Skip to content

rensenWare_Forcer
Compare
Choose a tag to compare
@0x00000FF 0x00000FF released this 07 Apr 03:15
· 23 commits to master since this release
forcer
421846d

initial version of rensenWare_Forcer.

it changes memory of TH12 ~ Undefined Fantastic Object for making rensenWare to do decryption.

DO NOT TRY TO OTHER BUILDS OF RENSENWARE IF YOU ARE NOT SURE IT'S INITIAL VERSION OF RENSENWARE. INITIAL VERSION OF RENSENWARES DOES NOT HAVE MEMORY MANIPULATION DETECTING LOGIC, BUT OTHER BUILDS MAY HAVE IT.

VirusTotal for original version of rensenWare :
https://virustotal.com/ko/file/7bf5623f0a10dfa148a35bebd899b7758612f1693d2a9910f716cf15a921a76a/analysis/1491487316/

VirusTotal for THIS :
https://virustotal.com/en/file/76899c4db020d26d2c6638ffa33fb6abb57306903f57388dd210833a1b78f042/analysis/1491535051/

Assets 3