KeyAuth 1.x UPDATED.rar
- SHA256 5fc0f34f7c5f23ffa56c061be38d124d643cd41584775f11a8ff2bb5685d9c0c
Overview
overview
8Static
static
3KeyAuth 1....er.exe
windows10-2004-x64
8KeyAuth 1....er.exe
windows11-21h2-x64
1KeyAuth 1.....5.dll
windows10-2004-x64
1KeyAuth 1.....5.dll
windows11-21h2-x64
1KeyAuth 1....64.exe
windows10-2004-x64
1KeyAuth 1....64.exe
windows11-21h2-x64
1KeyAuth 1....86.exe
windows10-2004-x64
3KeyAuth 1....86.exe
windows11-21h2-x64
3KeyAuth 1.....1.exe
windows10-2004-x64
1KeyAuth 1.....1.exe
windows11-21h2-x64
1KeyAuth 1.....1.exe
windows10-2004-x64
1KeyAuth 1.....1.exe
windows11-21h2-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KeyAuth 1.x UPDATED/NEW KeyAuth/BloodStrikeLauncher.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
KeyAuth 1.x UPDATED/NEW KeyAuth/BloodStrikeLauncher.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
KeyAuth 1.x UPDATED/NEW KeyAuth/KeyAuth_1.3_Patcher_and_Dumper_v1.5.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
KeyAuth 1.x UPDATED/NEW KeyAuth/KeyAuth_1.3_Patcher_and_Dumper_v1.5.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
KeyAuth 1.x UPDATED/NEW KeyAuth/Scylla_x64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
KeyAuth 1.x UPDATED/NEW KeyAuth/Scylla_x64.exe
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
KeyAuth 1.x UPDATED/NEW KeyAuth/Scylla_x86.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
KeyAuth 1.x UPDATED/NEW KeyAuth/Scylla_x86.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
KeyAuth 1.x UPDATED/OLD KeyAuth/KA-LicenseKey_x86_x64_v1.1.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
KeyAuth 1.x UPDATED/OLD KeyAuth/KA-LicenseKey_x86_x64_v1.1.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
KeyAuth 1.x UPDATED/OLD KeyAuth/KA-MemIntegrity_x86_x64_v1.1.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
KeyAuth 1.x UPDATED/OLD KeyAuth/KA-MemIntegrity_x86_x64_v1.1.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
General
- Target KeyAuth 1.x UPDATED.rar
- Size 6.7MB
- Sample260524-xd2v2agy8v
- SHA256 5fc0f34f7c5f23ffa56c061be38d124d643cd41584775f11a8ff2bb5685d9c0c
- MD5 dedda53a517c4398266773f07c78491c
- SHA1 a94be4fec5ed90b7af37ff0130a73fad0442cb6b
- SHA512 21d55dc738b42438049bacd7e3019f2b388fa7386d8204a174d2d94809e078d7e71a3f9d081d27f98d55141756e68d247fb40021ab90d6fa819afe3ff6840f5e
- SSDEEP 196608:kSFOd1BUhkm4VQTRqeUnT23HhdyVqcapsv:BOd1aD42TRpF3HhYZap8
- TLSH T1976633122B32FFF4D4904794D96F255CA233EBF69C42D873D8FC68883986A454E370A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/KeyAuth 1.x UPDATED/NEW KeyAuth/BloodStrikeLauncher.exe unpack001/KeyAuth 1.x UPDATED/NEW KeyAuth/KeyAuth_1.3_Patcher_and_Dumper_v1.5.dll unpack001/KeyAuth 1.x UPDATED/NEW KeyAuth/Scylla_x64.exe unpack001/KeyAuth 1.x UPDATED/NEW KeyAuth/Scylla_x86.exe unpack001/KeyAuth 1.x UPDATED/OLD KeyAuth/KA-LicenseKey_x86_x64_v1.1.exe unpack001/KeyAuth 1.x UPDATED/OLD KeyAuth/KA-MemIntegrity_x86_x64_v1.1.exe
File Explorer
-
KeyAuth 1.x UPDATED.rar.rar 6.7MB
-
KeyAuth 1.x UPDATED/NEW KeyAuth/BloodStrikeLauncher.exe.exe 1.3MB
-
KeyAuth 1.x UPDATED/NEW KeyAuth/KeyAuth_1.3_Patcher_and_Dumper_v1.5.dll.dll 865KB
-
KeyAuth 1.x UPDATED/NEW KeyAuth/Scylla_x64.exe.exe 528KB
-
KeyAuth 1.x UPDATED/NEW KeyAuth/Scylla_x86.exe.exe 447KB
-
KeyAuth 1.x UPDATED/OLD KeyAuth/KA-LicenseKey_x86_x64_v1.1.exe.exe 5.3MB
-
KeyAuth 1.x UPDATED/OLD KeyAuth/KA-MemIntegrity_x86_x64_v1.1.exe.exe 351KB
