V (๑>◡<๑)Today at 22:31
oh hey
iAmWillToday at 22:31
Hi
Who's this
V (๑>◡<๑)Today at 22:31
i forgot what i added u for
fuck
are u on nulled?
or hf?
iAmWillToday at 22:31
Cracking service & fortnite proxiless checker
V (๑>◡<๑)Today at 22:32
cracking service
give me more context again
or a thread link
iAmWillToday at 22:32
https://www.nulled.to/topic/549923-software-cracking-service-i-will-crack-any-software-you-give-me-if-i-fail-you-get-your-money-back/page-2
Nulled
-Software Cracking Service- I will crack any software you give me,...
Page 2 of 2 - -Software Cracking Service- I will crack any software you give me, if i fail you get your money back. - posted in Services: how much for teaching?
V (๑>◡<๑)Today at 22:32
oh yea]
ok
i got a instagram username swapper
how much for you to crack it
iAmWillToday at 22:32
20€
V (๑>◡<๑)Today at 22:33
can u convert into US
iAmWillToday at 22:33
about
23usd
V (๑>◡<๑)Today at 22:33
can u do 15$ lol
also
do u takke bitcoin
iAmWillToday at 22:33
yes
i take bitcoin
nope its 23 sorry bruv
V (๑>◡<๑)Today at 22:33
aight np
do i send $$ now
or after u crack
iAmWillToday at 22:34
before
if i fail
u get money back
but tis unlikely
V (๑>◡<๑)Today at 22:34
ok send addy
iAmWillToday at 22:34
148dfT7U2kbMMQaFG71woNGEFtQRHGMj9q
that's my btc add
V (๑>◡<๑)Today at 22:34
i just sent
my whole bal
like 21$
sorry
iAmWillToday at 22:35
it's 23$
ima refund u
when i receive it
or u can topup 2$
V (๑>◡<๑)Today at 22:35
do i send 2$
more
iAmWillToday at 22:35
ye
sorry bro
or i can return u
this trans
19uDZhhjAPTM83rmMLQoDkhQFn8hqxPhUK
V (๑>◡<๑)Today at 22:36
nah i can send 2$ more
iAmWillToday at 22:36
Okke
19uDZhhjAPTM83rmMLQoDkhQFn8hqxPhUK
V (๑>◡<๑)Today at 22:36
19uDZhhjAPTM83rmMLQoDkhQFn8hqxPhUK
is the addy
right
iAmWillToday at 22:36
ye
V (๑>◡<๑)Today at 22:36
sent
iAmWillToday at 22:36
received ty
send over the
V (๑>◡<๑)Today at 22:36
http://www.mediafire.com/file/dylb87cta1z0haw/bbbbbb.rar/file
MediaFire
bbbbbb.rar
MediaFire is a simple to use free service that lets you put all your photos, documents, music, and video in a single place so you can access them anywhere and share them everywhere.

iAmWillToday at 22:36
executable
what's the website
V (๑>◡<๑)Today at 22:36
its not a website its something i got over instagram
iAmWillToday at 22:37
ok
V (๑>◡<๑)Today at 22:38
update me
iAmWillToday at 22:39
yep
ok
i just started
it's ratted
like a bitch
V (๑>◡<๑)Today at 22:40
Wait
IT is?
iAmWillToday at 22:40
Yes
it is
V (๑>◡<๑)Today at 22:40
I DOWNLOADED ON MY MAIN PC
FUCK\
are u sure
its not
obsufucated
iAmWillToday at 22:43
yes
i'm 100% sure
beyond any rasonable doubt
V (๑>◡<๑)Today at 22:43
downloading malwarebytes
i had it for a long time
and nothing fishy happened
can u still
crack it
iAmWillToday at 22:43
https://www.virustotal.com/#/file/75fd6c22562cbdb9e8ba4194da6846bf93591ce93c53713d8325ee83e2bf507e/detection
No
It's a mine
And connects to weird servers in egypt
not going anywhere near that file.
V (๑>◡<๑)Today at 22:44
oh rip.
iAmWillToday at 22:44
Lol
V (๑>◡<๑)Today at 22:44
can u try another one
iAmWillToday at 22:44
Did u ever run it?
V (๑>◡<๑)Today at 22:44
yeah multiple times
nothing ever happened
iAmWillToday at 22:44
gg
prolly keylogger or rat
V (๑>◡<๑)Today at 22:45
using malwarebytes
rn
can u try another
program for me
https://mega.nz/#!2E41RSoQ!ymCDoPg_SnyTg7h39zuEBD9c3v09SAGwvQfPdgJoAgU
MEGA
MEGA provides free cloud storage with convenient and powerful always-on privacy. Claim your free 50GB now

can u do it
iAmWillToday at 22:51
hey
V (๑>◡<๑)Today at 22:51
ye
iAmWillToday at 22:52
I check now
Last file i check
if it's ratted again not gonna go into it
Let u know shortly
V (๑>◡<๑)Today at 22:52
ok
ty
iAmWillToday at 22:54
FindResourceW@kernel32.dll (Show Stream)
LockResource@kernel32.dll (Show Stream)
LoadResource@kernel32.dll (Show Stream)
SizeofResource@kernel32.dll (Show Stream)
FreeResource@kernel32.dll (Show Stream)
V (๑>◡<๑)Today at 22:54
whats that
iAmWillToday at 22:54
@415324: jmp dword ptr [00718E24h] ;LockResource@kernel32.dll
Stuffs some shit in ur PC
V (๑>◡<๑)Today at 22:54
ah
is it bad
iAmWillToday at 22:55
Yes
checking now what that is
V (๑>◡<๑)Today at 22:55
im sorry
i didnt meant
it to be like this
iAmWillToday at 22:55
its kl bro
happened to be many times
xD
V (๑>◡<๑)Today at 22:55
xd
iAmWillToday at 22:56
"<Input Sample>" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
It gets ur computer name
V (๑>◡<๑)Today at 22:57
i mean  it asks for your HWID
iAmWillToday at 22:57
And gains full reg. access
V (๑>◡<๑)Today at 22:57
o
iAmWillToday at 22:57
Found user agent(s): Mozilla/4.0 (compatible; Synapse)
Opens a mozzila 4.0 instance
And does some network traffic shit
through the regestri
"<Input Sample>" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\TERMINAL SERVER"; Key: "TSUSERENABLED")
V (๑>◡<๑)Today at 22:58
idk what this means
iAmWillToday at 22:58
Which is all fine
It means that
It probably connects to instagram
through a mozzilla 4.0 instance
And that's what the traffic is for
V (๑>◡<๑)Today at 22:58
yeah the whole point of the program
is to change instagram names
iAmWillToday at 22:59
Pattern match: "https://www.instagram.com/"
Pattern match: "https://www.instagram.com/"
Pattern match: "https://www.instagram.com/accounts/web_create_ajax/attempt/"
Pattern match: "https://www.instagram.com/accounts/edit/"
Pattern match: "https://www/"
Pattern match: "https://instagram.com/bz"
Heuristic match: "instagram.com"
Pattern match: "https://www.boxhoster.com/authenticate.php"
Pattern match: "http://auth.xn--80aankhnhe0a2e4b.xn--p1ai/idc.php"
Pattern match: "http://www.indyproject.org/"
Pattern match: "stagram.com/accounts/web_create_ajax/attempt/"
Pattern match: "w.instagram.com/accounts/edit/"
Pattern match: "www.instagram.com/"
There are the websites it connects to
logins edits ur account and does some shit
idk if thats what u want
now checking a few more thingsd seems
to be clean for now
V (๑>◡<๑)Today at 23:00
i dunno
wait
@iAmWill
send me the $$ back
i just realized something
iAmWillToday at 23:00
Not possible
Sorry bro
V (๑>◡<๑)Today at 23:00
wait what bro
can i ask for another program
then
not htis one
atleast
iAmWillToday at 23:00
nope lol
V (๑>◡<๑)Today at 23:00
fine
go ahead
iAmWillToday at 23:00
whateva
V (๑>◡<๑)Today at 23:00
