OneCommander[.]v3[.]5[.]Keymaker-CORE[.]rar

resource
unpack001/cr-keygen.exe

OneCommander.v3.5.Keymaker-CORE.rar

SHA256 92abed1089f48cc8f44be1c1b18b9c6a85d20e33bcbe56337db7079bf2b21cc7
MD5 628346d1b37ac41f734972cd514d8745
SHA1 c33e84e622a187ff553f1829bdbd2831d2216d7d
SHA512 49352866a96cc8e290ed6451f9eb7f60536d591d96ead36d3bb36dff7746c10d083ea27ced09103b392ce2d8f14fe6ade8ec74dbfc08c438e1cfb00fe5adeb31
SSDEEP 12288:t2aMNea4Y4JWWW/QrrkiE/OD0N254Gz/7ZdeDyachMQUX0LtRUXWd:t/dVdZQODc2xARchno0LtKo
TLSH
T13CB42386341161F83312471B2B53A2D423692FA96F943EA4C4845ACFFC7553FBECE915
MD5 SHA1 SHA512 SSDEEP TLSH

Download More.url

SHA256 44bc073ba509abb1872cbf945ddeee1bff8e0b2efdf1b00bdf9fb7877f4e1cb2
MD5 90e6699cd0ed46251033133a694be27e
SHA1 6644517d68bfdddb9db07f6d6a7b9a786ba80826
SHA512 bfba0588c3affb3be0cadc0bc87cbd92843a0a32543a9994bec413921d724d0955952fa7d637aca92c4d6964e4f3d04397426e4a237d2c3454039d946c8f438d
TLSH
T15EB0129C8245819BD761D90AB0F0F9069E0DB9E008C2D4CCFA90DEDB0D840C3C949B77
MD5 SHA1 SHA512 TLSH

Join Telegram QR.png

SHA256 6410f1b81043eafddad750345986726c2ac6313d38aa7290ccfeeab93992c87f
MD5 484407264e37be1ee4266bad02a7474c
SHA1 da9b0076594a74ab9e1fdd602f6eee06f5b3202d
SHA512 3b5e84a53359f777e66259acfe188a1c68b63f667e45f31bcbfc2af70ebbf715bba811090d647c92466aab407c2fddcb03704c776ca150bdc18675d59ef4e5ec
SSDEEP 192:mSoD9woyOCALC2ZdgxP9ztSMaNc9tRIcXgs/x/dLqT8iKvhD+6XnhfU2QZLN:JityTaC0Kl+iKW1RdeT8iKpainMN
TLSH
T11642C1E1952D80AB4FE8950F90094CE031AF7FB4E18B3D7817C4277B6A64384567EC64
MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

qr https://t.me/cracksurldotcom

Join Telegram for more.url

SHA256 771846ab3f8c33f137024e6a13e5a41ac30a212a8076ca80d8cb96093a77da69
MD5 8e69ef0723269ec6a3f88b38f3d87cb6
SHA1 98e410c6fca03ab37d2e82bc103f499019d8d5b4
SHA512 63d3e6f00d44a243119624a09a4e3261fc114775a6fbf4d561e849905383a391dceb558f8606cad4f03682b78119c8b26e5c23141f22420aeb15b7e9f4e231d1
TLSH
T1B9B092AF4246828BD352D50A60B0F908985EBAB498E6D05C6648EEDA0C980D2C658A36
MD5 SHA1 SHA512 TLSH

core.nfo

SHA256 db2c03909d2e8b8c204cb5137d4ab6837c1be7af24fdb7242f0465f5de8bab6b
MD5 2704dd9f28fb38b3966eb225a23d0b91
SHA1 b38130e2413b8128897456c32a392f884ea67912
SHA512 d4d6d3eba0aa250a23d4012e6b3e9a4abdeec20c09c68f91c97cad9e11da9895ce13938bfed85fb1522ad739dc272a3a4bcc2b5d96d0b2c4ed754125b4529ed5
SSDEEP 48:Sdzay/o44OlyuxVEXjFevuPD3XdgmV7UwunrjgHKesptIil/7U6zYeTxaaO3vTL8:dn4Rcu2eQq0env4Q97LTxadLLnj9bK
TLSH
T181F1380787B8FDFE4F31A54404D11280BA97A48F27392AF1706E143B6BF757A41ADA21
MD5 SHA1 SHA512 SSDEEP TLSH

cr-keygen.exe

SHA256 65c312db371bb85e8f5e9d55c7f3d9df7e44c5956715de82260095138496da53
MD5 28dbb8f2bf8c2d79aa91deea5a3fd3a9
SHA1 a9a9b9c058e221466341976ca84ef963809362a0
SHA512 249c6f696816048e9a3c08093d0b777ab2ad5caf72cfe7151bd15798c94521b999bb3eb1de8afc4b2b9b9ad4ab7a9424017fe963d3383867f14ae8253ea92388
SSDEEP 12288:8eCsFgfz9neCQr3UISA5CxlDh86m0CedzKYa:8HsFgteCQrkISA5C7DFieMT
TLSH
T1F3B423418025CAA4FD71C63B6A40B7B86C982D175EDC40B9E3E7DD9B1943E992FB012F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

1876016

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

file_id.diz

SHA256 e14a6003d1a2451b6b95e98eebc03de96e9538051b3e355743594801823335c2
MD5 02f97005db64df27290d3fed019ae53b
SHA1 fc90463ddbb44d393ae3c38165a50f8b59cdee05
SHA512 e6c95cb4bb04ca8ab3f7de013a9d75c66cb6521af419187700d1ce214df515556a566ec6766e53261f992656533eec431551a60044b5d27bf2646192eba1f07d
TLSH
T1F4E0171A1C01E2411A19F8F05B8FFB2ED2152282D753587AB36C06B8C705BC6645F0C3
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer