlIIIllIIIIlIIlIllllIlIlllIllIIIIlIIlllIlIlIllIIlIllI.jar.jar 50KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/llIlIllIllIllIlIlllIlllIIIllllllIlIIlIllIlIlIlllIllIIIIIlllIIlIIlIllllIIIlllIllIIlIIIIIIlIlIIllIIIIlIlllIllIIlIlllIIIllI.jar.jar 262KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Audio_native.plg134B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Audio_native/Audio_native.dclib165KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Audio_native/configuration.json154B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Audio_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Autorun_native.plg120B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Autorun_native/Autorun_native.dclib42KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Autorun_native/Autorun_native_config.json3KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Autorun_native/configuration.json177B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Autorun_native/icon.png.png 4KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/BrowsersStealer_native.plg146B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/BrowsersStealer_native/BrowsersStealer_native.dclib111KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/BrowsersStealer_native/configuration.json164B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/BrowsersStealer_native/icon.png.png 415B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CMD_native.plg128B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CMD_native/CMD_native.dclib50KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CMD_native/configuration.json152B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CMD_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Chat_native.plg131B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Chat_native/Chat_native.dclib52KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Chat_native/configuration.json153B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Chat_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ClientsStealer_native.plg143B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ClientsStealer_native/ClientsStealer_native.dclib90KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ClientsStealer_native/configuration.json163B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ClientsStealer_native/icon.png.png 415B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Code_native.plg131B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Code_native/Code_native.dclib50KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Code_native/configuration.json153B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Code_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Common_native.plg137B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Common_native/Common_native.dclib44KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Common_native/configuration.json155B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Common_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CryptoStealer.plg172B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CryptoStealer/CryptoStealer.dclib42KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CryptoStealer/CryptoStealer_config.json3KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CryptoStealer/configuration.json175B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CryptoStealer/icon.png.png 96KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/DomainsHighlighter.plg181B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/DomainsHighlighter/DomainsHighlighter.dclib30KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/DomainsHighlighter/DomainsHighlighter_config.json1KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/DomainsHighlighter/configuration.json185B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/DomainsHighlighter/icon.png.png 13KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileGrabber.plg181B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileGrabber/FileGrabber.dclib36KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileGrabber/FileGrabber_config.json1KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileGrabber/configuration.json171B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileGrabber/icon.png.png 4KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileManager_native.plg154B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileManager_native/FileManager_native.dclib65KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileManager_native/configuration.json160B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileManager_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ForceAdmin.plg191B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ForceAdmin/ForceAdmin.dclib28KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ForceAdmin/configuration.json152B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ForceAdmin/icon.png.png 66KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Fun_native.plg128B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Fun_native/Fun_native.dclib47KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Fun_native/configuration.json152B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Fun_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/HiddenRemoteDesktop_native.plg180B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/HiddenRemoteDesktop_native/HiddenRemoteDesktop_native.dclib83KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/HiddenRemoteDesktop_native/configuration.json168B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/HiddenRemoteDesktop_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Keylogger_native.plg146B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Keylogger_native/Keylogger_native.dclib60KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Keylogger_native/Keylogger_native_config.json2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Keylogger_native/configuration.json181B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Keylogger_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Memory_ProcessManager_native.plg168B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Memory_ProcessManager_native/Memory_ProcessManager_native.dclib45KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Memory_ProcessManager_native/configuration.json170B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Memory_ProcessManager_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/MessageOnStart.plg193B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/MessageOnStart/MessageOnStart.dclib31KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/MessageOnStart/MessageOnStart_config.json2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/MessageOnStart/configuration.json177B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/MessageOnStart/icon.png.png 9KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ProcessManager_native.plg163B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ProcessManager_native/ProcessManager_native.dclib54KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ProcessManager_native/configuration.json163B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ProcessManager_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RegistryManager_native.plg166B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RegistryManager_native/RegistryManager_native.dclib52KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RegistryManager_native/configuration.json164B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RegistryManager_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RemoteDesktop_native.plg160B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RemoteDesktop_native/RemoteDesktop_native.dclib446KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RemoteDesktop_native/configuration.json162B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RemoteDesktop_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RotateScreen_Fun_native.plg165B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RotateScreen_Fun_native/RotateScreen_Fun_native.dclib43KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RotateScreen_Fun_native/configuration.json165B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RotateScreen_Fun_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/StartupManager_native.plg163B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/StartupManager_native/StartupManager_native.dclib52KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/StartupManager_native/configuration.json163B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/StartupManager_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/SystemInformation_native.plg152B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/SystemInformation_native/SystemInformation_native.dclib44KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/SystemInformation_native/configuration.json166B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/SystemInformation_native/icon.png.png 43KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/TelegramNotifer.plg253B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/TelegramNotifer/TelegramNotifer.dclib.dll 9KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/TelegramNotifer/TelegramNotiferDesign.json2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/TelegramNotifer/configuration.json178B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/TelegramNotifer/icon.png.png 12KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WebcamViewer_native.plg157B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WebcamViewer_native/WebcamViewer_native.dclib91KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WebcamViewer_native/configuration.json161B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WebcamViewer_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WindowsDefenderExcluder.plg206B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WindowsDefenderExcluder/WindowsDefenderExcluder.dclib30KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WindowsDefenderExcluder/WindowsDefenderExcluder_config.json929B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WindowsDefenderExcluder/configuration.json195B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WindowsDefenderExcluder/icon.png.png 34KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Zip_FileManager_native.plg153B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Zip_FileManager_native/Zip_FileManager_native.dclib384KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Zip_FileManager_native/configuration.json164B
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Zip_FileManager_native/icon.png.png 2KB
-
[CRACKED BY L1nc0In] NEW DCRat/DCRat/settings.ccdb2KB
-
[CRACKED BY L1nc0In] NEW DCRat/Patcher/Mono.Cecil.dll.dll 354KB
-
[CRACKED BY L1nc0In] NEW DCRat/Patcher/Newtonsoft.Json.dll.dll 695KB
-
[CRACKED BY L1nc0In] NEW DCRat/Patcher/Patcher.exe.exe 1.3MB
-
[CRACKED BY L1nc0In] NEW DCRat/Patcher/stub.bin.exe 504KB
-
[CRACKED BY L1nc0In] NEW DCRat/Server/Another/install.php.html .js 146KB
-
[CRACKED BY L1nc0In] NEW DCRat/Server/VDS/VDSInstall.sh.sh 4KB
-
[CRACKED BY L1nc0In] NEW DCRat/Server/VDS/install.php.html .js 146KB
[CRACKED BY L1nc0In] NEW DCRat/DCRat/DCRat.exe
- IMPHASH 6011984d7c1f1b97a34d7517a498bff8
- SHA256 5ede5d774ab65f25357cf5a1fa5e354f6f2a9868651a0fa717485802b21b1939
- MD5 2c7d37e90dd8ab57d06dad5bc7956885
- SHA1 da789c107c4c68b8250b6589e45e5a3cf7a9a143
- SHA512 e74ae891771bfd9c6fcdfbe8e4f33f0d5f7c3457cd84b257500cdaf8fa8b16fe458a18db9b3a60591465982fc2871f4c3f2e7541c765f00a0516f805e7e9ca0f
- SSDEEP 768:P7Zw33FNUf6Nhd/fQ1l+0vM0iT9HvMB90d24:zZ2FWSNhd/4131i89p4
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4752
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
kernel32
CloseHandle
CreateMutexA
CreateProcessA
ExitProcess
FindResourceExA
FormatMessageA
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetEnvironmentVariableA
GetExitCodeProcess
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GlobalMemoryStatusEx
LoadResource
LocalFree
LockResource
SetEnvironmentVariableA
SetLastError
SetUnhandledExceptionFilter
WaitForSingleObject
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_chdir
_close
_findclose
_findfirst
_findnext
_iob
_itoa
_onexit
_open
_read
_setmode
_stat
atexit
atoi
fclose
fopen
fprintf
fwrite
memset
printf
puts
signal
strcat
strchr
strcmp
strcpy
strlen
strncat
strncpy
strpbrk
strrchr
strstr
strtok
shell32
ShellExecuteA
user32
CreateWindowExA
DispatchMessageA
EnumWindows
FindWindowExA
GetMessageA
GetSystemMetrics
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
KillTimer
LoadImageA
MessageBoxA
PostQuitMessage
SendMessageA
SetForegroundWindow
SetTimer
SetWindowPos
ShowWindow
TranslateMessage
UpdateWindow
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
64B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
[CRACKED BY L1nc0In] NEW DCRat/DCRat/Notify.wav
- SHA256 fe881435f7cb3d6c9b3ab37476a11f8e5ac05b44a6d3acb07e9783e741a1b827
- MD5 821ecb39fdcdda2c09ace1cf0ff19030
- SHA1 7702857ee1ff9a85b1a6f5fb8166d37374ee2937
- SHA512 6cf91aca96a3e717652a27b923dcc61b28e378bc05d2c2cadb68ec5f7ab9616829624db1c6e53d595007b421ada7d9c4993ee7de5174dc814a7b922718fc2fd2
- SSDEEP 24576:3VrIwn80umnXehPNHdRsxDmOAnRG78AI0B8N6C:FrIwn80jXehF9RsxDgRGTI6jC
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/background.cache
- SHA256 b8c2c3c96bedae7480969d9d8a0f6cc0f1d5ecea75d2faffcfdf8e0e35482102
- MD5 e9a266112aaa41170223d6590ab6a5b3
- SHA1 b2c3538e7451e5518f20ed22d78eea09d03511e9
- SHA512 3adb757d7eecd5692d1077245c7db8f9a07e8c4bec646320ce501b0b406a546a98d0b9a71ee2cb48be9a677e5d918942c9b62f0ff5a3d81b554d7229b716ba97
- SSDEEP 393216:P6+lA7aimrEkRxMZ50Be4r8eBwlZPDPirsOjy0ilZ6Q1q/oZVAZaRYMajzc2DkDT:PVcmEkiuB582oxMfjy0+3UlMajz3AjbD
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/d7401f079967e4874dc9be4f077ff591797e2d70856eebd4e25b4bebe842a7b9
- SHA256 a5e8971a6cbe9fc16ca82918a115f3f05b6440c296240e6e894c87414f849015
- MD5 f6f4115b2a2d41b57aadfb54012ce368
- SHA1 febd2a690dff7f04bb7f30ac72471e1fa1c6a738
- SHA512 1fdaea4ca03b5f09df01ccc0277f326ee884fb722eb21fd9e9f18856995d5d5c4dea87f02475f2bb0b8c45c26031d7d613ae5a26f03020a80f01cc793459822f
- SSDEEP 192:uGXF1OhXdEjx6QcBVriuvDFkUNwvJWhajCwrnMJpicGhK4NfFgVV:l1iEMMuLFTNGv+OawcGhK4BFOV
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/7zxa.dll
- IMPHASH 72325093dd826f0b5d93d82d3606361c
- SHA256 863f6bf4f51e08a4604a4e175781b35c251bb204f479eac58af0db11c7f019a2
- MD5 c6c778752b11c3e443c97c55e60720e8
- SHA1 57b29fb5760885e1594a5e97eccf18017cbbf604
- SHA512 8ef6ea70f0b3ff65ef2cac3668487f1fc121fdb945d10919db187e95ad22e5098b5357fbfa77caee5ce2394fa707c8c79e80703aad9937a93d8cf9a5a46a413c
- SSDEEP 3072:7fGomNy4JTVoXxLYxNJeINgQnK2W2KQy4fClGZMQ06+V8+NB1RkFIEu3LB:GZnMWg0y4fk6+VLB1RbE6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