with it
iAmWillToday at 23:00
link me
that other program
V (๑>◡<๑)Today at 23:01
tyyy
iAmWillToday at 23:01
i'll do it
anyway ti semt clean
didnt fully analyze
b ut it was editing some ccounts
which is what u wanted it to do
V (๑>◡<๑)Today at 23:01
you know what
just continue
with that program
iAmWillToday at 23:05
ok
i will not allow
nayu changes
other than that
V (๑>◡<๑)Today at 23:05
ok
go ahead
iAmWillToday at 23:05
ok
details
"<Input Sample>" opened "\Device\KsecDD"
source
API Call
relevance
10/10
That's bad
V (๑>◡<๑)Today at 23:06
o
iAmWillToday at 23:06
It means that it opens
Kernel security device driver
KsecDD
V (๑>◡<๑)Today at 23:06
kernel what now
iAmWillToday at 23:06
"<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS")
It modifies the service
Binding something to it
It modifinies KsecDD, it's a security kernel driver, it always runs in ur processes
V (๑>◡<๑)Today at 23:07
so is it dangerous
iAmWillToday at 23:07
Sec
Mb it's running security protocol
to preventr from cracking
or mb it's dangerous
give me a sec
so i check
V (๑>◡<๑)Today at 23:08
wait whatt
iAmWillToday at 23:19
okayu
it copies your clickboard
it's not a rat
that's why it wasnt invasive
and hard to notice
it's a keylogger
V (๑>◡<๑)Today at 23:20
so is it bad
or gucci
iAmWillToday at 23:20
bad
keylogger reads your keys
and send them to SMPT server
so via email
steals what you write
for CCs, paypals etc
or fb accounts
or any account in general
V (๑>◡<๑)Today at 23:20
wtf
the guys reputable
iAmWillToday at 23:22
yea
even my grandmother
But that doesnt make her mother teresa
V (๑>◡<๑)Today at 23:23
nani
ok are u gonna try it
or u gon refundo kazamoo
iAmWillToday at 23:23
im not gonna crack a keylogged shit
V (๑>◡<๑)Today at 23:23
sorry
iAmWillToday at 23:23
even though it's actually a working
software
V (๑>◡<๑)Today at 23:24
i didnt know
iAmWillToday at 23:24
still better
than the ratted one
it was literally all red
over the place
V (๑>◡<๑)Today at 23:24
r1p
i used malwarebytes
i should be good?
iAmWillToday at 23:25
na
it's still a keylogger in ur pc
but anyway not very invasive
it should not slow down ur pc by much but i'd suggest
full formatting
as i've seen u downloaded quite some garbage
V (๑>◡<๑)Today at 23:25
ok i'll do that
truer
true*
so what now
13hgxD8cqQEVx3dBgM6wzM2vrrj4HuKraV
my addy
iAmWillToday at 23:28
Not really gonna refund
You picked 2 software urself
https://www.hybrid-analysis.com/
Free Automated Malware Analysis Service - powered by Falcon Sandbox
Submit malware for free analysis with Falcon Sandbox and Hybrid Analysis technology. Hybrid Analysis develops and licenses analysis tools to fight malware.
Use that to verify
V (๑>◡<๑)Today at 23:29
wait what
iAmWillToday at 23:29
all i've said
V (๑>◡<๑)Today at 23:29
can u do partial
then
like 50%
iAmWillToday at 23:29
No dude
I invested my time
Looking into that
V (๑>◡<๑)Today at 23:29
wtf but i didnt get anything
back
iAmWillToday at 23:29
ANd no refunds are all over mjy thread
yea because u sent me 2 malwares
V (๑>◡<๑)Today at 23:29
i didnt intend to
iAmWillToday at 23:29
And i understand
That's why i gave u a 2nd shot
But i worked anyway
V (๑>◡<๑)Today at 23:30
wtf that was all my balance
cmon
iAmWillToday at 23:33
My dude
My time is my time really i understand ur position
But u paid
And u did ur part
I reversed and i did my partr