|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 47
Members: 0
Total: 47
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Unknown hash |
|
Posted: Tue Apr 14, 2009 8:12 pm |
|
|
NanoRuler |
Beginner |
|
|
Joined: Apr 14, 2009 |
Posts: 3 |
|
|
|
|
|
|
|
Hi, I'm in serious need of help here. I have a hash but have no idea what type of hash it is.
What I do know is that the value that was hashed includes this: c040-b412, which is a drive's serial number.
I need a way of creating a new hash based on a different serial number.
The original hash is @%b1{4$:p||pp}xD||@_+tr*
Any help gratefully received! |
|
|
|
|
|
|
|
|
Posted: Wed Apr 15, 2009 9:48 pm |
|
|
NanoRuler |
Beginner |
|
|
Joined: Apr 14, 2009 |
Posts: 3 |
|
|
|
|
|
|
|
If it is any help, I've pulled the code below from a DLL that uses the hash above.
Code: | <Module>
WMICode.dll
mscorlib
System.Object.WMIProperties
.ctor.
GetWMIProperties
GetCPUId
GetHDDSerialNumber
GetMACId
System.Reflection
AssemblyKeyNameAttribute
AssemblyKeyFileAttribute
AssemblyDelaySignAttribute
AssemblyVersionAttribute
AssemblyCultureAttribute
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
AssemblyProductAttribute
AssemblyCompanyAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
WMICode.ClassName.System.Management.ManagementClass.
ManagementObjectCollection.GetInstances.
ManagementObjectEnumerator.GetEnumerator.ManagementBaseObject.get_Current.ManagementObject.Int32.ToString.
String.Concat.
PropertyDataCollection.
get_Properties.
PropertyDataEnumerator.
PropertyData.
get_Name.
get_Value.
Move Next.
IDisposable.
Dispose.
Empty. |
|
|
|
|
|
|
|
|
|
Posted: Wed Apr 15, 2009 9:59 pm |
|
|
NanoRuler |
Beginner |
|
|
Joined: Apr 14, 2009 |
Posts: 3 |
|
|
|
|
|
|
|
Now I'm no C# coder, so I don't quite understand it all.
It seems obvious that the DLL is using WMI to check the CPUID, physical media serial nr and MAC address.
The app I need access to was written by a guy who disappeared in 2006 - if I could trace him I would! It is a bespoke app and I don't have access to the source code (else it'd have been a doddle!)
It has a method (using CSC.EXE) of writing a specific value to a DLL. The DLL I pulled bits from above then does a WMI check against hardware and compares its findings with the hash supplied via CSC.EXE.
That hash MUST contain the MAC address (which I cannot get as the motherboard dies and it was an embedded NIC) as well as the drive serial number. Interestingly tagged on to the end in plain text is the CPUID. I don't know and don't understand why the CPUID isn't also hashed, but nevermind.
I have the CPUID as I've fitted it to another motherboard and simply read the value, and equally I have the drive serial number, posted above.
What I need is a way of recreating a hash value that will correspond with what the DLL gets back from its WMI query, so that I can get the app working again on the same CPU and drive, but with a different motherboard and MAC.
PLEASE, I'm desperate here! |
|
|
|
|
|
|
Re: Unknown hash |
|
Posted: Wed Apr 15, 2009 11:10 pm |
|
|
crazynou |
Advanced user |
|
|
Joined: Feb 08, 2009 |
Posts: 199 |
Location: AlGeRiA |
|
|
|
|
|
|
NanoRuler wrote: | Hi, I'm in serious need of help here. I have a hash but have no idea what type of hash it is.
What I do know is that the value that was hashed includes this: c040-b412, which is a drive's serial number.
I need a way of creating a new hash based on a different serial number.
The original hash is @%b1{4$:p||pp}xD||@_+tr*
Any help gratefully received! |
hi i have the sam problem!!!!!
protection sn of hdd in Ole.dll in vbasic
38U35777 to 2XQ'+Y:2SX]WUX
????????????????????????????????????????? |
|
|
|
|
www.waraxe.us Forum Index -> All other hashes
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|