129479
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
oleaut32
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
SysStringLen
VariantClear
msvcrt
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
_except_handler3
memset
strlen
free
malloc
_CxxThrowException
memcpy
memmove
memcmp
_purecall
__CxxFrameHandler
_beginthreadex
kernel32
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
SetEvent
CreateEventW
WaitForSingleObject
CloseHandle
VirtualFree
VirtualAlloc
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExW
GetModuleHandleA
GetProcAddress
GlobalMemoryStatus
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
IsProcessorFeaturePresent
GetLastError
CreateDecoder
CreateEncoder
CreateObject
GetHandlerProperty
GetHandlerProperty2
GetHashers
GetIsArc
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetCaseSensitive
SetCodecs
SetLargePageMode
Name
.text
Size
129KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.sxdata
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8047,
count=8, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=1, id=95, version=2190,
count=59, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=72, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=16, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=259, productName=VS2019 v16.8.4 build 29336, version=29336,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRBC.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 86c45fb7473e5c1df78b8cbb2003033c37b4cb01a677c1ef30ca1573e84ec692
- MD5 14a56e4b7bd40512b49d6f72086e8fc1
- SHA1 d8c05adc75d739a56c63d6596d460304eb219cc6
- SHA512 3d5c2010963694262dcb08337f80190630d890565a25610c33983268afad11b0882fb5c7a03b5e629560d3fd1b9b3856d4896f5a272c53928c1fd10924e3b3f8
- SSDEEP 384:7P0jnfJQhdPTfmUi5YbS8ISIfKfLOI87oRehG6VBVHCHljIhzqb:4YdxccSHSjfLOIyoRet9iHWhzm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRBT.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 98ec5492a2f0aeba5b39a9f41498d98c73643bf6d8d177e5831fb0ad6e6f8521
- MD5 32e2bc4f79c776b542f6775895beaf21
- SHA1 38e1d82f7cd869d1a016a94dc747110e44e80ae2
- SHA512 4ed797827b33fc922b1385c7b4e1cfdc12f7e00c8969b7ed6eeb6aa82f2656fa7f73c90c67ee1a1fdff2ac654504e214d4255eb37251736d30fa694e0b3094e9
- SSDEEP 384:Ik67YLzFJSKaj1A5l055eRethRv1WGqvSqRehTLONKwzI:P3JJ/V5lU5e8thRNwvI5LSKw0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/DCRLC.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 574f0612cef481f5bde5667586f1bf1c4df4b7672cd6093b6a8f3b2cadc10725
- MD5 a1bccb81f525f46b8e0994157f0dbb58
- SHA1 70ad20203e56b1fed9827d87c8cc8ba09008a49f
- SHA512 9fe2dc5e4f621142d43b0ec8ced708b6fcd41c70b5432315ac98de632ab4a9e95bafb93dd30415b877ed6b2351697389cedd9285bdda7e53545e933b6c8de3be
- SSDEEP 384:Yc/k09yBB7RBADETZc3+QrB4EXZcs7xaaMrbTywSUIk:07XmES+QrB4EXZX7/cnnSk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/Default.SFX
- IMPHASH 12e12319f1029ec4f8fcbed7e82df162
- SHA256 c39c4466f622b7320076076ea3eb13fa0f784b9b097dff46d802f905fc39d851
- MD5 a7993e5a520b17fec65435fb4838a08f
- SHA1 18fe6286473a03735e7b701d4bfaf61ad35da7ad
- SHA512 f14be864388b6f077cad0e64367f16715adfb180f57677ba83866ea000961232d21db1093b7795f17d9d76626fad4e3a7d3dbd8eb00c3a294a9aa8f60ac0ab83
- SSDEEP 6144:2TouKrWBEu3/Z2lpGDHU3ykJotX+t41/:2ToPWBv/cpGrU3yVtX+t4V
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
128304
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
kernel32
GetLastError
SetLastError
FormatMessageW
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
InterlockedDecrement
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
LocalFree
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
oleaut32
SysAllocString
SysFreeString
VariantClear
gdiplus
GdipAlloc
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdiplusShutdown
GdipFree
Name
.text
Size
199KB
Virtual Size
198KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
400B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=142, id=243, version=40116,
count=24, id=242, version=40116,
count=2, id=253, version=30625,
count=19, id=260, version=30625,
count=23, id=259, version=30625,
count=52, id=261, version=30625,
count=11, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=277, id=1, productName=Unmarked objects,
count=49, id=261, version=30709,
count=1, id=256, version=30709,
count=1, id=255, version=30709,
count=1, id=258, version=30709,
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/NCC3.dll
- IMPHASH 7520e044195b1728541d87932e3d3d25
- SHA256 38274608d5a4b53ec22f8099f798ba46ce0ed41db65a33dfb3853f0dbf849f6f
- MD5 aa84f91edd922e7b3bb979e663c94f1a
- SHA1 da46b9962a6c6cceef38c3e11b8b5bc9c1b536fa
- SHA512 88392fc77a0300ece306908867be38011530d9eefdf003452ba86d82f2fa4a61c2b27a199f376ac307c095beaa4f52cefcab59c8b28fa187c0bca13f55f2d98b
- SSDEEP 1536:a44UF/3qab79HtYDAD5MPEBq9iNv6qfSOBHfVW:a44G3fRMPiuuv6qqOBHfVW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
23:b3:e5:c0:b5:7d:8e:bc:8c:b1:5d:53:89:ba:58:e6:08:63:4c:b3:8e:84:fe:4a:85:d5:24:78:05:96:d7:db
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Eziriz e.K.,O=Eziriz e.K.,POSTALCODE=38465,STREET=Vogelweg 9,L=Brome,ST=Niedersachsen,C=DE
Chains
Mar 16, 2016
PE Signature issue
Digest
25:88:87:e9:5b:01:87:69:19:95:47:e1:c5:ba:05:07:2c:b1:f7:07
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Eziriz e.K.,O=Eziriz e.K.,POSTALCODE=38465,STREET=Vogelweg 9,L=Brome,ST=Niedersachsen,C=DE
Chains
Mar 16, 2016
Subject
CN=Eziriz e.K.,O=Eziriz e.K.,POSTALCODE=38465,STREET=Vogelweg 9,L=Brome,ST=Niedersachsen,C=DE
Serial Number
ad:84:17:c8:4e:04:f3:5c:ff:21:82:40:35:98:c8:5b
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 28, 2015 - Sep 27, 2018
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Eziriz e.K.,O=Eziriz e.K.,POSTALCODE=38465,STREET=Vogelweg 9,L=Brome,ST=Niedersachsen,C=DE
Serial Number
ad:84:17:c8:4e:04:f3:5c:ff:21:82:40:35:98:c8:5b
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 28, 2015 - Sep 27, 2018
Subject
CN=GeoTrust 2048-bit Timestamping Signer 2,O=GeoTrust Inc,C=US
Serial Number
2d:4e:86:50:85:be:e0:0e:13:72:28:b3:d0:b1:32:e9
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 11, 2015 - Dec 29, 2020
Subject
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Serial Number
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Timespan
Jan 1, 1997 - Dec 31, 2020
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Minor OS version
1
Major OS version
5
Entry point
47730
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
GetLastError
GetFileSize
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
CreateFileW
CreateFileA
GetSystemInfo
WideCharToMultiByte
AreFileApisANSI
GetFileInformationByHandle
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GetCurrentProcess
VirtualAlloc
VirtualFree
GetVersionExA
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
msvcr100
malloc
free
memset
fputs
_beginthreadex
__iob_func
fprintf
?terminate@@YAXXZ
_except_handler4_common
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
memmove
__CxxFrameHandler3
_CxxThrowException
memcpy
_purecall
DENC
DENC2
Name
.text
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=152, version=20115,
count=7, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=87, id=1, productName=Unmarked objects,
count=26, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=34, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/RarExt.dll
- IMPHASH 5bd25314ebbe05061b1f88842b3d89fa
- SHA256 68ecb747f523d122c1c2094b3fb6035f7f76fbd948a97e3d42ee526824546fec
- MD5 1f3bb0f89e7cd67a76220ea2e3e7d8c6
- SHA1 0286863ca947b00a4e3489f07e1cddf9faddb87a
- SHA512 a95611f7b4cc7a3e5b9412d0c7e16616039c7152102b35aa8f672f15d21ff2478486c7a411d25d8f8d7b713a9bbd50f2a68bd048a6296a72ed4404c6cbb468ff
- SSDEEP 12288:6aw1L7U6Qu1rTGl74V7pt21DIwd2gOuy33SH9Bd3X3u1EZ:6aw1L7U6Qu1rTAEV7p1wd2ZuWA9Bd3XL
- MD5 SHA1 SHA512 SSDEEP
Digest
b7:51:d1:4b:6a:8a:46:98:49:51:84:d6:67:04:61:22:52:4f:87:c1:e4:ff:31:a3:8d:62:0e:59:87:ec:1b:eb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Chains
Mar 3, 2022
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Digest
f7:81:ec:3f:fa:c5:d9:60:d3:74:08:e1:84:47:f0:3a:5d:0e:47:d4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Chains
Mar 3, 2022
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Serial Number
73:1d:40:ae:3f:3a:1f:b2:bc:3d:83:95
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 25, 2020 - Aug 26, 2023
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Serial Number
73:1d:40:ae:3f:3a:1f:b2:bc:3d:83:95
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 25, 2020 - Aug 26, 2023
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
6
Entry point
259232
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Projects\WinRAR\rarext\build\32\Release\rarext.pdb
kernel32
LoadLibraryExW
CompareStringA
Sleep
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetPriorityClass
GetSystemDirectoryW
SetThreadExecutionState
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SystemTimeToFileTime
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
GetCPInfo
IsDBCSLeadByte
GetModuleHandleExW
GetLocaleInfoW
GetNumberFormatW
GetLogicalDrives
GetTempPathW
SetCurrentDirectoryW
LockResource
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
WaitForSingleObject
DecodePointer
WriteConsoleW
HeapSize
GetStringTypeW
SetStdHandle
GetProcessHeap
LCMapStringW
SizeofResource
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileSizeEx
HeapReAlloc
HeapAlloc
HeapFree
ExitProcess
QueryPerformanceFrequency
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
RtlUnwind
RaiseException
LocalFree
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
LoadResource
FoldStringW
GetModuleFileNameW
GetFullPathNameW
GetCurrentDirectoryW
GetVersionExW
CreateFileW
FindNextFileW
FindFirstFileW
FindClose
ExpandEnvironmentStringsW
MoveFileW
GetCurrentProcessId
DeviceIoControl
SetFileAttributesW
RemoveDirectoryW
GetFileAttributesW
GetDriveTypeW
GetDiskFreeSpaceExW
DeleteFileW
FindResourceW
CreateDirectoryW
GetFileTime
GetFileType
FlushFileBuffers
GetStdHandle
SetLastError
LoadLibraryW
GetProcAddress
FreeLibrary
GetLastError
CloseHandle
WriteFile
SetFileTime
SetFilePointer
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetEndOfFile
ReadFile
GetFileSize
user32
InvalidateRect
GetDC
GetParent
wsprintfW
EnableWindow
SendMessageW
SetWindowTextW
ShowWindow
GetDlgItem
ReleaseDC
FlashWindowEx
OemToCharA
GetMonitorInfoW
MonitorFromPoint
LoadImageW
EqualRect
GetSysColor
GetCursorPos
EndPaint
BeginPaint
InsertMenuItemW
AppendMenuW
CreatePopupMenu
SetWindowPos
DestroyWindow
EnumDisplayMonitors
CopyImage
MapWindowPoints
MessageBoxW
SendDlgItemMessageW
CreateWindowExW
CreateIcon
LoadCursorW
SetCursor
GetWindowTextLengthW
GetWindowTextW
CharLowerW
CharUpperW
OemToCharBuffA
LoadStringW
GetWindow
GetClassNameW
SetWindowLongW
GetWindowLongW
GetWindowRect
GetClientRect
SetMenuItemInfoW
GetMenuItemInfoW
GetSystemMetrics
SetDlgItemTextW
gdi32
SetPixel
GetPixel
GetObjectW
CreateDIBSection
StretchBlt
GetDeviceCaps
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPoint32W
TextOutW
MoveToEx
SetTextColor
DeleteObject
CreatePen
GetTextFaceW
GetTextMetricsW
SelectObject
CreateFontW
LineTo
advapi32
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
AllocateAndInitializeSid
CheckTokenMembership
IsTextUnicode
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
FreeSid
shell32
SHGetMalloc
SHGetSpecialFolderLocation
DragQueryFileW
ShellExecuteExW
SHGetPathFromIDListW
ole32
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoSetProxyBlanket
ReleaseStgMedium
oleaut32
SysFreeString
VariantClear
SysAllocString
VariantChangeType
VariantCopy
shlwapi
SHStrDupW
comctl32
ord8
DestroyPropertySheetPage
CreatePropertySheetPageW
gdiplus
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipAlloc
GdipFree
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFileICM
msimg32
GradientFill
DllCanUnloadNow
DllGetClassObject
Name
.text
Size
351KB
Virtual Size
351KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=29395,
count=156, id=261, version=29395,
count=6, id=253, version=30625,
count=17, id=260, version=30625,
count=24, id=259, version=30625,
count=45, id=261, version=30625,
count=28, id=260, version=29395,
count=1, id=262, version=29395,
count=23, id=257, version=29395,
count=250, id=1, productName=Unmarked objects,
count=62, id=261, version=30709,
count=1, id=256, version=30709,
count=1, id=255, version=30709,
count=1, id=151,
count=1, id=258, version=30709,
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/RarExt64.dll
- IMPHASH a8504009dbc4ed5cfe4d78a42d3d110c
- SHA256 ad149a11b96939a6e129cff0c90ba6cac57ef3ed535649a73717d8223c48bbcb
- MD5 3e78ac1a5ca308b6efb1b457d5e4b147
- SHA1 b7c96a18b2c9797a0871d15b55fd14d5608a5e16
- SHA512 6c3b2ca1aee8580752930afdd4bd01f71e8fde72f06e2ed407b9394fe33f1e51f61a9ebfb36345fb9ab5d6b469bc32352258729fd52a5204d0243cf852850bb6
- SSDEEP 12288:iBnnEQAdpv+cJtb6Sv7x87i3YhWOU9f/e3lgtoTEBd3X3un:ixEQAzlJteSv7Uae3EoTEBd3X38
- MD5 SHA1 SHA512 SSDEEP
Digest
2c:e3:ad:95:6d:5c:8e:4b:4e:b4:49:e5:93:69:b0:0d:2d:dc:25:83:03:0c:b3:2b:4f:90:32:3c:05:77:56:43
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Chains
Mar 3, 2022
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Digest
74:00:3a:d1:60:c7:8e:26:1a:a4:a8:9c:28:4c:19:80:a3:dd:6d:cb
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Chains
Mar 3, 2022
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Serial Number
73:1d:40:ae:3f:3a:1f:b2:bc:3d:83:95
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 25, 2020 - Aug 26, 2023
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Serial Number
73:1d:40:ae:3f:3a:1f:b2:bc:3d:83:95
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 25, 2020 - Aug 26, 2023
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
6
Entry point
291472
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\WinRAR\rarext\build\64\Release\rarext.pdb
kernel32
LoadLibraryExW
CompareStringA
Sleep
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetPriorityClass
GetSystemDirectoryW
SetThreadExecutionState
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SystemTimeToFileTime
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
GetCPInfo
IsDBCSLeadByte
GetModuleHandleExW
GetLocaleInfoW
GetNumberFormatW
GetLogicalDrives
GetTempPathW
SetCurrentDirectoryW
LockResource
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
WaitForSingleObject
WriteConsoleW
HeapSize
GetStringTypeW
SetStdHandle
GetProcessHeap
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SizeofResource
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileSizeEx
HeapReAlloc
HeapAlloc
HeapFree
ExitProcess
QueryPerformanceFrequency
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
RtlUnwindEx
RaiseException
RtlPcToFileHeader
LocalFree
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleW
LoadResource
FoldStringW
GetModuleFileNameW
GetFullPathNameW
GetCurrentDirectoryW
GetVersionExW
FindNextFileW
FindFirstFileW
FindClose
CreateFileW
ExpandEnvironmentStringsW
MoveFileW
GetCurrentProcessId
DeviceIoControl
SetFileAttributesW
RemoveDirectoryW
GetFileAttributesW
GetDriveTypeW
GetDiskFreeSpaceExW
DeleteFileW
FindResourceW
CreateDirectoryW
GetFileTime
GetFileType
FlushFileBuffers
GetStdHandle
SetLastError
LoadLibraryW
GetProcAddress
FreeLibrary
GetLastError
CloseHandle
WriteFile
SetFileTime
SetFilePointer
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetEndOfFile
ReadFile
GetFileSize
FreeEnvironmentStringsW
RtlUnwind
user32
GetWindowTextLengthW
SendMessageW
ShowWindow
GetDlgItem
EnableWindow
GetDC
ReleaseDC
InvalidateRect
SetWindowTextW
GetParent
wsprintfW
GetMonitorInfoW
MonitorFromPoint
LoadImageW
SetWindowLongPtrW
EqualRect
GetSysColor
GetCursorPos
EndPaint
BeginPaint
InsertMenuItemW
AppendMenuW
CreatePopupMenu
OemToCharA
DestroyWindow
EnumDisplayMonitors
CopyImage
MapWindowPoints
MessageBoxW
FlashWindowEx
CreateWindowExW
CreateIcon
LoadCursorW
SetCursor
SendDlgItemMessageW
GetWindowTextW
CharLowerW
CharUpperW
OemToCharBuffA
LoadStringW
GetWindow
GetClassNameW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
GetWindowRect
GetClientRect
SetMenuItemInfoW
GetMenuItemInfoW
GetSystemMetrics
SetDlgItemTextW
SetWindowPos
gdi32
SetPixel
GetPixel
GetObjectW
CreateDIBSection
StretchBlt
GetDeviceCaps
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPoint32W
MoveToEx
SetTextColor
LineTo
DeleteObject
CreatePen
GetTextFaceW
GetTextMetricsW
SelectObject
CreateFontW
TextOutW
advapi32
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
AllocateAndInitializeSid
CheckTokenMembership
IsTextUnicode
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
FreeSid
shell32
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExW
DragQueryFileW
SHGetSpecialFolderLocation
ole32
CoSetProxyBlanket
CoCreateInstance
CoTaskMemFree
CreateStreamOnHGlobal
ReleaseStgMedium
oleaut32
SysFreeString
VariantCopy
VariantClear
VariantChangeType
SysAllocString
shlwapi
SHStrDupW
comctl32
ord8
DestroyPropertySheetPage
CreatePropertySheetPageW
gdiplus
GdipCreateBitmapFromFile
GdipCreateHBITMAPFromBitmap
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipCreateBitmapFromStream
msimg32
GradientFill
DllCanUnloadNow
DllGetClassObject
Name
.text
Size
394KB
Virtual Size
393KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=153, id=261, version=29395,
count=6, id=253, version=30625,
count=17, id=260, version=30625,
count=8, id=259, version=30625,
count=47, id=261, version=30625,
count=9, id=259, version=29395,
count=18, id=260, version=29395,
count=1, id=262, version=29395,
count=23, id=257, version=29395,
count=260, id=1, productName=Unmarked objects,
count=62, id=261, version=30709,
count=1, id=256, version=30709,
count=1, id=255, version=30709,
count=1, id=151,
count=1, id=258, version=30709,
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/WinCon.SFX
- IMPHASH 19f74cac2660c88666c280c35a202449
- SHA256 88d0e8b4958660c5d4c57c81a7c198f5e52c1505104c0a4d57dc5ea02504564a
- MD5 aec7145167e9c207db5a932e615fbf87
- SHA1 b1209de9aab490749ab8021277a4475c56b541b2
- SHA512 36e9ca67c8912a98b524c8a8bc95f90cfe3678519e8c02b3fa13f55beaabc9f181f17a7b3dbe455b10cec691c2ec07170d45848c5761106f3ed6a07a8ce294c2
- SSDEEP 6144:HKWzOebmBFftgnil/07Aai66iEGJ1BgIv:HVRyBFf+niNEAr62GHBgIv
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
114800
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Projects\WinRAR\rar\build\sfxcon32\Release\sfxcon.pdb
kernel32
GetFileType
GetStdHandle
WriteFile
GetConsoleMode
SetConsoleMode
ReadConsoleW
WriteConsoleW
GetLastError
SetLastError
Sleep
FormatMessageW
SetConsoleCtrlHandler
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetDriveTypeW
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
InterlockedDecrement
GetVersionExW
GetCurrentDirectoryW
FoldStringW
SetErrorMode
GetModuleFileNameW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
LoadLibraryW
GetModuleHandleW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
DecodePointer
HeapSize
SetFilePointerEx
GetProcessHeap
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
LocalFree
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
QueryPerformanceFrequency
GetModuleFileNameA
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
HeapReAlloc
LCMapStringW
GetConsoleCP
SetStdHandle
GetStringTypeW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
ole32
CoSetProxyBlanket
CoCreateInstance
oleaut32
SysFreeString
SysAllocString
VariantClear
Name
.text
Size
189KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=135, id=243, version=40116,
count=24, id=242, version=40116,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=253, version=30625,
count=19, id=260, version=30625,
count=23, id=259, version=30625,
count=52, id=261, version=30625,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=167, id=1, productName=Unmarked objects,
count=46, id=261, version=30709,
count=1, id=256, version=30709,
count=1, id=255, version=30709,
count=1, id=258, version=30709,
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/Zip.SFX
- IMPHASH ab9ff6e4872ea2766a5f5c6af5649e9d
- SHA256 e38c3c3b083a63e40d09903eed423bab2651620e89be308f91e1b2beb4e62283
- MD5 df73e45ff5feb3631f35bba82759a711
- SHA1 33e9a5e44baa2f54c1eab23a4a1462845586bdfc
- SHA512 4f42a5fd17b290e390b877951c5c8ff687d176a4c572e8b86feee64d0c72de7fb708596ad80d5110b85175772a5908f162994fc3142b1000d7e2aa65b5705ff8
- SSDEEP 3072:GpUWWln1EUWTQG9VnK+DMEMrvk1imdV8hXYKWF9j85WXuNSrq1k9jhQR8+t4Hk9I:g61E/QSnxoEMTlXEulock9X+t40VM
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
82464
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Projects\WinRAR\sfx\build\sfxzip32\Release\sfxzip.pdb
kernel32
GetLastError
SetLastError
FormatMessageW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileTime
CloseHandle
CreateFileW
CreateDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
MoveFileW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
WaitForSingleObject
GetLocalTime
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
LocalFree
RtlUnwind
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
oleaut32
VariantClear
gdiplus
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStreamICM
GdiplusShutdown
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
Name
.text
Size
152KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
215KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=141, id=243, version=40116,
count=24, id=242, version=40116,
count=2, id=253, version=30625,
count=19, id=260, version=30625,
count=23, id=259, version=30625,
count=49, id=261, version=30625,
count=11, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=258, id=1, productName=Unmarked objects,
count=38, id=261, version=30709,
count=1, id=256, version=30709,
count=1, id=255, version=30709,
count=1, id=258, version=30709,
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dnlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 83445595d38a8e33513b33dfc201983af4746e5327c9bed470a6282d91d539b6
- MD5 de0069c4097c987bd30ebe8155a8af35
- SHA1 aced007f4d852d7b84c689a92d9c36e24381d375
- SHA512 66c45818e5c555e5250f8250ea704bc4ca32ddb4d5824c852ae5dc0f264b009af73c7c1e0db1b74c14ee6b612608d939386da23b56520cac415cd5a8f60a5502
- SSDEEP 24576:m+pL+hwfQvqx+yLjynb1YNzh/CNX7fegPeH3hid3Hc9ZEu5DkU6FPepU1VWv7fo0:sxvCLUJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1152126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnlib\dnlib\src\obj\Release\net45\dnlib.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dotNET_Reactor.Console.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b55b0a652538836ed681c2afd985310fd39ad2f31ac159847fc46a6065f3232e
- MD5 69d18a3245f3c2fd02c82304c494e977
- SHA1 049cda6bc59daeadfe82fce2197e0e15c2847a7b
- SHA512 5791cffbc2389eaaf18e4f31c320325d4bdfadf7ab00c847bfedccbea8fec26a3f4452877d00c95e0573e90306d7a2c988c00fcb7d495ac22955c7f64fb047c3
- SSDEEP 768:5oOABBREOgrMTPrZwbiRPp7yMkZwuzZyiRYn7:5oHB2OlfZwbixp7yMkZwWZyien7
- MD5 SHA1 SHA512 SSDEEP
Digest
85:fe:bb:72:78:9d:ae:d4:75:ba:64:25:4b:1d:b6:63:ef:26:09:d1:c7:e5:3d:15:5f:da:4e:5b:a1:94:72:95
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Eziriz e.K.,O=Eziriz e.K.,POSTALCODE=38465,STREET=Vogelweg 9,L=Brome,ST=Niedersachsen,C=DE
Chains
Aug 24, 2022
CN=Eziriz e.K.,O=Eziriz e.K.,POSTALCODE=38465,STREET=Vogelweg 9,L=Brome,ST=Niedersachsen,C=DE
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=Eziriz e.K.,O=Eziriz e.K.,POSTALCODE=38465,STREET=Vogelweg 9,L=Brome,ST=Niedersachsen,C=DE
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
PE Signature issue
Digest
b4:89:56:d1:86:ac:21:8e:bc:10:b9:4a:14:54:52:44:04:91:70:b8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Eziriz e.K.,O=Eziriz e.K.,POSTALCODE=38465,STREET=Vogelweg 9,L=Brome,ST=Niedersachsen,C=DE
Chains
Mar 20, 2025
Subject
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
01
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 1, 2004 - Dec 31, 2028
Subject
CN=Eziriz e.K.,O=Eziriz e.K.,POSTALCODE=38465,STREET=Vogelweg 9,L=Brome,ST=Niedersachsen,C=DE
Serial Number
cd:c7:ef:4c:9f:49:af:4f:dd:fd:8f:01:d4:87:8d:46
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2020 - Sep 18, 2023
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 12, 2019 - Dec 31, 2028
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 11, 2022 - Aug 10, 2033
Subject
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
01
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 1, 2004 - Dec 31, 2028
Subject
CN=Eziriz e.K.,O=Eziriz e.K.,POSTALCODE=38465,STREET=Vogelweg 9,L=Brome,ST=Niedersachsen,C=DE
Serial Number
cd:c7:ef:4c:9f:49:af:4f:dd:fd:8f:01:d4:87:8d:46
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2020 - Sep 18, 2023
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 12, 2019 - Dec 31, 2028
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 11, 2022 - Aug 10, 2033
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Minor OS version
0
Major OS version
4
Entry point
11194
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
F:\dotNET Reactor Source\dotNET_Reactor.Console\dotNET_Reactor.Console\obj\Release\dotNET_Reactor.Console.pdb
mscoree
_CorExeMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/dotNET_Reactor.exe
- SHA256 fa0a32d408a8df70ec44f3d2374b058f57b86ff49b8068b8c68f8505d3463970
- MD5 bd73df4cf427511993075f7a16e037a5
- SHA1 63f116641b0655f53e93d62ae559d510ed5af134
- SHA512 49ad63e65e1f6a454778c904727c948969145eb09457105093af463d933413a7d30437051c7ddb8ded0b46d38b2018a1a78c83af582ab6775bef870057a9dfc3
- SSDEEP 393216:xfuP82nPJiP63TKZqkoPrSz4rkZD1K1fU:xqPIPgTxkqrV6YN
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6747006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
12.2MB
Virtual Size
15.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
58KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
174KB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
913KB
Virtual Size
920KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/enc.vbe
- SHA256 5981e508e89c65c445fca892e91b8ec39b1d8563804d0999d963d640aa592444
- MD5 f88125f6eafc7f4805913cf4077b2525
- SHA1 404917f27f1522cac77f3433594ccd290957da21
- SHA512 748249fe186892c96971a63b5055738f2b6beb3e49ba950c834de188fd62da4710ad1a5264f8caead6277b327df299d58e76a4ce219fc30fbd0281b9d5a52f54
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/mpress.exe
- IMPHASH 51e7ef6b1d43d0d05d7109dee9789560
- SHA256 2852680c94a9d68cdab285012d9328a1ceca290db60c9e35155c2bb3e46a41b4
- MD5 8b632bfc3fe653a510cba277c2d699d1
- SHA1 d6a57aa17e5eb51297def9bac04e574c1e36d9c7
- SHA512 b9ea70ed984d3b4a42eceb9f34f222b722c4c1985b79b368d769fe0fd1f19f037ffebe2cf938aa98ed450337836a7469d911848448d99223995f7fb3a9304587
- SSDEEP 3072:S0+mlNniJkkKcfqBOb65VgB183gUGQ340HpL:SvmlNn4kkeOAVA1rUGh0Hp
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
225455
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
GetModuleHandleA
GetProcAddress
imagehlp
CheckSumMappedFile
Name
.MPRESS1
Size
88KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.MPRESS2
Size
1024B
Virtual Size
862B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/rar.exe
- IMPHASH 85996a3c955c1cdb00ed9e4698bbe557
- SHA256 792708ce3fec9da37408ce4179b118d79b4804878d233c602b490c3bd0eaf02a
- MD5 300d43860dc6961bbece819912c930bc
- SHA1 61cc9b17fae66451327e8f9a7103b9728eb5c95c
- SHA512 f74cd7c28e2a267e6b51fa2a8a36380f5766195f7216fd9ee1f76e708343520e9cb60f620fd86114b947589d9f8fdaaa209cf190a5d014bf251ab8bd182fd541
- SSDEEP 12288:4zga+163KOqlPidmIaEPFSV+/sZy+/eZ+8q1wUg7OkrBgGvg:4zg116ddmIaEPFz/6yPZ++15rBgB
- MD5 SHA1 SHA512 SSDEEP
Digest
3e:b3:32:5a:7d:bb:c3:21:df:b5:54:ef:ae:26:72:49:4e:ac:16:fd:8b:c6:03:b6:60:a7:2d:7a:a4:73:20:ca
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Chains
Mar 3, 2022
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Digest
7a:63:09:f4:13:f2:c5:2b:e7:ab:99:87:86:95:b1:a5:5e:17:96:52
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Chains
Mar 3, 2022
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Serial Number
73:1d:40:ae:3f:3a:1f:b2:bc:3d:83:95
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 25, 2020 - Aug 26, 2023
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Serial Number
73:1d:40:ae:3f:3a:1f:b2:bc:3d:83:95
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 25, 2020 - Aug 26, 2023
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
1
Major OS version
5
Entry point
423856
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Projects\WinRAR\rar\build\rar32\Release\RAR.pdb
kernel32
GetCurrentProcess
DeviceIoControl
FindClose
SetFileTime
CloseHandle
BackupRead
BackupSeek
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
FindFirstFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetFileTime
GetCurrentProcessId
GetDriveTypeW
GetDiskFreeSpaceExW
SetFileAttributesW
GetFileAttributesW
GetVolumeInformationW
ExpandEnvironmentStringsW
FindNextFileW
InterlockedDecrement
GetVersionExW
GetModuleFileNameW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
SetErrorMode
FreeLibrary
LoadLibraryW
LoadLibraryExW
CompareStringA
GetCurrentThread
SetConsoleCtrlHandler
SetThreadExecutionState
CreateEventW
GetSystemDirectoryW
SetCurrentDirectoryW
GetFullPathNameA
SetPriorityClass
GetProcessAffinityMask
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
LCMapStringW
DecodePointer
HeapSize
SetFilePointerEx
GetStringTypeW
GetProcessHeap
FormatMessageW
Sleep
GetLastError
WriteConsoleW
ReadConsoleW
SetConsoleMode
GetConsoleMode
WriteFile
GetStdHandle
GetFileType
GetCommandLineW
GetModuleHandleW
GetProcAddress
GetFileInformationByHandle
SetThreadPriority
SetLastError
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
HeapReAlloc
HeapAlloc
HeapFree
SetStdHandle
GetConsoleCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
LocalFree
RaiseException
RtlUnwind
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
GetModuleFileNameA
GetCommandLineA
GetACP
user32
CharToOemA
OemToCharBuffA
OemToCharA
ExitWindowsEx
CharLowerW
CharUpperW
MessageBeep
LoadStringW
OemToCharBuffW
CharToOemBuffW
CharToOemBuffA
advapi32
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LookupPrivilegeValueW
GetFileSecurityW
SetFileSecurityW
GetSecurityDescriptorLength
AdjustTokenPrivileges
OpenProcessToken
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
shell32
SHGetMalloc
SHGetPathFromIDListW
SHFileOperationW
SHGetSpecialFolderLocation
ole32
CoCreateInstance
CoSetProxyBlanket
oleaut32
SysFreeString
SysAllocString
VariantClear
powrprof
SetSuspendState
Name
.text
Size
493KB
Virtual Size
493KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=241, version=40116,
count=131, id=243, version=40116,
count=24, id=242, version=40116,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=253, version=30625,
count=51, id=261, version=30625,
count=19, id=260, version=30625,
count=24, id=259, version=30625,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=184, id=1, productName=Unmarked objects,
count=72, id=261, version=30709,
count=1, id=255, version=30709,
count=1, id=258, version=30709,
[CRACKED BY L1nc0In] NEW DCRat/DCRat/data/wrar.exe
- IMPHASH 832754a3e9f447e305253bd81d4cbb52
- SHA256 14f3322fa4e6fce0a30f01bd53dac40f8f8d48991480de2bedd8c4ab6e2fa477
- MD5 719e61c6e73b9bd856414664366fa049
- SHA1 adcc056a20418517c2ac6d51579b5ab145180443
- SHA512 9176b85e9f246b9e4060dda5d5383205dfc4eab73cc5fd2e4cc384d740c1b1b31284260015737e757577683b274a5ebf85df684d6896d62acaffce15ea3d4593
- SSDEEP 49152:sKi8CSRyIo1eshtx6z3GZ9amzNQeyUHBdH3txTs9:sKH1RyFeiTyGZ9fKe9Bp9xk
- MD5 SHA1 SHA512 SSDEEP
Digest
73:5d:16:66:a6:7f:3c:52:c6:8b:ec:09:5e:ff:7a:ce:4f:75:63:60:33:c3:41:54:d2:b7:54:0a:d7:75:9a:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Chains
Mar 3, 2022
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Digest
01:a5:c7:eb:e4:64:b6:c5:64:10:bc:63:71:a4:c0:38:dd:fb:2d:25
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Chains
Mar 3, 2022
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Serial Number
73:1d:40:ae:3f:3a:1f:b2:bc:3d:83:95
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 25, 2020 - Aug 26, 2023
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
Serial Number
73:1d:40:ae:3f:3a:1f:b2:bc:3d:83:95
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 25, 2020 - Aug 26, 2023
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
6
Entry point
1173648
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Projects\WinRAR\build\winrar32\Release\WinRAR.pdb
kernel32
BackupRead
BackupSeek
GetLongPathNameW
GetShortPathNameW
GetStdHandle
FlushFileBuffers
GetFileType
GetFileTime
GetDiskFreeSpaceExW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
LoadResource
SizeofResource
FindResourceW
LoadLibraryExW
CompareStringA
SetCurrentDirectoryW
GetFullPathNameA
CreateEventW
GetCurrentThread
SetThreadPriority
SetPriorityClass
GetSystemDirectoryW
SetThreadExecutionState
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
CreateThread
GetProcessAffinityMask
GetSystemTime
TzSpecificLocalTimeToSystemTime
CompareStringW
WideCharToMultiByte
GetCPInfo
IsDBCSLeadByte
GetModuleHandleExW
GetCompressedFileSizeW
EnumResourceNamesW
EnumResourceLanguagesW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
GetLocaleInfoW
GetNumberFormatW
GetLogicalDrives
GetCurrentThreadId
SetEnvironmentVariableW
LockResource
SuspendThread
ResumeThread
GetStartupInfoW
Beep
GetSystemTimeAsFileTime
FindNextChangeNotification
SetErrorMode
GetThreadPriority
GetPriorityClass
CompareFileTime
WaitForMultipleObjects
MulDiv
FormatMessageW
GetFileInformationByHandle
GetLocalTime
SystemTimeToFileTime
DecodePointer
HeapSize
SystemTimeToTzSpecificLocalTime
GetStringTypeW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
IsValidCodePage
FindFirstFileExW
SetStdHandle
LCMapStringW
GetFileSizeEx
HeapReAlloc
ExitProcess
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
FreeLibraryAndExitThread
ExitThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RaiseException
RtlUnwind
InitializeSListHead
IsDebuggerPresent
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalFree
QueryPerformanceFrequency
QueryPerformanceCounter
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
FindFirstChangeNotificationW
FindCloseChangeNotification
ExpandEnvironmentStringsW
GetDiskFreeSpaceW
FindNextFileW
CreateHardLinkW
SetLastError
DosDateTimeToFileTime
HeapFree
HeapAlloc
HeapDestroy
HeapCreate
LocalFileTimeToFileTime
LoadLibraryW
FreeLibrary
WriteFile
SetFileTime
SetFilePointer
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
ReadFile
GetFileSize
DeleteFileW
CreateFileW
CreateDirectoryW
MoveFileW
GetTickCount
GetCPInfoExW
GetOEMCP
GetACP
GetCurrentProcessId
GetCurrentProcess
Sleep
GetVolumeInformationW
GetDriveTypeW
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
CreateMutexW
ReleaseMutex
GetLastError
MultiByteToWideChar
GetProcAddress
DeviceIoControl
GetModuleHandleW
CopyFileW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
WaitForSingleObject
CloseHandle
GetTempPathW
GetModuleFileNameW
GetCommandLineW
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FindFirstFileW
FindClose
FileTimeToLocalFileTime
WriteConsoleW
GetFileAttributesW
user32
CreateDialogIndirectParamW
BringWindowToTop
FlashWindow
DispatchMessageW
TranslateMessage
GetMessageW
RegisterWindowMessageW
EnumDisplayMonitors
CopyImage
FindWindowExW
MessageBoxW
GetForegroundWindow
keybd_event
FlashWindowEx
CreateIcon
EnumWindows
SetForegroundWindow
IsCharAlphaW
CopyRect
RegisterClassExW
GetSysColor
ValidateRect
DrawIconEx
LoadImageW
GetLastActivePopup
TranslateAcceleratorW
KillTimer
SetTimer
MessageBoxIndirectW
CharLowerW
SetPropW
GetPropW
RemovePropW
FindWindowW
CreateIconIndirect
GetIconInfo
IsDialogMessageW
PostThreadMessageW
CreateDialogParamW
LoadIconW
GetClipboardData
ScrollWindowEx
SetScrollPos
SetScrollRange
PostQuitMessage
RegisterClassW
IsChild
LoadAcceleratorsW
LoadMenuW
SendMessageW
DefWindowProcW
CreateWindowExW
DestroyWindow
SetFocus
GetWindowTextW
GetWindowLongW
SetWindowLongW
SetWindowPos
GetWindowPlacement
SetWindowPlacement
IsWindowVisible
DialogBoxParamW
EndDialog
GetDlgItem
CharUpperW
ExitWindowsEx
LoadStringW
SetProcessDefaultLayout
OemToCharBuffW
GetMenuState
SetMenu
GetSystemMenu
GetMenuItemID
SystemParametersInfoW
CharToOemA
CharToOemBuffW
OemToCharBuffA
OemToCharA
GetComboBoxInfo
RedrawWindow
MessageBeep
FillRect
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
GetWindowRect
MapWindowPoints
GetParent
DestroyIcon
ShowWindow
UpdateWindow
CheckDlgButton
PostMessageW
InvalidateRect
EnumChildWindows
GetClassNameW
CharToOemBuffA
SetDlgItemInt
GetDlgItemInt
IsDlgButtonChecked
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
PeekMessageW
GetScrollInfo
EnableMenuItem
CheckMenuItem
GetFocus
MoveWindow
GetWindowTextLengthW
EndPaint
BeginPaint
AppendMenuW
GetMenuItemCount
DrawMenuBar
wsprintfW
ScreenToClient
ClientToScreen
CallWindowProcW
PtInRect
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
TrackPopupMenu
DeleteMenu
InsertMenuW
GetSubMenu
DestroyMenu
CreatePopupMenu
GetMenu
IsWindow
WaitForInputIdle
LoadCursorW
GetWindowThreadProcessId
WindowFromPoint
GetCursorPos
SetCursor
GetKeyState
RegisterClipboardFormatW
GetWindow
GetDesktopWindow
IntersectRect
GetClientRect
SetWindowTextW
ReleaseDC
GetDC
GetSystemMetrics
EnableWindow
IsIconic
IsWindowEnabled
gdi32
GetTextExtentPoint32W
TextOutA
SetPixel
Rectangle
CreateSolidBrush
CreateDIBSection
GetPixel
DPtoLP
StretchBlt
SetMapMode
GetMapMode
GetDeviceCaps
CreateCompatibleBitmap
TextOutW
MoveToEx
SetTextColor
DeleteObject
CreateFontW
CreateBitmap
ExtTextOutW
SetBkColor
DeleteDC
CreateCompatibleDC
BitBlt
LineTo
SelectObject
GetObjectW
GetTextMetricsW
GetTextFaceW
CreatePen
comdlg32
GetSaveFileNameW
ChooseFontW
CommDlgExtendedError
GetOpenFileNameW
advapi32
RegOpenKeyExW
AdjustTokenPrivileges
RegCloseKey
MapGenericMask
GetFileSecurityW
DuplicateToken
AccessCheck
OpenProcessToken
IsTextUnicode
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
SetFileSecurityW
GetSecurityDescriptorLength
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
LookupPrivilegeValueW
RegQueryValueExW
shell32
SHGetMalloc
SHGetPathFromIDListW
SHGetFolderLocation
FindExecutableW
DragFinish
DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
ShellExecuteW
SHGetSpecialFolderLocation
SHGetFileInfoW
ord100
SHAddToRecentDocs
SHFileOperationW
SHGetFolderPathW
ShellExecuteExW
SHChangeNotify
SHGetDesktopFolder
ole32
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
CLSIDFromString
CreateStreamOnHGlobal
CoSetProxyBlanket
CoTaskMemAlloc
OleSetClipboard
DoDragDrop
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
oleaut32
SysFreeString
VariantClear
SysAllocString
shlwapi
SHAutoComplete
StrCmpLogicalW
powrprof
SetSuspendState
comctl32
CreateStatusWindowW
PropertySheetW
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_Create
ord381
uxtheme
IsThemeActive
IsAppThemed
gdiplus
GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipBitmapGetPixel
GdipBitmapSetPixel
msimg32
GradientFill
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
163KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
37KB
Virtual Size
700KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
895KB
Virtual Size
895KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=259, version=29395,
count=169, id=261, version=29395,
count=7, id=253, version=30625,
count=19, id=260, version=30625,
count=25, id=259, version=30625,
count=59, id=261, version=30625,
count=32, id=260, version=29395,
count=1, id=262, version=29395,
count=29, id=257, version=29395,
count=500, id=1, productName=Unmarked objects,
count=154, id=261, version=30709,
count=1, id=255, version=30709,
count=1, id=258, version=30709,
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/BrowsersStealer_native_table.json
- SHA256 48cff9a838321e3e94c09850e2a0066f983483e5392cf34f0bb8dee06243e239
- MD5 1636bd49096db0da8950830bb7623fc2
- SHA1 33cc39b80f61310a538434e649638ffce1deb509
- SHA512 14cfd3db019e0e56b15121e4794290ea3cb576d3aa707b086be404c234593a1ab5a257fe70b7b29c786be7601136d7891536f7f22209e14aae9f8fb7dfefd76b
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/ClientsStealer_native_table.json
- SHA256 04f3b9197836b371bbe41b8a697d38279eefb0e05fb35b120f8f10d41ad56da7
- MD5 f7ea715546229414175cbc3af4edd19b
- SHA1 fba5a0f8f02c988022dedba68dd6c13b4ddf7b16
- SHA512 64d1559c6870c875d93a6b89fca6921754b74a4c59e16a4ec16931cebd079d38202f3533aed18d97747edd95a45623c62ae5f6feee884ecc437d2b8f17e78026
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/CryptoStealer_table.json
- SHA256 c1a7a5a414823dae75a841b06ed22350ab0074dd53f94c5aceb2b7654199d1bd
- MD5 e69d33901ca6529a591a98f81664da41
- SHA1 0c94aac3e2ac893ffad0090a1f233e411c7fd9fa
- SHA512 bcea9947002502d3c95e067fa0dbe8176fc9c230c1b542b0d6ab0a13f54c88a77d4bac744fd7862d7d3eb7a4e535cc9c800f88108fdcf75d49f1b2f98f8d5858
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/DomainsHighlighter_table.json
- SHA256 b961bef437da8148e48155b0afd5c832f419fd0584c2031e4bac711afcd7f30a
- MD5 45bbe0574eb17da50ed046de225eb471
- SHA1 de4b472e72b646862f4e905d83c754f8920fa8ab
- SHA512 43ed8651f296053302ffb52c7beec077a8ce9c8919300ef8067dc19d6190304a2c32330ab657cb336d52707d3155bdbe8aa3a305dfd7bca3a58f4e4946c5dec9
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/FileGrabber_table.json
- SHA256 523788f164bc16b35f38322fd24db68c1fb271b97f90f2702ca1ccea3d803082
- MD5 25b6b283950d5a4cc9bfeb23f3216ef7
- SHA1 7aa08acc053c6eb7cdfd8dab17bf18f0c8e1eb17
- SHA512 5fc3ee6e472923bb36c22d5d203b5365c46bf6a5de633697a7a25b9ed84c3c58e48f7b22fb2c79187525b941714ea3473aaf422452d20ad29d5954564590a2b4
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/Keylogger_native_table.json
- SHA256 78baf226b6baf5f0f5fbe0c25831e5d533a436ed497237c336c0aec6ec5e19c2
- MD5 dc775737035388a3f4e8710e2eaa534d
- SHA1 7021f397a6aa0f05ae538e052213c3a70bc3e6e6
- SHA512 223ab881e2360b0ef0f25bc46aaada8544f13e9f6bf049121c6905682000cf32f98fef51b51ecd1a467183022276cf8e665812198857ad64b9edbc97a23d20c0
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/design/PluginsLoader_native.json
- SHA256 fc4c68781b2343805da72ff8f8cec9882a1d36d8f3cacaa8707391589f6be262
- MD5 f95369232ea564572d22588b40e51f25
- SHA1 a49d68690973e83c382e39ef6c962e37a1236751
- SHA512 e5a96f0caee17274096f7b4bd5bcfd8e85cc1c56c1cd3a5b93431736bf7bacbe1cd18cacba1f8689f0b7447cb26745e23845502596c2b42e901997f5619fca17
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/eula
- SHA256 576fc2c39357228c017c76ccd93e895b5f023d24c0ad9f1837ff2c8e40b71a20
- MD5 52b085e74fddedca750509a3b2876c14
- SHA1 2351f9c549c02e30b3151f02bdf2d31ce21d1273
- SHA512 34f61fbe2427b099548e1f6c7a0b7e637c2e0b03613b09e4632196f82e0d457182fde8fe6a87d0aafda1a723477448a81391ee5f81af8ceca8051b41dad9a666
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/exception-report.txt
- SHA256 f820e39d7eac31c029f1b0eecb64ec0662337040673704c0762f596b4137c948
- MD5 492b0660ec0b989a9254218698d24217
- SHA1 e358adc78f63f9439ab16afa5b1637c907076b2d
- SHA512 80b86e25010abd9f7ff90a88662b3d8e37f6670d1d8a5c7a560c4f6bbc907d3e7bb92ccce8e8d4612bf1af6772a9ac449475fd6b92d5023c3bd1abccc1cf0066
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IIlIllIIlIllllIIIlIIlllIIIIIlIlllIIIIllllllIlIIlllIlIlIlllIIIlIIllIIIIlIllIlIlIlIlIlIIlllIlllIIllIIllIlIlllIlIIlllIIIIll.jar
- SHA256 c25d7a7b8f0715729bccb817e345f0fdd668dd4799c8dab1a4db3d6a37e7e3e4
- MD5 6696368a09c7f8fed4ea92c4e5238cee
- SHA1 f89c282e557d1207afd7158b82721c3d425736a7
- SHA512 0ab24f07f956e3cdcd9d09c3aa4677ff60b70d7a48e7179a02e4ff9c0d2c7a1fc51624c3c8a5d892644e9f36f84f7aaf4aa6d2c9e1c291c88b3cff7568d54f76
- SSDEEP 12288:sSn9gd/GXLtKb+Ozu5idmEfcHOPJZ7bw1kXn0yZLJZsDDpJSWB5qSEhQ:sMw/GXUb+euCVIOxRQIZOnuK
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IIllIIIIIlIlIIlIIIllIllllIIIlllIIIlIlIIlIlIllllIIlIIllIlIlIllIIIIIlIlllllllIIIIlIIlIIllIIIlIlIlllIIIIllllIllIIIIIIlIllII.jar
- SHA256 97758e611a82fc721ab1a7d2542b3ec33b1124e03b4c4798720a4c3756470ed0
- MD5 9ea3f51be2154e9b797e575153310a19
- SHA1 feaf787cd94bb60e8bfacad21b4346c358b55c0a
- SHA512 a5cace6e7069909a2aa8bacbe5e8dca61ecb195f4696a7467a0d1ee0f7f6043afcb27c43c1e1b496cf14aa4dde9e2d61352145840bac3bcb996b0bf2c047db37
- SSDEEP 24576:ebCwa5LBnj5dM/Exi6no6h6gXEQwY2I3A8zAovutKgSl8hDGFVmPhOmOlCtH775C:ZX5L1jrHLh6MFwvI3AOAUnxyPhV5775C
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IlIIIIllIIIIIIIIIllIlIllIIIlIIllIIlIIllIIlIlIIIIIIIIIIlllIIlIllIIIlIlIllIllIlIlIlIlIllIlIllIlllIIllIlIllIlIIlllIIIIIlIlI.jar
- SHA256 cf4068ebb5ecd47adec92afba943aea4eb2fee40871330d064b69770cccb9e23
- MD5 b50e2c75f5f0e1094e997de8a2a2d0ca
- SHA1 d789eb689c091536ea6a01764bada387841264cb
- SHA512 57d8ac613805edada6aeba7b55417fd7d41c93913c56c4c2c1a8e8a28bbb7a05aade6e02b70a798a078dc3c747967da242c6922b342209874f3caf7312670cb0
- SSDEEP 384:Paj1PXNyyQwsCxm7VXh3il27I8pdo63XNrqlY3ylWn4iczt3Z:e1/BQwsCxIVXhuF8pKaXNdXn4icz9Z
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IlIlIIIIIIlIIIIIIllIlIIlIllIllIlIIIlIllllIlIlllIIlIIllIllIIlIlllIIIllllIlIllIIIIIIIIIlIIlIllIIllIIlIllIIIIlIIllIllllIlIl.jar
- SHA256 d637e3326f87a173abd5f51ac98906a3237b9e511d07d31d6aafcf43f33dac17
- MD5 6316f84bc78d40b138dab1adc978ca5d
- SHA1 b12ea05331ad89a9b09937367ebc20421f17b9ff
- SHA512 1cdca01ed9c2bc607207c8c51f4b532f4153e94b3846308332eccae25f9c5fddf8279e3063f44a75dd43d696eab0f9f340f9bf2f3ec805ab0f2f1de5135a426c
- SSDEEP 49152:4AMVFST+K4IV+Okq5gza804uttBkBVSHytYziSEI6WoAgdGXL:0FfK4ql5Ivu8kuSEdAgd+L
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IllIIIIIIIlllIIIlIlIllIIIIIllIllIlIIlIllIlIIlIllIIlIlIlIlllllllIIlllllllIIlIIIlIlIlIIlIllllIlllIIllllIIlllllIllIIIlIlIlI.jar
- SHA256 c25b377d6776b3c6c538340cae263c4c3dea7c4f94961bbe323ff79c569fce3c
- MD5 b47c87129ff035cbf60ad5fd15b9ce32
- SHA1 8819ba0dbd3f9f2df2a3b18554d31386925dcabe
- SHA512 d022b363dc6e4e183ae6ea44b5019d088bddf63b4f85ce4676775388c76df01e3e8a63a0ca03f0e4f1191c121a28393a5da47cd7dc05d84d12722f4835909cd6
- SSDEEP 1536:CPj4aLCBcnn4xGrpR7H30x4LCyYVNMhKQHt0msLiWzO5SQJn4494m7MNy/mj:ETCBmnoCptBGvVNLQ6e5SQW494mIs+
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IllIIIIIIlIIIIIlIllIIIIlIlIIIIlIIllIIllIIlIlllIlIlIlIIIlllllIlllIllIIIlllllIlIlIlIlllIlIIllIlIIlIlIIllIlIIllIlIlIIIlIIIl.jar
- SHA256 7f2f1bbfad38be1382913af2b7c2622470fa3af976fbd1f386c189af8ad136fa
- MD5 6c7ed18ba835a47b32bac14d83c90bc1
- SHA1 6a8237ae3f6cccd788aa47b2ecc22f580e810a01
- SHA512 9670ede560347dffbbb0761e2de817ddbc426daa0fd97a53b1fd3c8a031dd6d5c2b0c6cebb21d1dffd23b45e504895736634939f75c39c48d580542ccd7ea66c
- SSDEEP 768:SfyBHlmRQDPgJPjdIVTCV9+n6cMJw297fjheItTE5oO6lKYW8dvdTWhe62C:SfYT6cMJw2ihy+
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/IlllIIlllllIIllIIIlIIlIlIlIllllIlllIllllIIIIIlIllIIIIllIIlllIllIlIlIlIIIIllIllIIllllllIllIIlllIIIlIllllIlIllIIIIIIIIlIll.jar
- SHA256 434e57fffc7df0b725c1d95cabafdcdb83858ccb3e5e728a74d3cf33a0ca9c79
- MD5 0a79304556a1289aa9e6213f574f3b08
- SHA1 7ee3bde3b1777bf65d4f62ce33295556223a26cd
- SHA512 1560703d0c162d73c99cef9e8ddc050362e45209cc8dea6a34a49e2b6f99aae462eae27ba026bdb29433952b6696896bb96998a0f6ac0a3c1dbbb2f6ebc26a7e
- SSDEEP 384:dti5BMxSo4LgAAsJilYcmwPbEM0Av7wGkJXbhS1OaVKD6U2:DqoCgqyIMZwRJLQO5eU2
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/lIIIIIIllIllllllIIlllIlIIIIlIIllllIIIIIIIIllIIIIIlIIIIIIIlllIIIIIIlIIIlIlIlIlIlIllIllIlIllIlIlIIllIlIIIIlllIllIIllIIlIIl.jar
- SHA256 0f26584763ef1c5ec07d1f310f0b6504bc17732f04e37f4eb101338803be0dc4
- MD5 3e5e8cccff7ff343cbfe22588e569256
- SHA1 66756daa182672bff27e453eed585325d8cc2a7a
- SHA512 8ea5f31e25c3c48ee21c51abe9146ee2a270d603788ec47176c16acac15dad608eef4fa8ca0f34a1bbc6475c29e348bd62b0328e73d2e1071aaa745818867522
- SSDEEP 192:LhR1Ygxt7I20RiT2dI03cIH8W6Bc4/kyOLZAy0ZH6AfkA8sFayhbD3D3KRe:1RNRI24AKBcW6BIyYreXf/iyhPD3KU
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/lIIlIIlllIIIIIIlllIllIIIlIlIllIlllIlIllIllllIllIIIlIlIIIlIllIllIIlllIlllllIIIlIIlIIlIIIlIlllIIllIIIIlllIIIIlIIlllIlllllI.jar
- SHA256 03ead999502aefbf1380bd2e9c4a407acb7a92a7b2fe61f6995aba3fca85efd4
- MD5 fe734f7ab030363362fe3d3ba5e8f913
- SHA1 2e9d54e3b410557c51c3ea101d66efbb5266b80a
- SHA512 303ecea5f3f1130f473cde0d78270090290b6f13311bf7459282257ac3097b2b6086db461183f2d8c97a9101372155bf59bbfa12a74925136d0a2a615b648b2a
- SSDEEP 6144:N9O6oWKMhMhoC6S2eHrZdN6crK6Kj5HX0zrwvZC:bKy0Pj2eHFdNlrK5HkQvZC
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/lIlllIIlIIlllIIllIIIlIIIIIlIlIlIIIIlIllIIlllIlllIllIlllIlIlIlllIIllIIllIIIlIllIIIlllIlllllIlIlIIlIIIIIllllIlIllIIllIllII.jar
- SHA256 5ef28b3d65988d2db2fb8fef8829f3ffc1e2ea08f2342a18c73da0bf435ff5d3
- MD5 f739c9d20c92b6e785ef649b0cd05060
- SHA1 69f166eabb47ac8866bb0b79d3dca66e40f9613c
- SHA512 706ef16b6a7d6ec177556f348d8030abe2a06289f0b34b84c8bb536d0aaf6d77680a1022eb977a7acfbf3968a5875a6ec2984a5aa40a15c271a7c1be80c0f82a
- SSDEEP 786432:oAIYx4bblPYyka9NoqvKm3UUf3cn+8gwV2REhWl4sumDUTVuuwqVRW:oPY+Pl99NoqvnE23G2mWSsLDUTWH
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/lIllllIllIlIIlIlIlllIIIllIIIIlIIllIllllIIlIIIIIlIIIlIIIIIIIIIIIIIIllIllIIlIlIlIlllllIlllllIIIIIIlIlIIIlIIllllIlIIIlIlllI.jar
- SHA256 2d43eb5ea9e133d2ee2405cc14f5ee08951b8361302fdd93494a3a997b508d32
- MD5 5134a2350f58890ffb9db0b40047195d
- SHA1 751f548c85fa49f330cecbb1875893f971b33c4e
- SHA512 c3cdaf66a99e6336abc80ff23374f6b62ac95ab2ae874c9075805e91d849b18e3f620cc202b4978fc92b73d98de96089c8714b1dd096b2ae1958cfa085715f7a
- SSDEEP 3072:2DiL6hR+wm60gqZjJhqo2M04r7bv1XMrMxw1rl1rwj+Bmd6dYBmkW1eIjEmFdbl6:bq0jSi2Qi1B1Cay6dYBUwmPxLe3
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/lIlllllIIlIllIllllIIIIlIIlIIIIIllIlllIIlIIllIllIIIlIIlllIllIIlllIIIlllIllllllllllIlIIIlIIlIllIIllIlllIlIlIIIIIIlllllIIlI.jar
- SHA256 9967ea3c3d1aee8db5a723f714fba38d2fc26d8553435ab0e1d4e123cd211830
- MD5 fde38932b12fc063451af6613d4470cc
- SHA1 bc08c114681a3afc05fb8c0470776c3eae2eefeb
- SHA512 0f211f81101ced5fff466f2aab0e6c807bb18b23bc4928fe664c60653c99fa81b34edf5835fcc3affb34b0df1fa61c73a621df41355e4d82131f94fcc0b0e839
- SSDEEP 384:fSw3uFslDvQGOoqdoUFKgvXj9jmHo5+FejOcEDffWPvy:KwJlrQGOdoUFKgvTmn6y
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/llIIIlllIIIllIIIIllIllIIlIIIlIllIlIIIIlIlIlIIllIIIlIIIlIIlllIIlIlIIIlIllllIIIIlIllIllllIlllIIlIIIIllIlIlIIlIIIllllllllIl.jar
- SHA256 bb3bde3c3729767432620b0e865dbc1b517132ce3dbfd69a817f2bc617ff031f
- MD5 55b846c68a6cbaa2344342d8d7f0c779
- SHA1 cb82af503d6d515a9fac3ec6adfb5a1a36eb6e46
- SHA512 16a04125f44c0844dc7b39b13aef6ce4006e0c97a8f2b3ca160e2f623f5e4a9f439862270cb4cd8be80a5766c69fda0ca454c50310e5a579abfdf976b4b030a8
- SSDEEP 12288:O2TuSmwAopx09o8fGEwrSAche6T6TfhRHVO386XErm:V0409o8fGJrf6WLJrm
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/llIlIlIIIIIIllIllIIllIIlIlIlIllIIlllllIIlIIIIlIIIIIllIlIlIIIlIlIllllIlIlllIIlllIllIIIlIllllIIIllllIlllllIIIIIIllIlIIlIIl.jar
- SHA256 2759150bc72303fe10e6dfab84087a77bafa22af97b4f4760f4466d96adca806
- MD5 fc6a26acdce0acd2d56904e17bc79f0e
- SHA1 2e63d25e9ac5ac594e6b66103b88a0b8228a4dbe
- SHA512 3f74f96b9ebb51c5d2237585eba0a838a4f601a9af8260cbe2ee68b9c321fb7aaf90f91506df133f873952d9ca5064ceacbf39fef8bfa0457c6e7b716fe1223c
- SSDEEP 384:FOb3Y8W3g4TKzyjopfo/niiX5rpfsOr5Zmv3ZU0NXTi/:4k8W3gtKoBUrWvpc/
- MD5 SHA1 SHA512 SSDEEP
META-INF/services/php.runtime.ext.support.Extension
- SHA256 fe6216d2b8ba466d917ada20ca4e52eadc1fcb1f8f952a71de5ba1d269f29061
- MD5 4daca8e47b21a5bd6b1a8fbe06fa677d
- SHA1 91993dbe59783d4aafd6acf0dea5880926694368
- SHA512 6122054b369f71bc2b6a7e18a042bc7f8e92790ce2a1cfbf1ac887da8e81d1e57d390622ce3c207017f57f3eca83f4244387ee6d5cbcc662be0ea3c5980b4002
- MD5 SHA1 SHA512
org/develnext/jphp/ext/dctools/DCToolsExtension.class
- SHA256 46fd4bbc731494fc5b836654bae8d36e672814ef26f498a584504eab6ab9aa8c
- MD5 b08eaf24bbdecb43e2470415722bcc3d
- SHA1 9b4124a787a7051f614cab32c1a47fed832471ca
- SHA512 975c425fd4830f277bb429da8d1c2c50dc36e2d8062d51a4f6e43a42e4300f22bdc683158949752d06c6bb9003f58b995be23e7175e31eee7b9c1b3c1278c442
- SSDEEP 96:fWS2E3e7L4XFazFYMzGI+xBM68uPXTwhx7gdill6AFBbwRkjEJNo0l+r:VLVczFslxBMnd2M7bFB828TU
- MD5 SHA1 SHA512 SSDEEP
org/develnext/jphp/ext/dctools/classes/AES128CBCEncryption.class
- SHA256 0d4572064123c0754fbd42264670102c27b50954731f465f335669fd0f567f95
- MD5 5f47cc5dfbbc2c1de54a4b54081619b2
- SHA1 272b0033f51a797d49510ebf42afd47280589040
- SHA512 7995eef83de21ca5a3d8feee0f2d1dc98e8b685124fae75a978b4f1ff603d9a83c231c259a2fa479ad48da730229e9e2ea49b0d06d364dc82a23f3ace9980e76
- SSDEEP 96:rZuwE/ercBzDxnZdnuYFBocQybJ71BqbFykInbWSd8qcFJKRHwsWDGJ6Q2Xmb22N:MJHDdwyaqMiyBs9gcdqvDhi
- MD5 SHA1 SHA512 SSDEEP
org/develnext/jphp/ext/dctools/classes/AES128ECBEncryption.class
- SHA256 9b2639f30491948dcd80ebf1bf4cbf74174f3c372a08c7fcb6fe3859a6822360
- MD5 3d7213578c0fadd8585d9b6cd23d8694
- SHA1 1cfe647d9dd70c544653027fec2fbe2e21744642
- SHA512 2387f17703bc70f84b49075fa41c24ca2c8f241ea65dd8b0d0e1dc29d010b5fff2f96ae10da084d32962337cc245ae51147f438731326bdc9677c663abafdc6d
- SSDEEP 96:WB238VEQ3Huu44yg86PQlTs5hTurNMhkwyPYu0IGELUr4oIFvNrs6Ayo:BvJ4yg8l0EPDw7r4fvNrsj1
- MD5 SHA1 SHA512 SSDEEP
org/develnext/jphp/ext/dctools/classes/DeflateCompression.class
- SHA256 607d9fc2a89fa335ca14ba671b80ea6e5fc0f954a80d455aef9d080a78b63b8f
- MD5 b80580a8692fc9a59ae20c93448cb1ba
- SHA1 a18b5884ea817d8f3a683d3d23a347bf79bb6e84
- SHA512 1da2dc64962ea6c267aae4d48ed7802788fdafb8b37a20f63eb332edf0f7879b3e7e4353d7520f68c940f227b71944b5e864b1f596a15083cf3601ad2d279262
- MD5 SHA1 SHA512
org/develnext/jphp/ext/dctools/classes/DraggableTable.class
- SHA256 a929ccbcf33f4657fce41fb7f67341a4fb3ae1d655054e907b261994a811df60
- MD5 b6ae47cf6dd46a80b3111cfc4ca72a32
- SHA1 d07790d61083be8f4cdbdc0233df8b1cbf36d3ab
- SHA512 7b3460d2f0faae7599a75edfed188e3ee257252d507a16072bc7d3374ed596a71c5d1e36cadf56c017a397af4b9a510d2f3d7ce4e588a3527c9852d2c39101d4
- SSDEEP 96:j14ifxp0EDzeNpkLY//d6ESu2bu48AjZ3Vyufq9Ktr2WZUlHTqgH1QjqRhm+xlPC:OUp1OCsUY41ZkL9foJjumDNOe
- MD5 SHA1 SHA512 SSDEEP
org/develnext/jphp/ext/dctools/classes/GZipCompression.class
- SHA256 c582289d796734ca59c931313afa41e31431aac548f4e092f03519371f2fefda
- MD5 4e55c72067919b03d2ea31a128f55e9a
- SHA1 e633be3d0103f0cc15030aefc13505e5ddfe4d1a
- SHA512 34d6920ac1ec50e10d6ff75d67fb4c8a0a60ba188b607f6193453c948967afb1184f4d60db33ddea7e24e2df49a46c6c734f94446350f8bb874f7cc0a1d48dd7
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/llIlIlIIlllIllIlllIlIIIlIIIIlllIIIllIllllIIIIIIIIlllIlIIlllIIllIIllIlIIIllIIIIlIIlIllllIlIlllIllIIIIlIIlllIlIlIllIIlIllI.jar
- SHA256 4bec0794a0d69debe2f955bf495ea7c0858ad84cb0d2d549cacb82e70c060cba
- MD5 d093f94c050d5900795de8149cb84817
- SHA1 54058dda5c9e66a22074590072c8a48559bba1fb
- SHA512 3faaa415fba5745298981014d0042e8e01850fccaac22f92469765fd8c56b920da877ff3138a629242d9c52e270e7e2ce89e7c69f6902859f48ea0359842e2fb
- SSDEEP 1536:1shuTqhiMtf/2PXkXgjYcO1556i/canPH1y3F95grf5CjdKBfn602ZhqsNgsSJ+y:nw1pywCjUfnX
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/lib/llIlIllIllIllIlIlllIlllIIIllllllIlIIlIllIlIlIlllIllIIIIIlllIIlIIlIllllIIIlllIllIIlIIIIIIlIlIIllIIIIlIlllIllIIlIlllIIIllI.jar
- SHA256 e29ee818b2e7ef9fb3ebae9a49a3d6613f18ea2b756a305eecf8a7fe083d1972
- MD5 cf99a6b63f45f7f20963e43b55766d26
- SHA1 9e2f86dff86eb065fb6fcf776da8b148ebb21e60
- SHA512 af7302d350d45837e207dcc91bd95e5891b62f19c682a7443d65feeee0aa6f3d0040c9a67a990cd9a81dfc6b899ffabbb01b44bda830d5bb48332419e2b65930
- SSDEEP 6144:GWfPxB8+tAS5JCQTYsoCDmy/iOYpTym+Xqc6GX5B/n:GoPzKSHC8VZnYpwHB/n
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Audio_native.plg
- SHA256 90aef04ca6ae7221a44b45e50d8a9a9e1bff6e4ed17c5883fe0c6560c8db5206
- MD5 8ac7b72bc99bf0963d72f1e6f5cb3daf
- SHA1 bdb16c87ae2ec6e3a029f5317816a70ddade3857
- SHA512 3958443b7e73135b310db53bc7cd4da871ce3ddcce0fbad5c77405f36af38474e50ee3d4748bec2e7b1207b36b5a3695ab1006fc37071bb28ad8e32b59dab6bb
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Audio_native/Audio_native.dclib
- SHA256 67935bb204d203e8d47a3f61a3073fda21d07a773593a1a5955302fcd3a1be14
- MD5 b369cfe83ce1191f1b464b8e4a92c518
- SHA1 5e702dc6ef74856d3782c69cc2bd86a8d2ae6ff7
- SHA512 e9d7453ee0ffc9ee5ac90224838740b9c082f295131808aea89c1e89996aa23d1ee34b6811661669d64b6656a9ff6ee32e4b739c8a73e382fdae6fa39fd90f56
- SSDEEP 3072:1Mld1b8hGzenYxqVOzH1sdb+Il57INIwyH7iv53oJJ5Y9QDz:WOOeYIVO6d357eIwIUdwJAQDz
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Audio_native/configuration.json
- SHA256 0e70b651580562952f265ad855607c9b118492aa4abaa52d995bc0b10c1ed603
- MD5 27b29dfa53c8bdc9112efc58149ad8ca
- SHA1 739e9d401e13aebb90f30af0c090a115ca10849d
- SHA512 08bbee207c35880ce818b422af2f8847c6ba1ee0360bb947e141e8ae2a12c1e2fb0aaca0a63c99a705b01d7c482d2277d7740754195ae2ac69f0be39ec9ccb08
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Audio_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Autorun_native.plg
- SHA256 6507b86f8289eb0649bdfac6303d7101c266731556c40b35944932519216b5c3
- MD5 a3a068663e768c251433ae27ff6b1267
- SHA1 414e98bee4fdfefa632681cea326f75656fb1502
- SHA512 da5c4a737896e6e2891e757a1dedad0a82d28c84a41c8299c1e225d85c02410ae9bfe53f2da8797d4d44aa61da42c94f39bf312c3c59014b5e51975e63e95121
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Autorun_native/Autorun_native.dclib
- SHA256 7440b6c6a6a07b2e2f6d4e34698b5c00c7915239e5747317c151897ea0ae89f6
- MD5 7b4f33f37b1bd7b3fbd9d62f6ccdd549
- SHA1 871f04ccd4918ef04a5ab012335b8dbd4ef5fada
- SHA512 50186e5f6f99f7186cef9c1489f1d439d86bc24f41af0cc9c087b99f8ee7ab1693cd5b0b519cb94457227b42bacf2a3aa4b77d162065b2b376ef699a85e392ee
- SSDEEP 768:aaD1ilmRlS5TtFnyE0o1nvsr7KUgASnWL0ZBMOQRHczz0nOd/TTWWpLi0ydPGlJ+:a6QV55EE0o1nErGaSnWLsBMOA8cnOd/u
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Autorun_native/Autorun_native_config.json
- SHA256 519177435cb82fb8dfd8001788382dfbe39df5495e97170c19d59adef922eb5b
- MD5 e390087a1a96a0e26edd30e6ae8ae27a
- SHA1 886b1cdbd507b994b86cb8fd34c88cb9f96fd24b
- SHA512 968f501acd522e3186a3024652b53ce08cec92437e8bcb2cd6155eaeebc882b3c4a393ffd5d8d0df2f10f77c869c00c4bcc84b6eb4f555395d2456edd16dd351
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Autorun_native/configuration.json
- SHA256 355bd7c67cd14e4f2e687aef644eb33deb3b52b8502a6a9622c06067d8a5885c
- MD5 25f49a2d7ccbbf6dc38aa096d300fb96
- SHA1 0613a4747d39ded5a679f79dd5083da36a85dd3f
- SHA512 9a8485d9e564e0e9dd507f525fbe7fc80e2f9436e2371ccdb71b4cc99df5218d6889423e53f10cf73a26aa20c96ce48257a66bb1b60614541ac1d5190cba0069
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Autorun_native/icon.png
- SHA256 3689af9cf6000505249c49774079a7d46e0d1913a613ce032dc95b6ba6c7f23a
- MD5 eac0c1f5909cba456b2960f8e2a48fae
- SHA1 e0d6de0c638904dcf7bd6359cff136542d31ef03
- SHA512 a9ba3903803a44fdb2eb6a4959aaaf663043a1394906b2183dc6de92a02c2011c84b3ca7098b434daeaa88f69c4db36cc0fa289635d05ebdd8e6dcffb93ee25e
- SSDEEP 96:rnxqKuPGw+8RXb11dMxh+LsCj1IxbP5U9Gqxgpg0Eiu:YKZ8RTdMxh+LxyxruFxkEF
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/BrowsersStealer_native.plg
- SHA256 b3ffa55519f1c9c57c7d712aff8e9c52b06c5b9dfab1fc6113a79b734ba5a211
- MD5 c961b23e2ea7ae8b9ef0dbbf89858828
- SHA1 4abf9cac5fd6b4921a46e14e7a4572a50b88c430
- SHA512 f818449a12c20132c28309cb6c7301847e8d27544966038915ee5d5dd2f391cf29a0a47c4f9da3ecfc126337bbf63fe82cd511b2887cc8dfa291718bf62e7643
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/BrowsersStealer_native/BrowsersStealer_native.dclib
- SHA256 ca5be77af22d57b00e2243b0854c1c26da851929271c5b439926ef749066ff0d
- MD5 4e61be02f0ea3eae2fb89524c588b579
- SHA1 c90d45737835a5d3d7c1c1009e2c057390cea667
- SHA512 986530956367d15a007be894bba7c0bd1733880e31e591a3bf71d277923861f97296329044484264eb5728b5639b7992a15530d2e43cb249ca9bd92e42bcce27
- SSDEEP 1536:iopj6SWg+uBfLWwmxJotjSto7xmWUSyCzhKKUvqfnvmMm9OKK7mKqoUdvjdF+NMN:ibxwJLWwMUSWDwWPmfKaK3UhjdUNMo14
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/BrowsersStealer_native/configuration.json
- SHA256 86d09d372465eabb63483cf983455efcdfac168d40f401ea4699db05f0cf1d96
- MD5 a6bf5267dc19edb590fe2f3f3b22181d
- SHA1 939974f8abfc21d5130902e85a35e6be9a7c78d1
- SHA512 2a10d9611abc6b26a9c2abd2312578adc75704159327c33ea4026ad0342b3dd2ddd2f809b7b1619704887797f7241a14b558c32e8d5532b1212cc0e424014703
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/BrowsersStealer_native/icon.png
- SHA256 919e9471cbacdb676fb2757d8785cd6ec930be16bc1ca59c40e4334c96330296
- MD5 ed7303e580419916f53a049d5075fe04
- SHA1 5a2a10ef2410620c8e91940335cce56fc35b623c
- SHA512 d95a0a67c55b72be92be7478af9868f33c7fc95ed7d7d20fd1a10b54eb16385bfb8ce99477ebf37cc9398feb55373f6a38c5f0d1e8d4351ac80cc08f3c5d68e8
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CMD_native.plg
- SHA256 6a251d511466b148dffaa608afd752399eed02a79fc6e1c9ee305d1aec473781
- MD5 4629063bdef75a733472882f7d043118
- SHA1 37c017a596e97d2cb8a854cb9dffa62ee151053e
- SHA512 2fa246addeaf31f09c22cf9ebbbd852317167276832908f85d300dd0a1dcca2c962cd40f1c95fc085278e86bf8bcb2f40892f76e59c3e9a84ea7130ef81f9528
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CMD_native/CMD_native.dclib
- SHA256 2a7187f0749125244b5070cff29e501954580fa9e9ec2bc6ac4c46326d277f22
- MD5 f4a01875bf9ab8d8efdbb8ba8ea41e71
- SHA1 31b072abf6c227c7ef069e16290192cdbff264f0
- SHA512 b08ef70691f175b40f5209150ea062c2303e7f64e06c849a25144aafebf272d6ae0f0bc90e5807c59bcf05ffd65ba2847569c734172ff1415231be29820d5498
- SSDEEP 1536:fe9bbn8ArUQ/JzQ6Yaa/uqdklMJSpjsHA:f2bbnxr66N6Jk2g
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CMD_native/configuration.json
- SHA256 676a72640659bd910f3a0764695a27f47648bb47a52c82d17672dbac2caba65d
- MD5 3df4e2d044af857fab8bdb9c46a565e4
- SHA1 f5dbdeb6c1e8c5fd6a7019dc1c60bd197ec80db0
- SHA512 73dcabb1e4bb60b6f92052144b4d1fe06a5a095df9a6b82186fa7c3732869f4cb2d10668d2f3625e457b7b9dc27c884dc90d89e9f74bea32bfdfe5d943c5d127
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CMD_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Chat_native.plg
- SHA256 39b1a342bd729c5e7a9fc38485c1a34b223840b16c55da51dd6119b0b9859f64
- MD5 784309ece3edf0be434916dbe3ef827e
- SHA1 ac618954e4c98897b03508b2b5eb94704325ac75
- SHA512 65cf0f23f8a5496eb57ef08cdfab5c1162c10cf18ee6bb7478a5e742a34794bff7d963cfdf5aa047657c1934dcc876fd7add217db9e9c511d61fd2f5b1edd8b0
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Chat_native/Chat_native.dclib
- SHA256 e6a1ee6603be735ab9fbae524c540957aec782d105e88dcde428a5713e510f1e
- MD5 a0cfa56bc4b1120975fde5c69375be7e
- SHA1 4005a6e8db928cb80ef0d682e66d3c7dede5c54f
- SHA512 f63f8185fcf4da17bbb49d4ef7f5ecff08f354c136a5a0234540efdf506a2adf40cd5a9f68eea4d4df4f990a9015abe1821de2e9dd51ee73c2798240e1b24f21
- SSDEEP 768:c23TUZCPVBI6SrojwA8LENbTjuODE9xCgA6qI6OgjscB97LboyaZE2oWQqveR+BY:c2jLdDPQENbvdE+IkB3EEFuv6Mq
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Chat_native/configuration.json
- SHA256 2d5abb9269144f96a3126aa02ad5a5108989e83583f22acfcdbb1fb7319d5aa5
- MD5 78fe0b20fb0683bc13739513cf826f2f
- SHA1 2afa83e9ff6495260ccc27829e8539762c8de3ea
- SHA512 9c1560e50723a09e1ab04cf922295bc7c180e1c35dae1089964ff94051b231af797897e3612ca5f24dd73247340e11ee4f20be506ab25afdf219e8fa67eb9bb1
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Chat_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ClientsStealer_native.plg
- SHA256 3048fee32fd98c549f3568f14dd9985c776dfde3f6dfd4772c74f05a7212835e
- MD5 e8e671b4d9266af293efd3dc106b1a6d
- SHA1 cef9ff0b5b23767a049062c1b18fbeeb60250f56
- SHA512 3e4f8e3afb018e2fee400b56ae7310a87b2ccd141fbb5d5f7c2a6e9b3f69d1a0a1bf12a3bb7c7633fca7215e4f8238f50d07fd60d7fb0cc0a14d6d14678653fa
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ClientsStealer_native/ClientsStealer_native.dclib
- SHA256 e745b5148680fe943b016f8c0178aa3153194a3b48c563763278aa3aa3c4438b
- MD5 0ab5f5e62697c36625d53a29e06ff129
- SHA1 0114c55c188a47f9f5b55999bfd7290f30d91d2f
- SHA512 ae43f3d83720768495fe1e896d73c3ab8e5f9db2ddcf0a4ab5de7c935fdc4cdecc05ef4bd667afe6a7f72083e523447af04512e839e3ffab379f285a92d91109
- SSDEEP 1536:u35uhL8/PxYbhPkYz3/cLpHKDczVYRqjdlXetUT8rm8QH53GsMYB5SsEutSsdnxL:y5I8/56MLNzH7Xy9mxH52lTetNs/mj
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ClientsStealer_native/configuration.json
- SHA256 cb9a59527f96f79a509b9c2ce18ed4dca46656f225add8148d81005f85e4b8c8
- MD5 d3b2e0627432012083215387f96d9ef9
- SHA1 207ab0e6d4bac1a996a1ba327c5153527729cd0e
- SHA512 a112539e8ff035cc558532f51a854cdfbb3ac65ca0819639129d337d3d2577c20234634b3bb6e09cc737a43a7c36f1c75756a6e87e26ede951052b3926b10d3f
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ClientsStealer_native/icon.png
- SHA256 919e9471cbacdb676fb2757d8785cd6ec930be16bc1ca59c40e4334c96330296
- MD5 ed7303e580419916f53a049d5075fe04
- SHA1 5a2a10ef2410620c8e91940335cce56fc35b623c
- SHA512 d95a0a67c55b72be92be7478af9868f33c7fc95ed7d7d20fd1a10b54eb16385bfb8ce99477ebf37cc9398feb55373f6a38c5f0d1e8d4351ac80cc08f3c5d68e8
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Code_native.plg
- SHA256 7bb29808fe64c6c36904aad6439b23291ce12c8cc45bcaa7be5942c7062e1fe8
- MD5 f085b0bbe5365f543baff07b40713274
- SHA1 f16346d8a880ee61386af264107320b6f917cf62
- SHA512 222c4dbdb3681a23b2ce94b88dc40213f60a1a48691b0253fbbc12d1114f8121080e8f07864de9915e35560f14700ec53200a304726559db39a0453e9a937c3c
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Code_native/Code_native.dclib
- SHA256 cec7ffb6f6dab8f49ee235febecf101dd738c501dbc30b0f557e004a300a336a
- MD5 18e19d382f2d0627ea7a680a508233d3
- SHA1 5d56c744fbe43be0c750e66c54fb6db0a5e5dd5d
- SHA512 a81d2632435cbf0454ea4c587c9c6b59ca2efcea38142678ff9d348b359758ff22f91def7510da3a3b14888b8e14d65d4d4379a9883125c87ef5fd61a70dc0f0
- SSDEEP 768:L383zIvNJHwLRZ5qLN5l87aDlGNT7fACsoN0DT86a/vBt5sUao3b8CGqglTuJhpE:tvvHwLRiQ7VACtX6aR/GnYDpchF
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Code_native/configuration.json
- SHA256 23b8f658205d40e7d04ef1a2089466de1bc80ab5a336b6953551f7ed29370c17
- MD5 64114564fd2ac6a6715f16ed470345b6
- SHA1 ecabc2a7ddcb0230bec547c118a252a05a9780ec
- SHA512 267d396ae26d4de8c573b52fdeb2ec82977ba8918b1c14aadd53a2567c61f759bffea417bebe4e4ca9d8c70933ac95b3bb594383154d373e6cc78927f30d6272
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Code_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Common_native.plg
- SHA256 deb95e89516c7cb405f20cd83e74b58b2b31f1ab3c062e2b3b4529618ed3b122
- MD5 7a38e79f706f9169e4f842e7d58c60ac
- SHA1 9eee0de07688701618d4bf60543816683a74dcf8
- SHA512 4bf57bc8d4b8b34db49b18fb09c1c42a0406a3ca1fea4390a873af8bd2ebedd6d1d993d6921b76bc52ccf47a2428a2a20f7918691259683c18d6c4edcf5b1efd
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Common_native/Common_native.dclib
- SHA256 47fe553244488e0d52ffb0f60f81a69c642345e2bb5b425cd766ad836fef3645
- MD5 90e4e20d33233020184cd660f615eb25
- SHA1 cd6be17e3bd269fe1d60904772b15193a286a113
- SHA512 bc3c58b8dcf08eadb5af71fbf0d14e513c22c2b548c52bdf2680db07d99e79901101be7e5567b842b9c8dbb440c937e88e0003c023e2d4e007b6ef941a533c5e
- SSDEEP 768:Ti75DUC++GlazrmArdwoUit915KFUdsYuQl+d1vpnnZpLo/YH7lOL:Ty5DUp+GcVrXUm9OFKtuQMzvNHLwYH7e
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Common_native/configuration.json
- SHA256 9798a0842677c687c4eb35d84a95ae34224e7bff0462a7361769e02360b01d2e
- MD5 95089808e2bc839604c455731996f8e0
- SHA1 63528ba2da349a9412aa4ad6f9a657d3c6c4165a
- SHA512 195fb5dd62bebba1cb61f34bf87ac61b3c0931f302ecc85fa10e99932edea9f928f930564b8407b6b8ac6e3d5c5b6b709a9ad09ac047ceb967f7f88c4c90e037
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Common_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CryptoStealer.plg
- SHA256 35a7642b16a055a987b5c0af6805b8ffbadf9dbec07f9633150e9aab2bfebee6
- MD5 163fe7452399acb591716d660a84af43
- SHA1 f893924a05ba156452dfcd2cef69787699e87fb3
- SHA512 f330dab2d54236475d8b3d7f8ca8cc2972dc45a351e8f0dd9830e80ee5252e1f96bb758e1004c8de310f7b49b5e807625d1bf609753e27950ee73be53c1ad0c6
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CryptoStealer/CryptoStealer.dclib
- SHA256 ac31f6e7d2ffd99ba0871af61ba35d96817f191819020ae565c0ec3a4e485089
- MD5 3a3bcc07a2a8fc3dbf508cc7386095f4
- SHA1 31a855c3a5deb3e1a482c6a8da3088dafc90d0aa
- SHA512 0b9a1a200b6496a88500ed815fc7a38de51c155d5905a048437caf6eb0df2cfc6650a3bec3b5f98e20048b0cb6b860f2816b5fcd6000cca908d3ab2979792000
- SSDEEP 768:/p2NZYFEECJhOnCfrTiuoA1u/w72yZkz2V4ohOjlcSYVU7yvILrn:/P+q0j1dyyZkyZhOjlI+7CILj
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CryptoStealer/CryptoStealer_config.json
- SHA256 13f6486108f7db9675039499164e60cb41747cca95161564f54fd6185e1d71d6
- MD5 f78f3167b34995c80eee658a51cce179
- SHA1 a83d2ab335b465c94269a86275d96af873dd411d
- SHA512 43565c976015c4d833898afd87cde2f9267ef4fedea8f876f30ac2f07ad07bb4e0b02f2a92d1c054dcc6c24b74dc4f3e19117128a5439f18b5b28e6695ab013e
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CryptoStealer/configuration.json
- SHA256 338dd48d443a28c1b9cac2b13dd27db41f72f8d0f32746e1bc00603f81acbf6b
- MD5 0a5dfad2ffa3b0fffd63d201a17ba41d
- SHA1 6d7498e0bc4a651e282a40fb6bd9aa859bddda88
- SHA512 f61865a1361560aca9841a0dbf53ce9eb992d4c27f9cba16350aaf4c36c236a6f6215b0ba38a6cd66e402b3e5be13ecde61df82278a3a3addddc541f7d25f031
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/CryptoStealer/icon.png
- SHA256 0c7a7c0ddbd306ddff3c4d16623ab0bbc7705be3639534d56fc74aa93d086468
- MD5 ec4d82eedb52adbe1dd228753d86abd1
- SHA1 2ecd2ac0e9427260422bf8f930f450d8888ab046
- SHA512 02e49ecfdf08ed18c8d1c8e12ae9572dfd777e828370f77137d3b472578cc247e7478286bb6d469fb236151b94d8398bbdfeb80319223581830d137209606f4b
- SSDEEP 3072:YMPZQ10ZapWzBSpIiEx1X76giBQElx8/f:YOQ13czBSpnEax5lx2f
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/DomainsHighlighter.plg
- SHA256 a1fe11a8efe2f72024d20dbf33a718d17b607684c7b8d2a3d30420237bc4aac4
- MD5 1a0eb1ba9734e28f4e56cdc1e50d45b0
- SHA1 94f1630048de700b5d6a05c599d27c11ac8d9c91
- SHA512 fbe5a04268c2e28594904154352cd6b60f407956b5818a0d346879a9c1d7114a6430347657ae02963d4bb158d94de2b11745f6f150ca4249cf6e51ad0b90cf33
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/DomainsHighlighter/DomainsHighlighter.dclib
- SHA256 4e9316e982428ce9a4ee814659160e51faebe461b374649cd7b1185b14d973a5
- MD5 ea9bdd79a9ea1e515a2a4dda2309b172
- SHA1 be0bb5269608552d8990cd1eed3cbd15ed85ebb3
- SHA512 ea973ab55105c0500a79cc1c4da13a92d0cd515825af794a6fd6dacbfdda1cc00e8506f5248967ccc4633e01bfc9888647baeb2137f5d9ba248d55584ef3997c
- SSDEEP 768:LrGgo6E80kawun63kYlxVrm4PNhQyQRD172kc9mUSpGP:No6E80kFiu+4FC9RD1toOgP
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/DomainsHighlighter/DomainsHighlighter_config.json
- SHA256 7912178ad96cc647573e8678cfac10997288cd7c58957742f6e8c9972f219b2e
- MD5 7a96da46131f98573a29e94d3c5f94c8
- SHA1 8ff6213d1346af25a05b4991f0cc209f6563c4ec
- SHA512 3e9a9625381f0626b504712220bb05db92b3764f84a936bec8de35c87f2c2e6eb832b17378fae4a27be7c963cb8d944a7282c7f8f3fc6aa040f45c1fa00bd0e5
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/DomainsHighlighter/configuration.json
- SHA256 cec1d4f7f5c81dfb212234855f42fea02561e6b6580860074853ceee1cdf26ac
- MD5 f807f991df3a924e3d840703cc69a0ed
- SHA1 81459583af0d0e1376ef85c53039ea90d459d81b
- SHA512 449ae092e1bc8155fe5b4ab256c322933776e6da139723762098e8afd85dcd6d1ad8f9b666e642f5840ac7b948a1e14b93350c26c2af54eb30cf84b0f99fb6b8
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/DomainsHighlighter/icon.png
- SHA256 6b8ed791841c3a7944e9c3ca2227480bdfbcf6e198b000187eb6bb36db1eb385
- MD5 ce8d6d451061f88bb090f9db3504695e
- SHA1 3d49a5228d1afff4c2e296be4060a9a557641f35
- SHA512 211d26a277b8ad488db3ad40b174954b3d06aa7aa9c82de2039cb506813cc24ad37eddbba76ec55dbdb3ada2f67be98f3f7b33d0750630c3d5d3e9f34a1c6b11
- SSDEEP 384:UamjxPmb/nFLoUzHdrCYMn8U8KUBzrkiw:PmjRmbqUzg9TUBEiw
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileGrabber.plg
- SHA256 611cdd2b040f33e01126ed65b5bed7f81d86ab27362265a8ee41bf23956515b8
- MD5 67785737ebee5895b964f0cf0f9d7816
- SHA1 7473fcec1ef769769a3d0b25abed0ee250cade32
- SHA512 3ead8ff131414437212807416504a765ad4b4d43e5ae2e34c931ea73eb0b55b22e00c3584b41723dec944231880d421ca48ee8e6cd3c5671e217add29d3b7092
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileGrabber/FileGrabber.dclib
- SHA256 be0f5952a99623baf41bd7d51ae63e271c0b1ec67480c83f11c541efa934a377
- MD5 bce9243fc7c368bb08c03bd0d96bca90
- SHA1 eb7fc62fe8a888501be179f512e6f7ee69a08c46
- SHA512 8c432b6893e69a92f63cb1c63497f0614ce24c56644ec109cc8180f2e61aaac16be83ab2bd00f6b559204fc1d3658a37565ce7450ffb0d99fe254358ea8e30bb
- SSDEEP 768:fXz7e1D9aTNlPE62aDcUXLXEsd/y7dEVdnQGO38eKTQD4s9NpYMHdG25g:fzi99sNlf2XUX4XqVdnQG5TE4s5GKg
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileGrabber/FileGrabber_config.json
- SHA256 94d213eb8472f51981d52120965120a263d4e45b7bf900df9c7c04ac67002684
- MD5 24962fd67df842fe851e87ed3ca079ae
- SHA1 40683c084c77aa6c28586335b247e9a78a6b6d2d
- SHA512 3f0e7d27b498969f4a69aa5013b9f54bec36c827715b0acf47e013ece24102f7513dd2e4ce6c5afd4e32a8b36ea5e9f0101fc2d538fe8457c782507404a49529
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileGrabber/configuration.json
- SHA256 577f6fc8ecde7b244cb22db64cfa4849f3a1c577a98c9350cbaec863aa87621b
- MD5 1eb10aa566dca3e370ccc7c614f74ed1
- SHA1 093c11d185a7bddc00b6db83ebbcf4501ad879ca
- SHA512 abb609446a6b3abf52b2e5f172e8aa2e4195a6b341811c1e8779f1a42592151b1e60b64d57d53ce958ba1d9ebf8fc74490662186618d783121880798c5e456ca
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileGrabber/icon.png
- SHA256 940752635a4c754515849205d6c5d1abae0750fda9edb8b6d4023d9780d3b428
- MD5 99e524e212d21f16f5a094c5f6d96836
- SHA1 de3114aaa5036efd62ea148136e041cf788fbba0
- SHA512 a4d2e76c37209d5c3812fed2dea2a7182cf59be4b63465975580f001185c1cea26f90fd699b6dab5172a7908fcc63ca6e101ffd39889b82695c7babd93725f98
- SSDEEP 96:WKwSTUYrF5qoP0cK3OnTQfQN4snK+QzqtWO1puq9:lU2n0tenTQ4m+N14Mpuq9
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileManager_native.plg
- SHA256 88f3b5540e2ad220225894955e6cf05d4c46ece38c67b597e46f9ad3924f4fba
- MD5 8a1c44ece7e46eaca58e3ad2767f2fe3
- SHA1 f70447ee75ed7d218654aaf0f085561209352db2
- SHA512 4815f3464c53dc8a9b8f04dba10005b180809579af31c0f3681492b9d87ca4937c91719fe9296bbc19c149adaf4b84c4022af18cfc1e0b533122efffc39bdf09
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileManager_native/FileManager_native.dclib
- SHA256 d6ab5e01e2fdc0db837410fc5ac2a194d0f96f33bbf06d89d414d716089c2aee
- MD5 7851cef4b7482a18d4c7116e7a7d58cd
- SHA1 cb675cd60f74163f5bf046e7e937e03fb92828cf
- SHA512 f5f67e363a9f21b975cc1f667b29e2445e17d828849c0f7a9bb3e1123872c5d034d2540dbebcf6ca27158b703c4e24170b994559116d4c6348f102191b877fa7
- SSDEEP 1536:7CFnCYUUNS/fJiUXXOxR7rWIXnRs+/o0dQZLN2VOVNoDO6:sC2G8UnOxRPWIXnl/CfOONEO6
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileManager_native/configuration.json
- SHA256 f5ea910df747890070605afbdf0bc582001d7eace14187a4809b9c73feb10f3e
- MD5 761e69e04cf0019bb57409cbeebec0bb
- SHA1 4dfde249c9deca8dbc84162df71a9789d12eb87c
- SHA512 4983b8f8243d4acb6cc03f44b585cf12c86b6bd34df3b176c44cff64d9757ba6278d221edb970d27aea5910a831743b9a94b08e3ebc554b7ebaaaaa383392e2a
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/FileManager_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ForceAdmin.plg
- SHA256 0093ee4152a54954914e4eca70fabb7f0e4b0bf032edb5f44f7a25420322dd09
- MD5 a49b7db6725658b29881173f748a93b6
- SHA1 aed674294ba9f833e75194a990cc861a3e54da44
- SHA512 dc0bbd216e5ebbd36c9b12e4092b2a9e84e7bb9b05a05f7934cef6ea66983c601cf8045b8f07155ed8fedfa570c93dafda67068f2adfc2cd46c2da397cf18db0
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ForceAdmin/ForceAdmin.dclib
- SHA256 bdd3ace51a9b615674f01beb2e1b78299b9ab9d20dfd093505bc0f810149d8b0
- MD5 1869ee6d25d010bdea70ed9ac0088e31
- SHA1 139004bf76ea71e560cf0a4229e75000f3a3e8b2
- SHA512 840535aa2aa5d76b3ecfa033882fcf7781aa20126687ea1460a3333f8f196269be96a5af7f7c7e79e0bbd63bba3051d3c10be572211248cf2fd4cbb1fcbcf40a
- SSDEEP 768:DX3a77yYOQI+18NR2HnJI85wk10mVdb5VNxI6968zNnZ+H:zK772E18in+85ymFVNxzzNO
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ForceAdmin/configuration.json
- SHA256 0086dd54110698ed0a2365dec397c968d1ca71b608bb0eb89e7de7746349e39b
- MD5 3feeeaa04e23d80c113eeea1e318f3ff
- SHA1 a72ff5e15f500e7cda9694ee83b04c752c0422c4
- SHA512 4a4399649066353ce6b19976b50f67a3b62bec4905afa776900522a7f55f4f050aa68ef76f4b72873447a0aa9e551e04d699d477ac8d5baf1ffe9e33a3d742ae
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ForceAdmin/icon.png
- SHA256 3b31c783e25d5de652edbb7fa8c48f3ae187b191a1087e997d1ab76e19cb507c
- MD5 b73e1eb1acb9501d10086e8a207b521e
- SHA1 d59b5587b05f1f6bd719d08268f182269f858fa6
- SHA512 062916474245e6b239c2c8187b6b3bd6fa587fad3c7947e5e97ed21c5cb88e5a24830b3dc02205d4e51a0f102794137ae32da95030a47bd39493bd8192dfc0ac
- SSDEEP 1536:iAAY9EqXvz9v/OMfKK70hBX4E0iM8OBy91Pgmbu3/GJLMxl:vAUe13IaLPgf/GJSl
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Fun_native.plg
- SHA256 a9c1ad17732a655b559ff069442c8c850a46ab5e29470e20588e52f75074311c
- MD5 0bee4971d216e821978d17e011c12b77
- SHA1 6174992174087a26d3956a9aa4a171b229e2128f
- SHA512 661c1241b2da849a4509bfb62b16b50bfe8c94d5e769e65076de46420ae2e7c66c4dc7a883b4a232aba629fd2a4c59338f2e1578cd0a67dd55044d6d6ee51540
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Fun_native/Fun_native.dclib
- SHA256 5a24aa8150419edba44220fc503c6dbae4c58a3f89c5d19bbd81dcb48d310fd2
- MD5 93421b96cf437cc42c5e5845ec6ebcb3
- SHA1 807b2150d72a40fa02feb9d2f6eee6746b8b51f0
- SHA512 f03204b7be032c74acde27afc48ccd8dc61ad6164e04eb18b3e2f73afd144f7e1f926672fcbe3e04f3ba5a37cea031011412a860b30fc62993260168a820d994
- SSDEEP 768:JT0EfRNX13vBtaZlH4f4vlCFnrwALqLK4wt21g143NcJH1TEWG+qsEj47Mxr1KyE:JIEf53ptaZlHq4vKnrz4o21gG9OmgE4v
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Fun_native/configuration.json
- SHA256 7585f3b80568c39c79e9dc7ee8e799e6d375f14e2e266751a4cfcc88aaf7676b
- MD5 143816a3ed0fa2d30b0a80ce6c785de0
- SHA1 a7068228cbfb78ddaa490000b1bb9f363176d592
- SHA512 c32c6b9ff9d91b8688eeb942c4c333b2bcad417dd3a3fcb1328240ee2e18b6e2bba44fb8dc9a463853ca9b290a90c1e739d34a1e775e86bab632d4398fd47a0a
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Fun_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/HiddenRemoteDesktop_native.plg
- SHA256 790bbd40fbe0e4c223ab96200c8f34489728c11256d6676fadaa237a0c4db46d
- MD5 5524b5d071453819ad18cf0d73a23ac6
- SHA1 a6ba215d8fab4187e61630889cc2cee9b64167f3
- SHA512 55d958c781c708977fa0d7999abfc625cfb510b2c6c75aa4da51fcc42361d75914241e667cc7e178d8c519ff36c88f23ec404881100c844331d539e5f35e978c
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/HiddenRemoteDesktop_native/HiddenRemoteDesktop_native.dclib
- SHA256 b3697c52ec042fc0cbe1578f400d54b53f73b1f41b884a3394448baeb39d9630
- MD5 0e223ebefd25bfcf95c152b6b48b90e1
- SHA1 a5d87c2ac9f5c767e2c7a674c0aa62b39a9b5ecb
- SHA512 bc14e5e70604954a31c109c70f87f6dc3ab4cc14dcbe59fd32ea11d98990655b6a3c95b765ea31920f6d75365458a51256cc44a44a0c7f3f9cc9a1f81564c598
- SSDEEP 1536:ffrJGv33xUHbMVd8z1PYK3Tt42OIlGtzbJWATV1nRycwRnzZMlMfO+DI:7JA3xU7MVd8z1gK3Ty2OFFJ/V5wX54Mk
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/HiddenRemoteDesktop_native/configuration.json
- SHA256 9f2f2d2e74c4fd2ed1a309ff6613ece4ca54e6c12aa8b85b0e63b7433cf4a995
- MD5 62e513368fcaa6ad41fe9bce46e6724f
- SHA1 ab9afba8b9496120891f839a4c6d43dde9e59b08
- SHA512 ef103ab652783ffc75e37e56325ca09e7f1c12fe5a0a2c284df09dfa6edffb9139bab0a4356d0cc41ea166d0bba5c9ec1b4a02ed0d2f41850b463e6f86295e44
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/HiddenRemoteDesktop_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Keylogger_native.plg
- SHA256 2d4d4af0b0d0a9e1e241c96ffd37b12adef8516496d3387c113a4ae7dd71f89d
- MD5 8d480f70931ffa64916b6828a91cd312
- SHA1 bcf2ad3662e563525306366cb08a11cd9b1d7df0
- SHA512 8f153daa4c7073f8302ecd5149ce30929f4afc15282df0903af11bc36c3b49cd2f1f9353c1c979c74629798f9b7525359dbf3d8323b36688255603a71f27f4c5
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Keylogger_native/Keylogger_native.dclib
- SHA256 d68ff2bc35ea300a04a6002eb8848da306b8312ce8c59bd2330af6c4f8a89581
- MD5 926cc3de4371c47dcb72fc5583aa612c
- SHA1 e6c1e3fb9c2fc80679b7e4f2cbf6aacad335fa26
- SHA512 21121a52f1c7946db43c57d65da9190cd0af767316dc608ec816ec41bcf6d07269e202abc8437c2b03030a56a8d1153dcf34d206f4e79a49dce426f51556b8bb
- SSDEEP 1536:nzZ4VjEbdC8AoGdXva9I12OHBWnHapb5rprQFaj0emdj+:nV4VjEM7C9I1t4mb59VPmdC
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Keylogger_native/Keylogger_native_config.json
- SHA256 260884772d3b53fdef56815fb3e5e4047708dc25b3e706432a4c0bba227b2e3c
- MD5 137736ad76c2eec44ba334b862368f22
- SHA1 6b55d414501c236ca299815ac13938de2c650f0c
- SHA512 460d8d0a0717a966c5b92917734de9a7727f6d09c328046c7ffbc3a8910bbd49634b207fea883566f542f6ac3638776b15fbe4b06818e61b9b936119fbf78d60
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Keylogger_native/configuration.json
- SHA256 8f5ac8861d93d980398f809d364521cce59e4605996d4f2488715dbac25043bb
- MD5 9fcb27cd2d0a268b70255be76add3ec6
- SHA1 6dca6cee2d15db96be7f06cd187f6c0d7a2fc4ff
- SHA512 39520e2007cee7cfafd5f1ae8a6f9db7e1d77748c716284d81d8f9af8d95d4a41bb6bc5a59c325f8a7addfa2d39f01e8f6d0663e57d838b072405782f92ca639
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Keylogger_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Memory_ProcessManager_native.plg
- SHA256 f92279d02d1f42a3cbac6b9b479297edc393c45b901c9372629c7e0657064ae1
- MD5 299af9430ecc018b632712127b686b2b
- SHA1 cc3d5000a6f5083c33525d0e678aff3fbf248550
- SHA512 74d119ad5ff845ee49e71ea25c197e86b56174c17f2762540f02bd2796b243d286c100c3593421d5cef58e87904e1439366de6934ce168a09e50ac653980253f
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Memory_ProcessManager_native/Memory_ProcessManager_native.dclib
- SHA256 559a2e13378d46d1871a54b841651dd8db62d92bf65a196c6d646b67bf66356e
- MD5 2c118550a3f8a1e346c3eff45b617b37
- SHA1 f2d868d2b73dfafe65c1027fd0946ba5d3d42eea
- SHA512 8f52b2b1e7a3f552bd6a9e201957bf11c62fc06b339d2b7bcca8b36fbc151061bae5be622502a61a34a55f26b4c642f1549a5cf9cb69f1c6181bfe30bd2eedab
- SSDEEP 768:a528RbEQVoGb++VdfzUkBw7Qcbaj7KMF5I1Xu1U3zW8SLPqSiew84Q/NdD4z:UjeQVoGbrVdf3wh41Tp1qC82qSieyI4z
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Memory_ProcessManager_native/configuration.json
- SHA256 dc9e85b340916fe2e89689d9079f3279cdf3df0aae215a66f21158755acaf879
- MD5 e4794de4dd0d9e0d070f8b8defa73293
- SHA1 e48a6849197a66ce4a57ab431960241739b2bc3a
- SHA512 d3daf563de14286e7eac9ebedf605818794d621dae8c50d45c139ae82caff57a7b7d213954a43d3bdc736641fa8a23eb39073cc4f36e6cfb2cf4d3b63aca84a2
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Memory_ProcessManager_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/MessageOnStart.plg
- SHA256 9fff8b9abc9a4fc81b226fbe5889d48e78d81947d2d3a8f65d47f270f95f4cf4
- MD5 5930c0448e7374a26a62175a37951b95
- SHA1 78b7bc42b5b5be61073c86fc4ac63424bfde919a
- SHA512 1371fd645b6c8e2959c941d7846aacf92eecf9d6b4a0040c131670a5923c5dba3ece1e2b08c6fc8b498ddf6f59dc42322bbb8eba20137274f0760e5034134be0
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/MessageOnStart/MessageOnStart.dclib
- SHA256 7e72142d52d24df9d205af2ea7aaa6bd273a4c73d166e5784748963cd353f29c
- MD5 5148bebf7101a3eeba9fd5ce0dca2537
- SHA1 a126752140b218c6182b04f6ab8d753cefb5cd92
- SHA512 494e64c1ac778c400606a70dfb05827a5def4a6dfa83a7375a86a29eff875b5a2eddaf28a4466b6c59797489c9b15a6f90636c292157030b5923f579cea9dd92
- SSDEEP 768:sGBlzfLPfC8KFHJuqk4cBh+E5BzZ6P7T6BCD663PTLENDxAf:sKljLP6694cDNBzEht/8To
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/MessageOnStart/MessageOnStart_config.json
- SHA256 023da03d79f79c349bdad0a942484723af2891fd64523e4c5bef3fa3c00a15f5
- MD5 3c5183b2f643bd7214ad748ad7738909
- SHA1 4eefc937fcb0eec30f64644f295d035f8309061c
- SHA512 c928be42a190fa61b1f9c236474e26712aacce934299975af52536a268088de3e40115d8cdecf708a65233ee41063b930ff8939e9614c7302c71e991a318b7dc
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/MessageOnStart/configuration.json
- SHA256 d72541d57211a626a7d78b504c761bfe2057108ac7f6c29fb938ca12df8696af
- MD5 2408a5e75a02ac9d4497f86f8f245fa2
- SHA1 7d2e3557e4324d6041b29598f0eed9db59ebb412
- SHA512 0fc777d3d6697c9015afa029d6b7a218c324b559f72bfe718b66447f72b155d1db3f89854ab4f8a32b255e036afa62e7cfa3c765b869867646e71a9a25c19961
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/MessageOnStart/icon.png
- SHA256 f3bf0e3fbbd38cb475d715d5dce50c0d80b947fbce5c134280b0de17706d7222
- MD5 888e2b9bfe7be9d066258c06d88ad8de
- SHA1 e9fdd642b19d15c68c4608cedcbc65df5add514e
- SHA512 4ecc46f8f5f21e6bf760f3a7a5a24ab25c96165494394caf34f764480a51dd671d50c78c69f9efce232f59c981ae214f9a8a8d3d61744a9eadd326269afb920b
- SSDEEP 192:z8gQaz9uBdZmWSJdsyLR752BfCSO6emG8NqEyLT+g5yg5OLNJEit4Us:GazCSJdrAfxOVmGmql95Ob1tO
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ProcessManager_native.plg
- SHA256 0387e1fd8d122cda1907edc8114d4f2a8e7709d8063e034684ac0192918eb832
- MD5 bc69b495a90880a950878097536a1fed
- SHA1 612d5650dd422a8aae09dcce49a425549cb3861b
- SHA512 89a407cb213216733d369015ac6d1dc10f18f87fe068d0a55612ec94b3436b94b0d37b24db0fdd499a8cc76d6abb1206af34756791c6181cd0b5c50a4130a27b
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ProcessManager_native/ProcessManager_native.dclib
- SHA256 af7a177e230c5e38cf98e26d966ac2482c1d168e77c1716f56df1c6720c28de7
- MD5 bcbebfe7bf6357473bec2ef186a46e31
- SHA1 ac7a85071ea2417fedd6bc5a3530b3d680f4b39c
- SHA512 2d7e435d13b9e13cd8d70f9fc933b74dc9ca0a3b8f292cda94106db810951f28eea4ae98a1a1b782553764f74586c53c8098d1fdbc8c3f1bc71f9114b1b60bda
- SSDEEP 1536:S8y5+TmHzDopvfCD/QAGzhrQNF5fRdboJgoEmD:k+Tme3A/PGzhcFFRdbx2D
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ProcessManager_native/configuration.json
- SHA256 286919364fa8f0f0c5e9da0206edf743248c9093244521e260ac669235731b3d
- MD5 5cdd20af1cc278e52eea60e71b50b7b4
- SHA1 87e0990f778ee46fb22ef8a6cc42aea07746ef0f
- SHA512 a7f6a971e329b41eb8bbf02f27e1d5ab783adbc84dfbeb62c603d442527d444a5fa0a17032eab83a7008cb7b15d7452c69ba59cf54f421de92d4f5b03b4d512a
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/ProcessManager_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RegistryManager_native.plg
- SHA256 12744219943793ee71350fbf5736d99e326a832185302e7c06d5c1d0f0cd47b2
- MD5 d0ca605280d619806aa57821bef52379
- SHA1 5ad70c1487f51b2b26fc9b8451af8180c0698d29
- SHA512 10d4f6d0ab440f104252eb6080f112c8f55fad73f368396d372458b4e80716befae8878210e9f5ebef0bb079920c07bd40018ceeeb401343aee2fdafe79c3134
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RegistryManager_native/RegistryManager_native.dclib
- SHA256 534c8f92aaacc51c0ded17a3cece6d066e23342db9cb18089c812d3914b72a8f
- MD5 b7485345994da3ecfd1797773f81dc7c
- SHA1 3e6ec4e66f155edb02e4be2d6a1cef8313a723a8
- SHA512 d971a697c6deb88beed67e7b21df47fb768473130150fca7880c8f9002285904ad6e791626c36bf2c6fd41147ecdc27f85902228d9920d9c9639aa4f28ec0f3a
- SSDEEP 768:0jLUq3TumXYpqDZ2Z7yd7Bu/umZTsnq4Zu2WY3PQznUkiYk7SIXsDzLBryATKgV7:UPii/+u7BuxG0YfabiYWSXzLBryA
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RegistryManager_native/configuration.json
- SHA256 5f5db99f967edb7cd6be410776df0c32652956c225075b189b839795c57353e4
- MD5 84d80db90b2494543faa37cdd426ad1c
- SHA1 e4253b5465b54ec163fab312ef45e680832e8647
- SHA512 497874a67d299b0d65797d11331d8303d0dca923f6b1c88905d79bbe362393ad2babea832dcc3fa2783ac25fcbf49d1ac26145029c64faaf0ab1ba6ed9c0e2c2
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RegistryManager_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RemoteDesktop_native.plg
- SHA256 1b0ea9a2938bb443a9913c6503134f6097d65d9a84d73f2bc7014b4c21ae30c6
- MD5 89806843d8c12f0d156ce7afa9a253cd
- SHA1 7a231e342b4e067bfb4ab62cca78eb9366718b61
- SHA512 c85449e719cf33af421dc0428fda94662cea2027261c82adc66a96df6b9946e805e080610726d171b2fbe2c9ed4ac3fea50a3f0e9b5af5ac770e6d063bc92536
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RemoteDesktop_native/RemoteDesktop_native.dclib
- SHA256 807b47d5baa584d9a598a6d37e071050c14f9a203281994b17e08333e54eb6d9
- MD5 635798dcca13cb7b8c8b4ba7986c75aa
- SHA1 49c7c263c994e30f1d7e8748a2b10b34512c43df
- SHA512 d45f43725c28b564d64b645decff78c75c63f4fb192581f1443774207abb266eadb0f611d9aaf7a70127443aaf3a9ab5e98e81d2c5888294e3a2bdb1da26c94b
- SSDEEP 6144:KkfH5sexqQYxGpXi+lpAo9hCz2/i4MnXCFhTOQTb2gB/000uhyb2PE1Bckwcl5G9:Nfjx+n+lplCzgMnXWtsghYIcl5Cf51Hz
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RemoteDesktop_native/configuration.json
- SHA256 a86e5d6d488b70c2ffccead84a20f281518d0158e0a39385253e1b65242bb4d1
- MD5 23db1a413d493fc7a873009986fc831b
- SHA1 acd8e3d4cbf318fc8a479ae53a75a976810b192a
- SHA512 e4cbbfdadd689815b9f79d482322795f5c6c7721ed54dcac5dd4e93b3dc0cbbff50327f8b0c04895679fa4d442c443d3d55585981694897204473993498123e0
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RemoteDesktop_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RotateScreen_Fun_native.plg
- SHA256 f5c74e3aae36a776fe7b6b9613c2e98a88c20346bae80dd17c1beec0e4758fd9
- MD5 ed386a4199bd085809cec33ca9d48c25
- SHA1 85e41a72f1376e627bd5cb5dd2e6dd723a967667
- SHA512 8c54f2495e0a0b5165d72f500458f2b805278f17206c7d7abc24dbe50de1e07ddd8bc0d7a7e197fcaf92ce93983869f10d59689c893038e0368642a01a750b50
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RotateScreen_Fun_native/RotateScreen_Fun_native.dclib
- SHA256 8615b73e304e4d7354640b4335006a48b6a9b7d08a8e6281370ccdfe6de4bc1a
- MD5 14b83f07636afb62133a2b376b866c06
- SHA1 12e84e482549de14988f3de7329a5792e4a40c41
- SHA512 557bef8a24a3511ec57f75db795badea8ab29cea279b67363a71a61b0b4fffda0db61598934d783b16dd3d477268eed777286bb344c81e89f6bfc1c958d99b94
- SSDEEP 768:Alz16v6R2nYutdAMUXS2LPLdZYG1bOpYJZYLbFr6M5AJsZOw:e16wOYutduS2LPLdl1mKKbF6MuCZt
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RotateScreen_Fun_native/configuration.json
- SHA256 e9274b57ade10e5c4e10bc6c2b3247ebb8f165293ddd8382076358dcb0e17f34
- MD5 34ed12d3ad63f86a1741ca97daa1efaa
- SHA1 7c9fd7bf572a987badd274fe682f6351442084fc
- SHA512 49fa9a877254b28d8de120788bb4ccfba8605709b388f9db3ba5ec22d6b7e9657e5fcf5553dbea18b8afd2597e1ca6269aed1915542dccb398d6eb4acb9a6546
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/RotateScreen_Fun_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/StartupManager_native.plg
- SHA256 24082a2840cd8983e69d8faf3e003a10cc291e086156da6d16887fb69010d438
- MD5 0e98be7f7e0cbbf3d06a2f19d4875ff3
- SHA1 a7e0b43669353d402d5839f525442b2f0ac6d14e
- SHA512 08957cb0a28ac06f71a197b5cdc35301c05a2a20499f784d4cbb53fd5b6f9cc15dbe0a35514471f0c89dff1c3eafc22281adfe3c3face45cd86afca6e04b7559
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/StartupManager_native/StartupManager_native.dclib
- SHA256 54df07ce3164909ab5eaa0255b5aa9af5b2ba07f9946e39e920869a60c17b7a4
- MD5 a2b1dc90df18067cbe72303852181dbc
- SHA1 48df7a31da99f9d5e21b88cc0a4942de2222bf4a
- SHA512 47b85f9ffd3863a1a88420f59d9df75accd89a5bf5bb61265bee206e5876f245f7f66fd060acb4ba17d30e39ffff934ae5c5097e638faeddad3ac1977867a6c8
- SSDEEP 1536:IV25NU4CNinMrwIJcxgGGVhUtsojNFu1e3z:IV2L5CNinKQxG34FuM3z
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/StartupManager_native/configuration.json
- SHA256 3ac8c0822d548a3612a258528157b372fe4ad8abe19059e18fb47cdbeca3d1be
- MD5 f1efafc6917dfb0a8ccb0dd16270de78
- SHA1 6a7dc5fb72fec56c3f814676cf4b00be0d3e5c95
- SHA512 8d29c01833b0e663e53e70e9fae36acc31c5035bf88bfdd0d95af9af63e9e348440ee68fc6aab1ac46e5288be235a5189e8574571b9bd88089aa3020d13bff86
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/StartupManager_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/SystemInformation_native.plg
- SHA256 70a3f9a63897b5590e37f9a228a02c91eb0f687e933721ff8120ae90bd72d22e
- MD5 e66581fc085dec3f06d9093cd349ea2e
- SHA1 6f2ad63d2026f94339b28b1b6d7fe95a152e815f
- SHA512 0a5caa55ca96e6037e97074767907fa0d742792f749e8d9cebc6938fb83aa0da18efab02fb472b1ccb3972f502a98f74c020bd6373f8cdbadb7f89752f416c50
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/SystemInformation_native/SystemInformation_native.dclib
- SHA256 508c709369f8dea6cde6fa08881fb532cd3341c7b9a8102451e66f3b77af89b0
- MD5 7e4241c8439d2db1ca4cf128977849a8
- SHA1 9465b39c9558172a29c68693910e10b0d641ce53
- SHA512 93b9fef0fc8fcc4e14482665429d554896a196750ed6acd5c74b898252d5ca5ce1428bdbdce50779e154b8859cc047228f9abe5a13c1a8f64e80706c091c2f1d
- SSDEEP 768:yuXCtyYIbaazsO5O7d5KN+fLb5kl//uxBd73HtEF06nLy2NHnirDlwx:WybO77f+Oxr3Hg0YLy2RZx
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/SystemInformation_native/configuration.json
- SHA256 714f16f56bd047792d944eb7e1cc0abf43861344dcdea2816b528b3c51e32175
- MD5 9dbcab1acf1c2c4fbacd2d2aa1603a6d
- SHA1 4a100731e7d5f36e785b3d3012ddd54c580963ba
- SHA512 6a787dcfc71d0b006f934e1b740a1622f5d76ce108cc9dd5aeb6ae1fcc657c00f3ec1ae66dfa7b9276a4fa2e37e091e860b25867830c11500e7edd29fc9845e6
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/SystemInformation_native/icon.png
- SHA256 7eae092c1d7208e01ce2e050b97d0d5fa131377ab01141721fab6204f1515304
- MD5 d1ee8e464424f0f9f13eca80c75e9d4f
- SHA1 cd1c1558a1b3d72b4063eb8df5afcebd7c597329
- SHA512 7c6dbbbbefcaa9a9bba3f55e5caa6473557cdca8b3990ddd7a90be74a0b7396c78eeded79a369ca4e56cd404f9f9140206145736797807165f949bb4dfe0628d
- SSDEEP 768:HyQLDoLI4XWLW4HUoqvUNyHUUyA9BHjoaJ4jU51271zmjElCul6woCgDeFRzyPKv:S+DmIEWpHUoqvUYH6ADHjhJmU512Bzmi
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/TelegramNotifer.plg
- SHA256 73b969e13ecce99d8bb06e687238be0dee1b42170644c54d9ff4844620ac7602
- MD5 a1f228d4a7935aa85fa1285d3f26bff2
- SHA1 8137c842cb5bd0103b29a58b46823de94b04f1c4
- SHA512 46f05c99d9bd211fd0576ca82f2daf70a02f320e910503cbfc70cbe402a75699874ac53801dbc7bc8b3b991666d02a154c95461e3acceb46cbfd7769d8b871de
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/TelegramNotifer/TelegramNotifer.dclib
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b48ca16b9ba2b44bf13051705b8e12d587d80262f57f7b2595ad1dd7854a86c6
- MD5 69546e20149fe5633bcba413dc3dc964
- SHA1 29feb42ab8b563fafacfd27fae48d4019a4cbcc2
- SHA512 90d5f6c334b8064ed6dd002b03c57cebbfac1620d6cb2b79103db0369d3a4fd82db092e675f387ab0bdfe20303d9ac37f4e150896fc333e6f83b00269f012236
- SSDEEP 96:b2+4Af/qPl98sgn8VenjzRR0xXzhZ7BiCTUk9v2G6/7jK6XsBG7hWuP9LfqpW0RQ:gCU8XKb7BDUieGi3jcBgLyB+b
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
760B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/TelegramNotifer/TelegramNotiferDesign.json
- SHA256 30655a43ff07d9493160895bf3d9ebfe3d75f50c53153b005204f511eea63f2b
- MD5 0e5cfe9e3ec0c21ab0a1c53f6ce111db
- SHA1 c795ce27b69b5e4509bec9c0beb457b14c0aeaf8
- SHA512 621b4d46cd7836565be2a580a64101539a63dcf91ae46759c94cdd057bb06f27208d546a4019573d559bc5429dcd4d9be641c85b39cbf2e4d6cf2f60b591e0ba
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/TelegramNotifer/configuration.json
- SHA256 408d433ba0a53268a3d75890c5cb6da0756e07facd0d5f5ca1233024c7b06534
- MD5 019eb65b5fbfaf482be79850f0d03346
- SHA1 5d0724b38022e81aa95c33732cf8d22a76436fdb
- SHA512 5fbdbd0cbeeb523a2403ec9918f2ccdc586dbf198b43e6200a93b378d96ba00859295bd7863d3447f03b616f47a399f60d90c1fa07efb5d2f366422bfaef6ddd
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/TelegramNotifer/icon.png
- SHA256 57b5acb1c78dc149c8211eda56d2c45a2232245550a3cabb188369b5b537a6ff
- MD5 9c35f3458e7da0d6dd287d208256d7d2
- SHA1 77c5e2599afcebe9ded9025ba8f380a309396516
- SHA512 658aebefcfd451b20ba648d55a8f9e0525b7c5704f064351b40c9a70a9a1bb411d6435ded54feaccfcae99191259eb8c42a369a488f684e76874da533a62a8c6
- SSDEEP 192:nTtC5NIAEx/MAcEHH646lRj29VeAiP9HzT+7CglnWJdSyRUU1SkwVj:nGIAIMNyH869VjeAdnWJdb1S/
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WebcamViewer_native.plg
- SHA256 15153d4470362b4190ed7185d2f4c880a3787cda2394bd24ade4bf0e4a0f9b69
- MD5 e79753bf54e59533db047a3bf21424b9
- SHA1 98783cb2b024480177d994ecd91329f185323676
- SHA512 8a84a3afb7696ce575c2f7e1ea68ae33f0d063d6db628fc313898edbdf3a1994fd2e1f4e8479cb74c0c472b0c98067338f62cc665d4930474e68f400d023ac00
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WebcamViewer_native/WebcamViewer_native.dclib
- SHA256 d4f972b551e0263181a3a337e5fc63319b4825509b6ae07291dd9dfb4e53c092
- MD5 fae88d5ccc6b530fc0551d939476532f
- SHA1 7cedf5dc4a4fb8dcc557c559e6b78dc2bdcf0d9c
- SHA512 243b074835414088bea3697fde82b0e8e6e42b38b94572dfa3501924e133eb925f5904aa9ee7d6d34358f578991ba557488d2550231be0bd7228ce89b1f9537e
- SSDEEP 1536:0U9J3h3FYYGQQ1Q1Z3dNbgaaRqV9zvl7U6/zlh1Kza3n9az4ODMSnHU3QKD9u446:06H3ewtNTlBlRrlh4Gaz4AMS0gKDo446
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WebcamViewer_native/configuration.json
- SHA256 5fe01027e70fe434874bdf87ee69244be10a17b02bee25e9bc50d39d6582756f
- MD5 8e0a476f91e3b6da6a5183ee929c8e6d
- SHA1 a04a262cc1c0b1538e446869e808d04b805b8367
- SHA512 9c6c27337690384c1402f38a64dd136320220f398e8af367b7ad37d47582bcd0d9c0fa4d51efd19fa7297d2b48c70ba6db533435a16413bf9393a91b0e0d8b83
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WebcamViewer_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WindowsDefenderExcluder.plg
- SHA256 3c0940601df6c69754ef703c053aaeec0e85d22439ebda4a8169988c0bcc5e65
- MD5 1a37647e581694bf00780eb982d202da
- SHA1 8f8fe9538cee72d0db7ee42ee440f16d2eeed60b
- SHA512 e5526c15305315c822cd4189221b1440df8f7c576f6d79ef58e10151beb43a006e6bd64b673bd9247f43a0668f4317212da36bbbc7982633268d6fb222eabffc
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WindowsDefenderExcluder/WindowsDefenderExcluder.dclib
- SHA256 21e11ddeb2cf5075ab196a5c17dfd5093aa8a3f2b4e60e47759eca35fff1a249
- MD5 c8323a36ae37421774ebca081a571737
- SHA1 dadd47e9363695a3cb44dd1ded92466ec3549979
- SHA512 46911d9b29608ea67c919aef791267eee7c02dbcc98d38a9ea26c3cdd5d06a8d6180b14ff378c870b3963ddd7a682e40e8fc532052f92d9bbe0fef46a661a9ea
- SSDEEP 768:85lxAdYqfjKZbNiAn55DRWTUiKIcsglyQeI/dxizclnQuS9Xbpe7:8ul0RiArRW3xg4QxiYtPULs7
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WindowsDefenderExcluder/WindowsDefenderExcluder_config.json
- SHA256 af70513a781983a5abbbe135a5e12f2b6803a81a3ac54efc0c9c65a2808b45f9
- MD5 a85efa395f6a9467b3f758e65e5f1be1
- SHA1 73c9b196899fc321e46ea8abc4ccb589bd5b4d66
- SHA512 6f337badd27614dfdd42e176499866375c6b74b8f70d2eeb487c9e85e1395402056503f79e7055a727ea7f8da3036c16a47a1d4904579c88e439787c3ad3f6d8
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WindowsDefenderExcluder/configuration.json
- SHA256 04e8c488ac46e3a35e699db5c2d9f5ddcfd9a1192daafe37cf5a5840538f11f7
- MD5 d456ef2d164fa80c8e6fddb27de5bf25
- SHA1 457b8a3c1d718d3e471a3210af151a771a6f2f2e
- SHA512 fb516e8823b2326c2ca7425cb5db8d7ec09d988dddce7d295ea72e40595e33e5ddd7ff4222cdcf651e7de5310e71658a79a63fda254d666f1d44994e9adf9781
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/WindowsDefenderExcluder/icon.png
- SHA256 33cf462ec763df242c45b7239b6395bba7430bf0e86718d08e473ba1cfcf2712
- MD5 93ab1edd0b0877da17c7c46b7dd51b86
- SHA1 f715657ec6057579050ac4fa7a409582b6b19472
- SHA512 704bab001c81731d847041889de85cea890537f3d4064b4f023f0b0e02b979ed7f107afd5775b708e996b5db89f9670049d68066196232528fbdc296143073e8
- SSDEEP 768:y2luBNCW8jKc+bNMd9vfWLTc/eWfd9GP9+GH/uO+FgeLiVz7:RuX18F+pMd9nL/5F9sxG7iVz7
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Zip_FileManager_native.plg
- SHA256 8fbf69542b9c95036d2f998928cd5dfe053e0b2722ab2492ee57b051b73417e4
- MD5 080766855e1514e8c22986e52a9c36fb
- SHA1 ab6e912fe1abed2b5337f220c82555b10241d679
- SHA512 8d8b3de8c89b37788068489c1b30fbc96644c5f4211c45c9d86a030aef19ed1a8832d578e0f43bca8a916dccfdc0dcc097944ea7a30d95a2377bf192975e3b0e
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Zip_FileManager_native/Zip_FileManager_native.dclib
- SHA256 e33b0bdd32b498891d812976c81cfca963aa22c3f9c1641db0ccf39a334323d9
- MD5 b3d4b4b178a49a526e4ac2bd6f88c3a5
- SHA1 ebe09a09f14e912f9e2cb5eaf29dc6092c9005dd
- SHA512 32d466fc70051d50025b7bd3c9a57459b25309657dbd5b0adb40496e3a733dc5c3f9a651d5e2ec65aaf602bd9e82ee4b6067550fd8d8481904738236d26cc32a
- SSDEEP 12288:WWwXCLJjGTn3xZiFhu4VB4+z7EDNJnSRb4Y:WWx6bmM4VmCwNJ49
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Zip_FileManager_native/configuration.json
- SHA256 87c1dd4b56f1988886b7e7f220ad07bb165c09835136a188cac2d97ece122085
- MD5 203daa8e3feeca766198dde8d8490fdd
- SHA1 003833b339cccaba0dc5e663112045b8c7ce9069
- SHA512 a889af4bf769748ede78a985873db4f12890a28c4995b40ca3198d5b2c6a929cb7238d3e46e1fce571a0641b6468ebbfa9247061fa48ad9e670560eef0f3006a
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/plugins/Zip_FileManager_native/icon.png
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/DCRat/settings.ccdb
- SHA256 21c40cca98b825279eb521efa45e08481f9df02b0192c9543eb4d915f9988b79
- MD5 f0a12e9ea186d85e43da75ea61891856
- SHA1 4b6fb6df2c399d90f5975ef748317425f9504e9d
- SHA512 2b58fc6038e1849374fb3da8fd32b96841767de1b8274253e391cb09570a5cd6c4b704a16c0a4c83ba8d45bf271fa89105127bb404e6e8f91b83afbab7899bc4
- MD5 SHA1 SHA512
[CRACKED BY L1nc0In] NEW DCRat/Patcher/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c41bdb9ffd3c5f6e17d2382c1012d73703e035e3f1100245fdd4e08c8dc6eb5b
- MD5 2f096535c228ab0d2082adfc01678481
- SHA1 0e0dcb36aa56e7f99aa524cfb3c72e4918cc5b32
- SHA512 9f54b9e85ef70afcb36569885de73bba704a8901c8ddbb5a35de6a1921d4d42f88026aea41ed77ec7a8041ee8a04efef817deda7dea0f29a716dab7a6ea7fd9e
- SSDEEP 6144:LHNGIaxcvxT+2pEwMjbLmRlQ5+A45iziJCJP+pIoTtya:RRUQCmRw4szYCOI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
366574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\obj\Release\net40\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
352KB
Virtual Size
352KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
[CRACKED BY L1nc0In] NEW DCRat/Patcher/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Mar 8, 2023
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 13, 2021 - Oct 29, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
704578
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
681KB
Virtual Size
680KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
[CRACKED BY L1nc0In] NEW DCRat/Patcher/Patcher.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 60add3505ae3d6908981a0dedb8c26aa55916b9e8e7d833ab005a0a6f9792baa
- MD5 8a0cff97f83483817fe61727ff3de7be
- SHA1 85359a79acbd00872fce6c8905fe2d79388b7cb7
- SHA512 50c566e48e5ec4a9461e73dc38c8cff64747f5de3549cf453f77556ea3b220f33cd8eb69b62048a2f49c97c2cf574d645467caa1751eb1189c5b463779d0b417
- SSDEEP 24576:fBN/iBsNImdVKsSy2r3d9lh1dLFHBM94wrQncUtN8as1i854khm5fMLqLyLQhBbd:fBN/iBsNImdVKsSy2r3d9lh1dLFHBM9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
439784
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.L1nc0In
Size
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.L1nc0In
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.L1nc0In
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
[CRACKED BY L1nc0In] NEW DCRat/Patcher/stub.bin
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d1dc9d08082f81a4c76e560247331365439fcbe473df1bb4111d36d67086ae2d
- MD5 653f8370cf1994e4808d8524b16cb2f4
- SHA1 6c9a5a59642d65344ab4dcf1b64cba99dc1ab55c
- SHA512 bc40ed8f36d86108f3ff970f509bd00a3220003230d1e12169f6cc6a1538d3c38e89d0f2a781b90f4b56c11ffdadb3f6a30019de71791607463e412b402fecf8
- SSDEEP 6144:wOXlaYnxWKOfMQFIDAcGwpkiodLEDlnAjBMtTjlTobybugd5e0pVj9JkoRTG11sR:wukIfpkfEDlncIj4y1pRQ1O6W
- MD5 SHA1 SHA512 SSDEEP
-
DCRat payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
522206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
502KB
Virtual Size
501KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
800B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
[CRACKED BY L1nc0In] NEW DCRat/Server/Another/install.php
- SHA256 270141352aa6f5c1b7d736330d8bef51b2320f6dac7b211a593871371dbb032b
- MD5 541eb99e26aaff9b1a53e6ef979b28eb
- SHA1 38709bc03005c9be648d24ba01a503acabd0672f
- SHA512 058b1b127b848da1833c380132a673cc57fd5401d633d010628fdf5305772de8a51c753dfd8528428682b2a5b6da99fa754cb1e729a766341b35318423cbcfbb
- SSDEEP 1536:T5pDkG/CIRfvLk+fb2vKm0OtCe/nTjiBbot/ycYv/UCuD/7poj2Cx/b/qj9cF/oK:LDM2kjptGYkDZvQkCje2CjH4V07d
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/Server/VDS/VDSInstall.sh
- SHA256 e263f39b0410a963ee6735d0c9545c64df5b73f19f35aafe386078bfbad810c6
- MD5 890e4b899224bdf9b3d7e4ce4eb9d6c1
- SHA1 a1e565880a9b2f4086f0929f9257904698c854ea
- SHA512 3d3f4ffe2b7616436fcdbca24d44b0d5594cd221e1fcdaf4f797af434259a1d62e78268a888ba3735584f6cb6da702520aea8d90af53805a92490f91f0a4a9c8
- SSDEEP 96:f3ZF8THhG2Dquka3uaRiJ7PSaOkLJ9uQNH6ZkOIjcYjzUdPf7Sb:UhCfNHek3jcYj3b
- MD5 SHA1 SHA512 SSDEEP
[CRACKED BY L1nc0In] NEW DCRat/Server/VDS/install.php
- SHA256 270141352aa6f5c1b7d736330d8bef51b2320f6dac7b211a593871371dbb032b
- MD5 541eb99e26aaff9b1a53e6ef979b28eb
- SHA1 38709bc03005c9be648d24ba01a503acabd0672f
- SHA512 058b1b127b848da1833c380132a673cc57fd5401d633d010628fdf5305772de8a51c753dfd8528428682b2a5b6da99fa754cb1e729a766341b35318423cbcfbb
- SSDEEP 1536:T5pDkG/CIRfvLk+fb2vKm0OtCe/nTjiBbot/ycYv/UCuD/7poj2Cx/b/qj9cF/oK:LDM2kjptGYkDZvQkCje2CjH4V07d
- MD5 SHA1 SHA512 SSDEEP