Hostile 92% windows Download

hpware-free (1).exe

Game cheat injector with AV evasion

Embedded resource-backed remote-thread injectorDefender exclusion addition command
SHA-256a8ba71e10cda46a459a4a1acb28d2fb7549c2c1f5638acd4e441345dec45500d

Evidence

Windows AppData executable path 0x41c8–0x4498
⋯22 more rows
0x43286b006e006900660065002e0065007800k.n.i.f.e...e.x.
0x4338650000000000000025004c004f004300e.......%.L.O.C.
0x434841004c00410050005000440041005400A.L.A.P.P.D.A.T.
0x4358410025005c00500072006f0067007200A.%.\.P.r.o.g.r.
0x436861006d0073005c007300740061006e00a.m.s.\.s.t.a.n.
0x437864006b006e006900660065005c007300d.k.n.i.f.e.\.s.
0x4388740061006e0064006b006e0069006600t.a.n.d.k.n.i.f.
0x439865002e00650078006500000000000000e...e.x.e.......
0x43a800000000000000002500550053004500........%.U.S.E.
0x43b85200500052004f00460049004c004500R.P.R.O.F.I.L.E.
0x43c825005c004400650073006b0074006f00%.\.D.e.s.k.t.o.
0x43d870005c007300740061006e0064006b00p.\.s.t.a.n.d.k.
0x43e86e006900660065002e00650078006500n.i.f.e...e.x.e.
0x43f800000000000000002500550053004500........%.U.S.E.
0x44085200500052004f00460049004c004500R.P.R.O.F.I.L.E.
0x441825005c0044006f0077006e006c006f00%.\.D.o.w.n.l.o.
0x44286100640073005c007300740061006e00a.d.s.\.s.t.a.n.
⋯7 more rows
Defender exclusion addition command 0x44b0–0x46f0
⋯3 more rows
0x44e02f006800700077006100720065000000/.h.p.w.a.r.e...
0x44f0680074007400700073003a002f002f00h.t.t.p.s.:././.
0x450074002e006d0065002f00680070007700t...m.e./.h.p.w.
0x451061007200650000006f00700065006e00a.r.e...o.p.e.n.
0x4520000000000000000053006f0066007400........S.o.f.t.
0x453077006100720065005c00680070007700w.a.r.e.\.h.p.w.
0x454061007200650000000000000000000000a.r.e...........
0x455070006f00770065007200730068006500p.o.w.e.r.s.h.e.
0x45606c006c002e0065007800650020002d00l.l...e.x.e. .-.
0x457043006f006d006d0061006e0064002000C.o.m.m.a.n.d. .
0x45804100640064002d004d00700050007200A.d.d.-.M.p.P.r.
0x4590650066006500720065006e0063006500e.f.e.r.e.n.c.e.
⋯8 more rows
0x462072006500270020002d0046006f007200r.e.'. .-.F.o.r.
0x4630630065000000000070006f0077006500c.e.....p.o.w.e.
0x464072007300680065006c006c002e006500r.s.h.e.l.l...e.
0x46507800650000000000720075006e006100x.e.....r.u.n.a.
0x466073000000000000006800700077006100s.......h.p.w.a.
⋯9 more rows
Embedded absolute PDB path 0x4b48–0x4c48
⋯3 more rows
0x4b7805a25b41924b96eb11c9dde623000000..[A.K......#...
0x4b88433a5c55736572735c64697665726e61C:\Users\diverna
0x4b986e745c736f757263655c7265706f735cnt\source\repos\
0x4ba8696e6a6563746f725c7836345c52656cinjector\x64\Rel
0x4bb8656173655c696e6a6563746f722e7064ease\injector.pd
0x4bc862000000000000002800000028000000b.......(...(...
0x4bd802000000260000004743544c00100000....&...GCTL....
⋯7 more rows
Embedded resource-backed remote-thread injector 0x4fd0–0x52b0
⋯5 more rows
0x5020f063000021000000601500009e150000.c..!...`.......
0x5030f063000019300d0022780a001e641f00.c...0.."x...d..
0x50401e341e001e01160013f011e00fd00d70.4.............p
0x50500c500000c042000090000000192e0b00.P...B..........
0x506020780b0018342000180118000cf00ae0 x...4 .........
0x50700870076006500000c0420000a8000000.p.`.P...B......
0x5080192908001801830009e007c005700460.)...........p.`
0x509003300250c0420000c0030000211f0600.0.P.B......!...
0x50a01f683f0014f4810008d48200301e0000.h?.........0...
0x50b0e11e0000806400002111040011883d00.....d..!.....=.
0x50c008783e00e11e0000001f00009c640000.x>..........d..
0x50d02100020000883d00e11e0000001f0000!.....=.........
0x50e09c64000021000000301e0000e11e0000.d..!...0.......
0x50f080640000192c09001b34e6001b01de00.d...,...4......
0x51000cf00ac00870076006500000c0420000.....p.`.P...B..
0x5110e00600002108020008e4e500202b0000....!....... +..
0x5120a52b0000f464000021000000202b0000.+...d..!... +..
0x5130a52b0000f4640000010d06000d340b00.+...d.......4..
0x51400d3209e0077006502105020005640a00.2...p.P!....d..
0x5150402f0000872f00003865000021000000@/.../..8e..!...
0x5160402f0000872f00003865000021000200@/.../..8e..!...
0x517000640a00402f0000872f000038650000.d..@/.../..8e..
0x5180191b06000c340e000c92087007600650.....4.....p.`.P
0x5190c04200004000000019250a0016541600.B..@....%...T..
0x51a01634150016d212f010e00ec00c700b60.4...........p.`
0x51b0b0440000bc6500006a00000028c56500.D...e..j...(.e.
0x51c000cc650000020a20340000a00ab10300..e.... 4.......
0x51d08e02790400ca02180000000000000000..y.............
0x51e001000000090401000422000016420000........."...B..
0x51f00100000067370000ea37000080450000....g7...7...E..
0x5200ea3700000102010002500000090a0400.7.......P......
⋯11 more rows
Remote-thread DLL injection API chain with process enumeration 0x59a4–0x5c04
⋯5 more rows
0x59f4696e67735700a1024765744d6f64756cingsW...GetModul
0x5a046546696c654e616d6557000029034765eFileNameW..).Ge
0x5a147454656d7050617468570000e6004372tTempPathW....Cr
⋯3 more rows
0x5a543332536e617073686f740000c805536c32Snapshot....Sl
0x5a6465657000610450726f6365737333324eeep.a.Process32N
0x5a746578745700000e044c6f636b5265736fextW....LockReso
0x5a847572636500005f0450726f6365737333urce.._.Process3
0x5a9432466972737457009d00436c6f7365482FirstW...CloseH
0x5aa4616e646c6500fa034c6f61645265736fandle...LoadReso
0x5ab4757263650000be0146696e645265736furce....FindReso
0x5ac475726365570002014372656174655072urceW...CreatePr
0x5ad46f636573735700006906577269746550ocessW..i.WriteP
0x5ae4726f636573734d656d6f727900002506rocessMemory..%.
0x5af457616974466f7253696e676c654f626aWaitForSingleObj
0x5b04656374003f044f70656e50726f636573ect.?.OpenProces
0x5b1473001b065669727475616c50726f7465s...VirtualProte
0x5b24637445780000dd0247657450726f6341ctEx....GetProcA
0x5b3464647265737300001506566972747561ddress....Virtua
0x5b446c416c6c6f6345780000a5024765744dlAllocEx....GetM
0x5b546f64756c6548616e646c655700004c06oduleHandleW..L.
0x5b645769646543686172546f4d756c746942WideCharToMultiB
0x5b7479746500040143726561746552656d6fyte...CreateRemo
0x5b8474655468726561640000180656697274teThread....Virt
0x5b9475616c467265654578004b45524e454cualFreeEx.KERNEL
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.