Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- V (๑>◡<๑)Today at 22:31
- oh hey
- iAmWillToday at 22:31
- Hi
- Who's this
- V (๑>◡<๑)Today at 22:31
- i forgot what i added u for
- fuck
- are u on nulled?
- or hf?
- iAmWillToday at 22:31
- Cracking service & fortnite proxiless checker
- V (๑>◡<๑)Today at 22:32
- cracking service
- give me more context again
- or a thread link
- iAmWillToday at 22:32
- https://www.nulled.to/topic/549923-software-cracking-service-i-will-crack-any-software-you-give-me-if-i-fail-you-get-your-money-back/page-2
- Nulled
- -Software Cracking Service- I will crack any software you give me,...
- Page 2 of 2 - -Software Cracking Service- I will crack any software you give me, if i fail you get your money back. - posted in Services: how much for teaching?
- V (๑>◡<๑)Today at 22:32
- oh yea]
- ok
- i got a instagram username swapper
- how much for you to crack it
- iAmWillToday at 22:32
- 20€
- V (๑>◡<๑)Today at 22:33
- can u convert into US
- iAmWillToday at 22:33
- about
- 23usd
- V (๑>◡<๑)Today at 22:33
- can u do 15$ lol
- also
- do u takke bitcoin
- iAmWillToday at 22:33
- yes
- i take bitcoin
- nope its 23 sorry bruv
- V (๑>◡<๑)Today at 22:33
- aight np
- do i send $$ now
- or after u crack
- iAmWillToday at 22:34
- before
- if i fail
- u get money back
- but tis unlikely
- V (๑>◡<๑)Today at 22:34
- ok send addy
- iAmWillToday at 22:34
- 148dfT7U2kbMMQaFG71woNGEFtQRHGMj9q
- that's my btc add
- V (๑>◡<๑)Today at 22:34
- i just sent
- my whole bal
- like 21$
- sorry
- iAmWillToday at 22:35
- it's 23$
- ima refund u
- when i receive it
- or u can topup 2$
- V (๑>◡<๑)Today at 22:35
- do i send 2$
- more
- iAmWillToday at 22:35
- ye
- sorry bro
- or i can return u
- this trans
- 19uDZhhjAPTM83rmMLQoDkhQFn8hqxPhUK
- V (๑>◡<๑)Today at 22:36
- nah i can send 2$ more
- iAmWillToday at 22:36
- Okke
- 19uDZhhjAPTM83rmMLQoDkhQFn8hqxPhUK
- V (๑>◡<๑)Today at 22:36
- 19uDZhhjAPTM83rmMLQoDkhQFn8hqxPhUK
- is the addy
- right
- iAmWillToday at 22:36
- ye
- V (๑>◡<๑)Today at 22:36
- sent
- iAmWillToday at 22:36
- received ty
- send over the
- V (๑>◡<๑)Today at 22:36
- http://www.mediafire.com/file/dylb87cta1z0haw/bbbbbb.rar/file
- MediaFire
- bbbbbb.rar
- MediaFire is a simple to use free service that lets you put all your photos, documents, music, and video in a single place so you can access them anywhere and share them everywhere.
- iAmWillToday at 22:36
- executable
- what's the website
- V (๑>◡<๑)Today at 22:36
- its not a website its something i got over instagram
- iAmWillToday at 22:37
- ok
- V (๑>◡<๑)Today at 22:38
- update me
- iAmWillToday at 22:39
- yep
- ok
- i just started
- it's ratted
- like a bitch
- V (๑>◡<๑)Today at 22:40
- Wait
- IT is?
- iAmWillToday at 22:40
- Yes
- it is
- V (๑>◡<๑)Today at 22:40
- I DOWNLOADED ON MY MAIN PC
- FUCK\
- are u sure
- its not
- obsufucated
- iAmWillToday at 22:43
- yes
- i'm 100% sure
- beyond any rasonable doubt
- V (๑>◡<๑)Today at 22:43
- downloading malwarebytes
- i had it for a long time
- and nothing fishy happened
- can u still
- crack it
- iAmWillToday at 22:43
- https://www.virustotal.com/#/file/75fd6c22562cbdb9e8ba4194da6846bf93591ce93c53713d8325ee83e2bf507e/detection
- No
- It's a mine
- And connects to weird servers in egypt
- not going anywhere near that file.
- V (๑>◡<๑)Today at 22:44
- oh rip.
- iAmWillToday at 22:44
- Lol
- V (๑>◡<๑)Today at 22:44
- can u try another one
- iAmWillToday at 22:44
- Did u ever run it?
- V (๑>◡<๑)Today at 22:44
- yeah multiple times
- nothing ever happened
- iAmWillToday at 22:44
- gg
- prolly keylogger or rat
- V (๑>◡<๑)Today at 22:45
- using malwarebytes
- rn
- can u try another
- program for me
- https://mega.nz/#!2E41RSoQ!ymCDoPg_SnyTg7h39zuEBD9c3v09SAGwvQfPdgJoAgU
- MEGA
- MEGA provides free cloud storage with convenient and powerful always-on privacy. Claim your free 50GB now
- can u do it
- iAmWillToday at 22:51
- hey
- V (๑>◡<๑)Today at 22:51
- ye
- iAmWillToday at 22:52
- I check now
- Last file i check
- if it's ratted again not gonna go into it
- Let u know shortly
- V (๑>◡<๑)Today at 22:52
- ok
- ty
- iAmWillToday at 22:54
- FindResourceW@kernel32.dll (Show Stream)
- LockResource@kernel32.dll (Show Stream)
- LoadResource@kernel32.dll (Show Stream)
- SizeofResource@kernel32.dll (Show Stream)
- FreeResource@kernel32.dll (Show Stream)
- V (๑>◡<๑)Today at 22:54
- whats that
- iAmWillToday at 22:54
- @415324: jmp dword ptr [00718E24h] ;LockResource@kernel32.dll
- Stuffs some shit in ur PC
- V (๑>◡<๑)Today at 22:54
- ah
- is it bad
- iAmWillToday at 22:55
- Yes
- checking now what that is
- V (๑>◡<๑)Today at 22:55
- im sorry
- i didnt meant
- it to be like this
- iAmWillToday at 22:55
- its kl bro
- happened to be many times
- xD
- V (๑>◡<๑)Today at 22:55
- xd
- iAmWillToday at 22:56
- "<Input Sample>" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
- It gets ur computer name
- V (๑>◡<๑)Today at 22:57
- i mean it asks for your HWID
- iAmWillToday at 22:57
- And gains full reg. access
- V (๑>◡<๑)Today at 22:57
- o
- iAmWillToday at 22:57
- Found user agent(s): Mozilla/4.0 (compatible; Synapse)
- Opens a mozzila 4.0 instance
- And does some network traffic shit
- through the regestri
- "<Input Sample>" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\TERMINAL SERVER"; Key: "TSUSERENABLED")
- V (๑>◡<๑)Today at 22:58
- idk what this means
- iAmWillToday at 22:58
- Which is all fine
- It means that
- It probably connects to instagram
- through a mozzilla 4.0 instance
- And that's what the traffic is for
- V (๑>◡<๑)Today at 22:58
- yeah the whole point of the program
- is to change instagram names
- iAmWillToday at 22:59
- Pattern match: "https://www.instagram.com/"
- Pattern match: "https://www.instagram.com/"
- Pattern match: "https://www.instagram.com/accounts/web_create_ajax/attempt/"
- Pattern match: "https://www.instagram.com/accounts/edit/"
- Pattern match: "https://www/"
- Pattern match: "https://instagram.com/bz"
- Heuristic match: "instagram.com"
- Pattern match: "https://www.boxhoster.com/authenticate.php"
- Pattern match: "http://auth.xn--80aankhnhe0a2e4b.xn--p1ai/idc.php"
- Pattern match: "http://www.indyproject.org/"
- Pattern match: "stagram.com/accounts/web_create_ajax/attempt/"
- Pattern match: "w.instagram.com/accounts/edit/"
- Pattern match: "www.instagram.com/"
- There are the websites it connects to
- logins edits ur account and does some shit
- idk if thats what u want
- now checking a few more thingsd seems
- to be clean for now
- V (๑>◡<๑)Today at 23:00
- i dunno
- wait
- @iAmWill
- send me the $$ back
- i just realized something
- iAmWillToday at 23:00
- Not possible
- Sorry bro
- V (๑>◡<๑)Today at 23:00
- wait what bro
- can i ask for another program
- then
- not htis one
- atleast
- iAmWillToday at 23:00
- nope lol
- V (๑>◡<๑)Today at 23:00
- fine
- go ahead
- iAmWillToday at 23:00
- whateva
- V (๑>◡<๑)Today at 23:00
- with it
- iAmWillToday at 23:00
- link me
- that other program
- V (๑>◡<๑)Today at 23:01
- tyyy
- iAmWillToday at 23:01
- i'll do it
- anyway ti semt clean
- didnt fully analyze
- b ut it was editing some ccounts
- which is what u wanted it to do
- V (๑>◡<๑)Today at 23:01
- you know what
- just continue
- with that program
- iAmWillToday at 23:05
- ok
- i will not allow
- nayu changes
- other than that
- V (๑>◡<๑)Today at 23:05
- ok
- go ahead
- iAmWillToday at 23:05
- ok
- details
- "<Input Sample>" opened "\Device\KsecDD"
- source
- API Call
- relevance
- 10/10
- That's bad
- V (๑>◡<๑)Today at 23:06
- o
- iAmWillToday at 23:06
- It means that it opens
- Kernel security device driver
- KsecDD
- V (๑>◡<๑)Today at 23:06
- kernel what now
- iAmWillToday at 23:06
- "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS")
- It modifies the service
- Binding something to it
- It modifinies KsecDD, it's a security kernel driver, it always runs in ur processes
- V (๑>◡<๑)Today at 23:07
- so is it dangerous
- iAmWillToday at 23:07
- Sec
- Mb it's running security protocol
- to preventr from cracking
- or mb it's dangerous
- give me a sec
- so i check
- V (๑>◡<๑)Today at 23:08
- wait whatt
- iAmWillToday at 23:19
- okayu
- it copies your clickboard
- it's not a rat
- that's why it wasnt invasive
- and hard to notice
- it's a keylogger
- V (๑>◡<๑)Today at 23:20
- so is it bad
- or gucci
- iAmWillToday at 23:20
- bad
- keylogger reads your keys
- and send them to SMPT server
- so via email
- steals what you write
- for CCs, paypals etc
- or fb accounts
- or any account in general
- V (๑>◡<๑)Today at 23:20
- wtf
- the guys reputable
- iAmWillToday at 23:22
- yea
- even my grandmother
- But that doesnt make her mother teresa
- V (๑>◡<๑)Today at 23:23
- nani
- ok are u gonna try it
- or u gon refundo kazamoo
- iAmWillToday at 23:23
- im not gonna crack a keylogged shit
- V (๑>◡<๑)Today at 23:23
- sorry
- iAmWillToday at 23:23
- even though it's actually a working
- software
- V (๑>◡<๑)Today at 23:24
- i didnt know
- iAmWillToday at 23:24
- still better
- than the ratted one
- it was literally all red
- over the place
- V (๑>◡<๑)Today at 23:24
- r1p
- i used malwarebytes
- i should be good?
- iAmWillToday at 23:25
- na
- it's still a keylogger in ur pc
- but anyway not very invasive
- it should not slow down ur pc by much but i'd suggest
- full formatting
- as i've seen u downloaded quite some garbage
- V (๑>◡<๑)Today at 23:25
- ok i'll do that
- truer
- true*
- so what now
- 13hgxD8cqQEVx3dBgM6wzM2vrrj4HuKraV
- my addy
- iAmWillToday at 23:28
- Not really gonna refund
- You picked 2 software urself
- https://www.hybrid-analysis.com/
- Free Automated Malware Analysis Service - powered by Falcon Sandbox
- Submit malware for free analysis with Falcon Sandbox and Hybrid Analysis technology. Hybrid Analysis develops and licenses analysis tools to fight malware.
- Use that to verify
- V (๑>◡<๑)Today at 23:29
- wait what
- iAmWillToday at 23:29
- all i've said
- V (๑>◡<๑)Today at 23:29
- can u do partial
- then
- like 50%
- iAmWillToday at 23:29
- No dude
- I invested my time
- Looking into that
- V (๑>◡<๑)Today at 23:29
- wtf but i didnt get anything
- back
- iAmWillToday at 23:29
- ANd no refunds are all over mjy thread
- yea because u sent me 2 malwares
- V (๑>◡<๑)Today at 23:29
- i didnt intend to
- iAmWillToday at 23:29
- And i understand
- That's why i gave u a 2nd shot
- But i worked anyway
- V (๑>◡<๑)Today at 23:30
- wtf that was all my balance
- cmon
- iAmWillToday at 23:33
- My dude
- My time is my time really i understand ur position
- But u paid
- And u did ur part
- I reversed and i did my partr
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement