FREE UID BYPASS + AIMBOT V1.0.rar
- SHA256 6f37537cd91604e2f33b76815af8572ddd428f291679f773eeb8affff5cf8551
Password
1
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
INFINITY FREE UID BYPASS V 1.0.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
INFINITY FREE UID BYPASS V 1.0.exe
Resource
win11-20260130-en
windows11-21h2-x64
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
UIDBypassDll.dll
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
UIDBypassDll.dll
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
General
- Target FREE UID BYPASS + AIMBOT V1.0.rar
- Size 5.7MB
- Sample260426-m29wfaez21
- SHA256 6f37537cd91604e2f33b76815af8572ddd428f291679f773eeb8affff5cf8551
- MD5 dbb7b4bdfc8fb28b0ddae505eea16ee7
- SHA1 47c30619f50b96ad16c850d75d4c5a152faf299d
- SHA512 42615d06e6451c7e9b49940e6d15e60e9a5d17b707d333d007927125ded8fa81de205e386311bba659e9c383d5501d0b7b4da60169f2d2cdce01ae90c6cd90b6
- SSDEEP 98304:s+B7HKzMuH54yY4PQJ96M2NapCjXm9wNIpqkHKmOFV7w6GJQpTKM6Mev:s+B7HKguHCiwVpX9wNIpqkxOLwJQpT0T
- TLSH T1AD56339763A4BDAF8EC7D08971807EF070DB1A93121A54C9076C4F9B82D9E7276B2077
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/INFINITY FREE UID BYPASS V 1.0.exe unpack001/UIDBypassDll.dll
File Explorer
-
FREE UID BYPASS + AIMBOT V1.0.rar.rar 5.7MB
-
DiscordRPC.xml.xml 132KB
-
INFINITY FREE UID BYPASS V 1.0.exe.exe 2.7MB
-
INFINITY FREE UID BYPASS V 1.0.exe.config1019B
-
INFINITY FREE UID BYPASS V 1.0.pdb293KB
-
Newtonsoft.Json.xml.xml 716KB
-
UIDBypassDll.dll.dll 13.1MB
-
imgui.ini85B
-
uids.txt26B
DiscordRPC.xml
- SHA256 097a325ddc6fee73d4d9392bcd0e15632817b9577d2b4602e48f8c899ec7a6f5
- MD5 7714d0448d087bdb26b60e38658a4379
- SHA1 6c7dc606b82fb60a7f65ddad955f0d88d8ee8921
- SHA512 f9aac8bc1568c3edaba5071acfc3c11fe0b66753e04022293ad12cc5641a9b61321a485c92f0674e70f6d811ebba7cdd7f5936b1b26d4b82e66b916048cf0d17
- SSDEEP 1536:jd7bq3WRL5iOizJIb2BxnLKolcZc+MgZwIkyvHJfC0vx1nV:jd7bq3WRL5iOi1IbqVyvEox1nV
- TLSH T17DD38816B7F05E610C820A157E54B4E4BF561C33311F262B71CD2E6EAF09983A1AFDA7
- MD5 SHA1 SHA512 SSDEEP TLSH
INFINITY FREE UID BYPASS V 1.0.exe
- SHA256 b68fbe6f99f09f039f138e0ba66c5ae3d83f0adc915e6e58670abcf372a5a7b6
- MD5 0f7d7176f916748e07e1cd6a23180532
- SHA1 9af7cc2879c812bea756099776e3b902c706db35
- SHA512 7b85a7358d824ada74030b70c6ed14e09adb35bc1da32b1ceb36ff0f2dcd4d13bf05b95acad636bf4fd846cb5862fb10de50f960de1e98810984a57c9f665b27
- SSDEEP 49152:PsRZdAp2FBZB1mFfzVb5IWc+c/JEhAKRqsBbYxwOqfzJWCkTNLI+MMsJi9ZEM:0DJZbmFbRLpcSJEsBbYxwOqICkTNLIFH
- TLSH T195D5D07461CBA411F3B9C57AC3BE7F16422C494B47B5444A3E9B08C6783BF58B89F06A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
kQ=oD K
Size
222KB
Virtual Size
221KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
kQ=oD K
Size
222KB
Virtual Size
221KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
212KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
cydwPBOq
Size
512B
Virtual Size
22B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.????
Size
512B
Virtual Size
276B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
INFINITY FREE UID BYPASS V 1.0.exe.config
- SHA256 cc317a3f2e053888f182c791e2fc0bd192b307d2b53abc5b0ffaf775b498dac3
- MD5 e94969f30e96e3c13d12b099eae92f5f
- SHA1 180e91dc377a385015728c55b900e4b2f512b4fe
- SHA512 baa8dd6f9f1a0d247cf5c73e4629574c5d108e070f8f8f55b5181e009ae14513f34af4e703b49edfc13ccd63292cb330a7f8a810a3a89e69d5b24b17520c4d7b
- TLSH T1BB11361461C47EAB16332B33DA218645DFB042A3517620A8B83D72BB8F314CA47833AA
- MD5 SHA1 SHA512 TLSH
INFINITY FREE UID BYPASS V 1.0.pdb
- SHA256 493d2d3bc0610f075d96bb23efc7cf5e003e8b37adec7934b81d15913a69f1ca
- MD5 9bdb9bf20532d064e52450e509156b3d
- SHA1 b8158bb8bdf2d653caeb1268c0e03cda72516742
- SHA512 300fd46a2394ad8374e2efe84b5c8ab2801795098c29b1e08f57a69830ffd56c226690b92830211e09f200e7297f98d910ee648db32e454c7f6bc1892004acd9
- SSDEEP 6144:8r2HiBjZE2Z+kmyr7g3r1iC4TeoDY9edwYr6+8:xcZ/7Hg3hic
- TLSH T1A554B217BB85C932C465C6BC5AAB4F3D4238E5845F8397DF63A4B06C3EE23562E86350
- MD5 SHA1 SHA512 SSDEEP TLSH
Newtonsoft.Json.xml
- SHA256 a9c6be122c118de22c72f9f9e5d9ef787492d24ad91d2c9c23b8d1f0e5f2ef3c
- MD5 93b7c648a3d6ae4a25fb115482afcf2c
- SHA1 3acedace379b7a9b889c7d4e25b537eb5453bff7
- SHA512 12d052df880c8b7b4a3b089ee289da37d10bb95dcdecaa2affa5c6acf0dfc81c1a8dedc911a37c5ae21d51f657a92bf4979582a7c295393a09c99d2eab8db993
- SSDEEP 6144:XqqU+kykVk5aG0rH3jGHdl0/IVEIHXpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO180:DUp
- TLSH T1CEF4DF2577C4CB220C7A012A4D1CF0C5FF205AB316192CA635CC5DDB9F7AEA252FB6A5
- MD5 SHA1 SHA512 SSDEEP TLSH
UIDBypassDll.dll
- IMPHASH dcb41b99bb6f6f37d54d74dafd377aca
- SHA256 de99637362e03d353e0f411dad482ce6c3dcb0b640e1c9baa28bc5d18b60c221
- MD5 e8bdfe9777fec4363053446e34e2f54c
- SHA1 6ce561347c7a12735a0aa47ddc9335481eb8d63b
- SHA512 9c58b8d7342b18173578f6a6f0b2b93afd849d7fc1f1022d8c16135a7ad48e1021386dcdeebf3096e02f6031e0f926926c6431f66707843c0657b868b549ec00
- SSDEEP 196608:8ofXpkKUwhgqtj5hTmWl3FnULnxQOd+YTHu+E2R:8oyKxhftj5hTmWl3FnUbxQOg+Op2R
- TLSH T1AAD68D5550B8E1ECE67BC07CD3830756EB69719403252BFB21B5CAF01BA2ED52B38762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1
Minor OS version
0
Major OS version
4
Entry point
11471912
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
UIDBypassDll.pdb
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
CloseHandle
CompareStringW
CreateFileW
CreateSemaphoreA
CreateThread
DecodePointer
DeleteCriticalSection
DeleteFileW
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeThread
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetLogicalProcessorInformation
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LocalFree
MoveFileExW
MultiByteToWideChar
OutputDebugStringA
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleA
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RtlCaptureContext
RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetEndOfFile
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SleepEx
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
advapi32
CryptAcquireContextW
CryptCreateHash
CryptDecrypt
CryptDestroyHash
CryptDestroyKey
CryptEncrypt
CryptEnumProvidersW
CryptExportKey
CryptGenRandom
CryptGetHashParam
CryptGetProvParam
CryptGetUserKey
CryptHashData
CryptImportKey
CryptReleaseContext
CryptSetHashParam
CryptSignHashW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
user32
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
ws2_32
WSACleanup
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAIoctl
WSAResetEvent
WSASetLastError
WSAStartup
WSAWaitForMultipleEvents
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
gethostname
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
listen
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
iphlpapi
if_nametoindex
crypt32
CertAddCertificateContextToStore
CertCloseStore
CertCreateCertificateChainEngine
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFindExtension
CertFreeCRLContext
CertFreeCTLContext
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertGetCertificateChain
CertGetCertificateContextProperty
CertGetNameStringW
CertOpenStore
CertOpenSystemStoreW
CryptDecodeObjectEx
CryptQueryObject
CryptStringToBinaryW
PFXImportCertStore
secur32
InitSecurityInterfaceW
bcrypt
BCryptGenRandom
dbghelp
SymFromAddr
Name
.text
Size
11.2MB
Virtual Size
11.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
46KB
Virtual Size
194KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
232KB
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
401B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
imgui.ini
- SHA256 aca4d55034a29126bb5301eec36014557abe3db40f8a016d04734a44dbd52c7a
- MD5 eed11a95f1c2d500d24bd5b03f968fb4
- SHA1 4bd773fdac3d694fec668159ffd7bd026c5db740
- SHA512 318b9057e5e22f5f5e0eba5995e5789ba7456ed8b252775a155617d5020aeab790675743a0c7ec4626fbd291bb0fa38a52c9f323c29087a2a1f4f946e2564036
- TLSH T1A7A024013315571D11F3500440FCC7CC30440F447040317C1DD0100C7C13403344D4CC
- MD5 SHA1 SHA512 TLSH
uids.txt
- SHA256 3f5367f013211e7946c929fe18bbc974d8faf9b01aca05089724c2ed32489580
- MD5 97594a20f27d53a8a8874ebd50743010
- SHA1 9f407e221f7be83d4161f8c4f61ef92baac7d445
- SHA512 d871e21787e12e2669c9c126bff0b01797641753e4685d694383ada44b202c9417a9edaab099f408d6471107ddbf0aa5d673c20a48e6ab0aa8ba8a3875ba9798
- MD5 SHA1 SHA512