-
KeyAuth 1.x UPDATED/OLD KeyAuth/TUTORIAL.txt261B
-
KeyAuth 1.x UPDATED/TUTORIAL.mp42.9MB
-
KeyAuth 1.x UPDATED/vacban.wtf.bin34B
KeyAuth 1.x UPDATED/NEW KeyAuth/BloodStrikeLauncher.exe
- IMPHASH bb3ac2c21e02c68abcad237dc3fa6d00
- SHA256 acf5d89583d2b5a167899ef5730058002c7c7d43d4abf8d4c6bdb668a0817155
- MD5 80eb27ba4e3edf6592596ee4f4e81a16
- SHA1 40a186264a0bacd1bb1faf7318eb154c9d72b175
- SHA512 41f49c37683020c9f0d361baa173f71089db960b52d8ad4e916483ac9e95be740f3c837465270bc62ab2f3cb482b4efc30e401d489bc4d0f9f6c2bce6447a59b
- SSDEEP 24576:8JB+AR1w7JxLPsbJ1/5HQ2YWzxYlocYwDO/SiwniODPbO+8R1w7J+:8JdR1wVFsdXtd8M2Cwnx7bYR1wV+
- TLSH T11D55BF05B2F545EED0B7827999A2EB2BF77174041B30C7CB57A006A92F72BD42DBA311
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
72368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
__p___argc
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_errno
_initialize_onexit_table
abort
_c_exit
_register_thread_local_exe_atexit_callback
terminate
__p___wargv
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
_set_fmode
fputwc
__p__commode
fputws
_wfsopen
fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
setvbuf
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
wcsncmp
toupper
strcmp
strlen
_wcsdup
wcsnlen
strcpy_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
wcsftime
_gmtime64_s
_time64
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
setlocale
_unlock_locales
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
213KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=87, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=204, id=1, productName=Unmarked objects,
count=10, id=265, version=35220,
count=1, id=258, version=35220,
KeyAuth 1.x UPDATED/NEW KeyAuth/KeyAuth_1.3_Patcher_and_Dumper_v1.5.dll
- IMPHASH db7db5be19c13b3a9fd748cfa6c0798b
- SHA256 529706eec3f50d2c1b9dfb85b2f007710f87294996a4a38d5bfa16224adc88e9
- MD5 db1c9c995ff0e089e31d331547bf3d9e
- SHA1 2bd3fd83054b32d8f3da1c6ec51d004c4eebbba6
- SHA512 c8ea3d40c0c60506d3456b3e6604f73b79f79addf5b8c0c115c6d0841533696850fb888d8dc0dc64648bf33fcd041de377997688cd7f1565d14227299e8d6126
- SSDEEP 24576:xhiTtH3iDdf1wTxKnq76hy4H/gXIrAtjMDDK:mtH3iDduKA6d44rAtjMDDK
- TLSH T18515CF1E2A856079EA638436C5C60351AE32B1B947306EFF01BEC3355E336E51FB93A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
552704
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateFileW
CreateThread
CreateToolhelp32Snapshot
DecodePointer
DeleteCriticalSection
DisableThreadLibraryCalls
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushInstructionCache
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
OpenThread
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetThreadContext
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SuspendThread
TerminateProcess
Thread32First
Thread32Next
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
Name
.text
Size
680KB
Virtual Size
680KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
80KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gxfg
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.retplne
Size
512B
Virtual Size
140B
Characteristics
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
424B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KeyAuth 1.x UPDATED/NEW KeyAuth/Scylla_x64.exe
- IMPHASH e4c625b56e8e83cb49ce89109db90c97
- SHA256 e6b99c1d90533d35db800c4cc695fab29f279829607706c258b8486740556e62
- MD5 d3d41a31d07b3c4ab4b90bc87921fc07
- SHA1 ba718a897c1ae7259b72b2d8b038c3e4c55b94a7
- SHA512 26779a07b649cffe884faeb8ce21b7d61ca611d55410d4caec1519420c1954c0c53d97959d0a583e8e9f3c62ad2b32023d900e5f80da617dc5e970bfd0f07c37
- SSDEEP 6144:6d9KNvZ68asTMq/SkEIuAHPqZrcRPJX7X89CZvSyhEzxZjTxOrQk:QINvjBtEIucPAcvKCgXjN
- TLSH T175B47C1673F844E8E1778238CA63CA17EB7274560760CBDF1694D67A6F23AD05E39B20
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
229664
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
LoadLibraryW
VirtualAllocEx
FreeLibrary
CreateRemoteThread
VirtualFreeEx
CreateFileMappingW
MapViewOfFile
K32GetMappedFileNameW
MultiByteToWideChar
SizeofResource
SetLastError
EnterCriticalSection
GetCurrentProcess
LeaveCriticalSection
GetCurrentThreadId
GetVersion
LoadResource
FindResourceW
lstrcmpiW
LoadLibraryExW
SetUnhandledExceptionFilter
CreateFileW
ReadFile
SetFilePointer
SetEndOfFile
FindFirstFileW
FindNextFileW
FindClose
GetFileSizeEx
WriteFile
VirtualProtectEx
ReadProcessMemory
CopyFileW
K32EnumProcessModules
K32GetProcessImageFileNameW
WideCharToMultiByte
GetVersionExW
GetSystemInfo
WriteConsoleW
GetConsoleOutputCP
FlushFileBuffers
GetStringTypeW
SetStdHandle
WritePrivateProfileStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
CloseHandle
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
VirtualQueryEx
GetModuleHandleW
GetProcessHeap
GetProcAddress
HeapAlloc
HeapReAlloc
LoadLibraryA
HeapSize
GetModuleHandleA
UnmapViewOfFile
HeapFree
VerifyVersionInfoW
VerSetConditionMask
DeleteCriticalSection
DecodePointer
RaiseException
GetExitCodeThread
ResumeThread
WaitForSingleObject
SetThreadPriority
WriteProcessMemory
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
K32GetModuleFileNameExW
QueryDosDeviceW
GetPrivateProfileStringW
GetModuleFileNameW
GetCPInfo
GetPrivateProfileIntW
GetLastError
LCMapStringW
InitializeCriticalSectionEx
user32
CreatePopupMenu
LoadAcceleratorsW
GetActiveWindow
ScreenToClient
InflateRect
GetMenu
GetParent
GetDlgItem
GetClientRect
MapWindowPoints
GetMonitorInfoW
SetWindowTextW
GetMessagePos
GetKeyState
AdjustWindowRectEx
GetWindowTextLengthW
SetDlgItemTextW
UpdateWindow
IsDialogMessageW
GetSysColor
IntersectRect
TranslateAcceleratorW
LoadIconW
UnregisterClassW
EndDialog
DragDetect
SetCapture
AppendMenuW
PostQuitMessage
DialogBoxParamW
ReleaseCapture
ReleaseDC
EnableWindow
GetMessageW
CreateDialogParamW
DispatchMessageW
DestroyAcceleratorTable
PeekMessageW
CharNextW
TranslateMessage
EnableMenuItem
GetDC
DestroyIcon
GetDesktopWindow
LoadImageW
SetFocus
DefWindowProcW
LoadMenuW
CallWindowProcW
MonitorFromPoint
IsWindowVisible
MessageBoxW
SetWindowLongPtrW
MessageBeep
GetWindowLongPtrW
TrackPopupMenu
GetSubMenu
ShowWindow
IsWindow
OpenClipboard
RedrawWindow
GetDlgCtrlID
ClientToScreen
CloseClipboard
EmptyClipboard
DestroyMenu
GetClipboardData
SetClipboardData
SetWindowLongW
IsClipboardFormatAvailable
InvalidateRect
GetWindowTextW
GetWindowLongW
GetWindow
GetWindowRect
DestroyWindow
SetWindowPos
MonitorFromWindow
CreateWindowExW
SendMessageW
gdi32
SelectObject
PatBlt
GetClipBox
CreateRectRgnIndirect
CreatePatternBrush
CreateRectRgn
SelectClipRgn
CreateBitmap
CombineRgn
GetDeviceCaps
GetObjectW
DeleteObject
CreateFontIndirectW
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegCloseKey
LookupPrivilegeValueW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
AdjustTokenPrivileges
OpenProcessToken
shell32
ShellExecuteW
ole32
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoInitialize
CoTaskMemRealloc
oleaut32
VarUI4FromStr
shlwapi
PathAppendW
PathRemoveFileSpecW
comctl32
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
imagehlp
CheckSumMappedFile
Name
.text
Size
324KB
Virtual Size
324KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
109KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
35KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=259, version=27412,
count=161, id=261, version=27412,
count=18, id=260, version=28920,
count=9, id=259, version=28920,
count=53, id=261, version=28920,
count=13, id=260, version=27412,
count=23, id=257, version=27412,
count=268, id=1, productName=Unmarked objects,
count=9, id=260, productName=VS2019 v16.7.1 build 29111, version=29111,
count=36, id=265, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
KeyAuth 1.x UPDATED/NEW KeyAuth/Scylla_x86.exe
- IMPHASH 4ded17b10b4d43f208af9611e140758f
- SHA256 9e201ab72c1eb90bcd8e755e3f26ea5b2adffdc7fb67961a638d0a2167434696
- MD5 35cef0926b285bf88b08e445f4d7436e
- SHA1 0031751deaadbbef73754f085a6ebb7cb6dcf5d1
- SHA512 270ebe2fe559782232842cf994829a3042f960a3f7b769a9ce4247a549d5facbaa65f7291aeb9b6e69ffd5e901610f149a7a9d977d39a9f9a4cd1fd968ff3e56
- SSDEEP 12288:jbqFD/dlOITq/3/Z0GIF27sKA72TALaXmljfuUdr1mYdEE:jITU4u1DGaXcPZ
- TLSH T111A48E10BB82E071E5F206705DB9CBB6593DBA340B3186CB73C41A7E6E246D25F31B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
194856
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
LoadLibraryW
VirtualAllocEx
FreeLibrary
CreateRemoteThread
VirtualFreeEx
CreateFileMappingW
MapViewOfFile
K32GetMappedFileNameW
MultiByteToWideChar
SizeofResource
SetLastError
EnterCriticalSection
GetCurrentProcess
LeaveCriticalSection
GetCurrentThreadId
GetVersion
LoadResource
FindResourceW
lstrcmpiW
LoadLibraryExW
SetUnhandledExceptionFilter
CreateFileW
ReadFile
SetFilePointer
SetEndOfFile
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
GetFileSizeEx
WriteFile
VirtualProtectEx
ReadProcessMemory
CopyFileW
K32EnumProcessModules
K32GetProcessImageFileNameW
WideCharToMultiByte
GetVersionExW
GetSystemInfo
GetConsoleOutputCP
FlushFileBuffers
GetStringTypeW
SetStdHandle
CloseHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
CreateEventW
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
WriteConsoleW
OutputDebugStringW
IsDebuggerPresent
GetExitCodeThread
ResumeThread
WaitForSingleObject
SetThreadPriority
WriteProcessMemory
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
K32GetModuleFileNameExW
QueryDosDeviceW
GetPrivateProfileStringW
GetModuleFileNameW
GetPrivateProfileIntW
WritePrivateProfileStringW
VirtualQueryEx
GetModuleHandleW
GetProcessHeap
GetProcAddress
HeapAlloc
HeapReAlloc
LoadLibraryA
HeapSize
GetModuleHandleA
UnmapViewOfFile
HeapFree
VerifyVersionInfoW
VerSetConditionMask
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
user32
CreatePopupMenu
LoadAcceleratorsW
GetActiveWindow
IsDialogMessageW
GetSysColor
IntersectRect
ScreenToClient
InflateRect
GetMenu
GetParent
GetDlgItem
GetClientRect
MapWindowPoints
GetMonitorInfoW
SetWindowTextW
GetMessagePos
GetKeyState
AdjustWindowRectEx
GetWindowTextLengthW
SetDlgItemTextW
TranslateMessage
TranslateAcceleratorW
LoadIconW
DragDetect
SetCapture
AppendMenuW
UnregisterClassW
EndDialog
PostQuitMessage
EnableMenuItem
ReleaseCapture
ReleaseDC
EnableWindow
GetMessageW
CreateDialogParamW
DispatchMessageW
DestroyAcceleratorTable
PeekMessageW
CharNextW
DialogBoxParamW
UpdateWindow
GetDC
DestroyIcon
GetDesktopWindow
LoadImageW
SetFocus
DefWindowProcW
LoadMenuW
CallWindowProcW
MonitorFromPoint
IsWindowVisible
MessageBoxW
MessageBeep
TrackPopupMenu
GetSubMenu
ShowWindow
IsWindow
OpenClipboard
RedrawWindow
GetDlgCtrlID
ClientToScreen
CloseClipboard
EmptyClipboard
DestroyMenu
GetClipboardData
SetClipboardData
SetWindowLongW
IsClipboardFormatAvailable
InvalidateRect
GetWindowTextW
GetWindowLongW
GetWindow
GetWindowRect
DestroyWindow
SetWindowPos
MonitorFromWindow
CreateWindowExW
SendMessageW
gdi32
CreateFontIndirectW
DeleteObject
GetObjectW
GetDeviceCaps
CombineRgn
CreateBitmap
SelectClipRgn
CreateRectRgn
CreatePatternBrush
CreateRectRgnIndirect
GetClipBox
PatBlt
SelectObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
RegOpenKeyExW
shell32
ShellExecuteW
ole32
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoInitialize
CoTaskMemRealloc
oleaut32
VarUI4FromStr
shlwapi
PathRemoveFileSpecW
PathAppendW
comctl32
ImageList_Create
ImageList_Destroy
InitCommonControlsEx
ImageList_ReplaceIcon
imagehlp
CheckSumMappedFile
Name
.text
Size
285KB
Virtual Size
284KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
34KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=27412,
count=164, id=261, version=27412,
count=19, id=260, version=28920,
count=20, id=259, version=28920,
count=52, id=261, version=28920,
count=19, id=260, version=27412,
count=23, id=257, version=27412,
count=261, id=1, productName=Unmarked objects,
count=9, id=260, productName=VS2019 v16.7.1 build 29111, version=29111,
count=36, id=265, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
KeyAuth 1.x UPDATED/OLD KeyAuth/KA-LicenseKey_x86_x64_v1.1.exe
- IMPHASH b8b7a1e71223303997c67e68245a05ef
- SHA256 93679af51f96edfa02cabea6801aba4484a90449745e2aa78afbd3e13fc1e070
- MD5 efab4965da18f638ba67ece790fded62
- SHA1 27687605909f5a885d78268a5fe0112723049581
- SHA512 66e86dca1427245f6ea454287012ece56d44315310b531dd625c2336b26ba4bef2e9f0c8c70649f7e8ec3c3181ed5080c0e72833ea9b43bd742bdeb08b2691dd
- SSDEEP 98304:t287e9Cg7HpxtbymElTE89gcTaqNTP3f8aPWIKz86PB3/dnDc5Fy/OIkvU:887ejpbyVlbD/evz8cxaFePks
- TLSH T1194618FA61B62002D94FC5B2EF3D86EEF655E4C4C79D63651234EF48002B5A9C6C2E93
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
46608
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
SetConsoleTitleA
GetCurrentProcess
GetStdHandle
OpenProcess
CreateToolhelp32Snapshot
Sleep
Process32NextW
Process32FirstW
CloseHandle
GetConsoleWindow
SetConsoleTextAttribute
lstrcmpiW
ReadProcessMemory
Module32FirstW
Module32NextW
WriteConsoleW
CreateFileW
HeapSize
HeapReAlloc
ReadConsoleW
SetFilePointerEx
VirtualProtectEx
SetConsoleOutputCP
WriteProcessMemory
GetFileSizeEx
ReadFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
RtlUnwind
user32
GetDesktopWindow
GetWindowLongW
GetWindowRect
SetWindowPos
SetWindowLongW
advapi32
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
winmm
PlaySoundA
Name
.text
Size
208KB
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4.9MB
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
100KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=172, id=261, version=30795,
count=16, id=260, version=30795,
count=10, id=259, version=33808,
count=16, id=260, version=33808,
count=83, id=261, version=33808,
count=9, id=257, version=30795,
count=122, id=1, productName=Unmarked objects,
count=4, id=265, version=34120,
count=1, id=255, version=34120,
count=1, id=151,
count=1, id=258, version=34120,
KeyAuth 1.x UPDATED/OLD KeyAuth/KA-MemIntegrity_x86_x64_v1.1.exe
- IMPHASH 2129c4996706aa28ed119b21b777f440
- SHA256 b0080c00e9fbe13df87806bd20826eb9735a8b67f3f6aae58b3b370ed381003c
- MD5 877a111203c6c66509c6a946822050aa
- SHA1 bb88e7134729d0fa32335a573881f0bc73c298fe
- SHA512 2723aaa1c12e7c64617da1a543c22f7a92a7df42cd825b78585711aaa650b330bfe75716fd5924e1b5b3d17ece2e6c9c2d69641ae1cc2b5e4889eff8cbef97a7
- SSDEEP 3072:v+iP3g1kBnFMYuOiFUlTRqg2VeHeKj6zJW9HTfYCf0ctQ46YLQhruyF0gXgv:v+tkFMYViFUlTRzye8NWpBYRwv
- TLSH T155745B01F6806DE4EA6342394711F6B9D9A37C654370F90BC3A35F8B4ED7AC10978E6A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
33568
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetStdHandle
Thread32Next
Thread32First
LocalAlloc
SuspendThread
GetModuleHandleA
CreateToolhelp32Snapshot
Sleep
GetLastError
Process32Next
CloseHandle
GetCurrentProcess
LocalFree
GetConsoleWindow
lstrcmpiA
SetConsoleOutputCP
OpenThread
WriteConsoleW
CreateFileW
HeapSize
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
SetConsoleTitleA
SetConsoleTextAttribute
GetProcAddress
Process32First
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
RtlUnwind
user32
SetWindowLongA
GetWindowLongA
GetDesktopWindow
SetWindowPos
GetWindowRect
advapi32
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
Name
.text
Size
168KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
65KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
100KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=170, id=261, version=30795,
count=16, id=260, version=30795,
count=10, id=259, version=33808,
count=16, id=260, version=33808,
count=81, id=261, version=33808,
count=7, id=257, version=30795,
count=120, id=1, productName=Unmarked objects,
count=1, id=265, version=34120,
count=1, id=255, version=34120,
count=1, id=151,
count=1, id=258, version=34120,
KeyAuth 1.x UPDATED/OLD KeyAuth/TUTORIAL.txt
- SHA256 d434c8c67d64cafb64f6f22b9c47abb41c4c2f6b80ebfc1af9e19b3b70416f0e
- MD5 9dab0aff498ee916d2f1d9e74523fc3c
- SHA1 1e2ffd3ca26a5b8172662ba5f7ef7266513d1a5a
- SHA512 b93fb0f96376f02988369cb5ff0782d3e60de77a8cdf9fcbf7dbce778f800526f0f0b45bb9ddbd1635fc2855d245308fbb8cfc0270a154278c2e09a105c56610
- TLSH T1AFD05EBA6EDF827210D04060DA0DE8870302842A058F0522B9AC802DB2FB1AB77E05CD
- MD5 SHA1 SHA512 TLSH
KeyAuth 1.x UPDATED/TUTORIAL.mp4
- SHA256 61b101eda49033d1b4c77ce7a796a6ec814110c4587c4fe7a13e89292619c917
- MD5 6ad6fe5c5ed3a09f285fde3d8e7b7bf1
- SHA1 e46a7beff013d994855daf5ded1d67f43ad8c026
- SHA512 ec986c06c6ff279063c0cb6fdf6eee336e040178fd143fea0be99456de23ff17ce6c8d65c10e16e827f5941fd0823a2a4e25d9b04d802328a92969b74f5b0e45
- SSDEEP 49152:ZgNmSA0gInoBtALaMWDgy46UiFS9GYf/asuEZAi1t0ncOA4wWo6etGzQVrTbQIwO:Z0mSA9InDaMWDgyzaDAiHMvApWoxbtT1
- TLSH T1F2E5238D0FC3D616CC755130D8F277127BB2E4B402AA53CFCA4DD6A5AD973A2AD812D2
- MD5 SHA1 SHA512 SSDEEP TLSH
KeyAuth 1.x UPDATED/vacban.wtf.bin
- SHA256 49f65d3a736b8a335051c8c8a2d8689631356c371e2391e474f80bf2cce937c0
- MD5 70b7948d5083dfad8a3cd974a7989a4e
- SHA1 3284e8ed8f669f8178989c9253fa8b36ccfc2f89
- SHA512 a8aa3725a45767a6bd8acb426826748726adc7eae66711753205952ecf45f426a413917459df4e1ef9acff5707a6ec3f6e3832d624d6e19f368d0a72a76ba24b
- MD5 SHA1 SHA512