Skip to content
eyehatemalwares.com
  • Malware Analysis
    • Build Virtual Machine
    • Static Analysis
      • BinText
      • Strings for Linux
      • Strings for Windows
      • PEView
      • PEiD
      • KDiff 3
      • HashMyFiles
      • PEStudio
      • TRiD
      • UPX Unpacker
      • CFF Explorer
      • ExeInfo
      • SSDEEP
    • Dynamic Analysis
      • ApateDNS
      • DriverView
      • FakeNet
      • GMER
      • RegShot
      • MiTec Registry
      • Malzilla
      • Ring3 API Hooker
      • SSDT View
      • Wireshark
      • tshark
      • Sysinternals
      • ProcDOT
    • Reverse Engineering
      • IDA
      • Uncompyle
      • Immunity Debugger
      • x64dbg
      • OllyDbg
      • OllyDumpEx
      • Scylla x64-x86
    • APK Analysis
      • APKTool
      • ByteCodeViewer
      • jadx
  • Incident Response
    • Document Analysis
      • DocFileViewer
      • Peepdf
      • oledump
      • PDFStreamDumper
      • pdfparser
      • Pdfid
      • MalHost-Setup
      • DisView
      • RTFScan
      • OfficeMalScanner
    • Endpoint Analysis
      • Winprefetchview
      • LNK Analyzer
      • GKape
      • Kape
      • arp cache
      • netstat
      • tasklist
      • PacketWhisper
      • routeprint
      • net session
      • HashMyFiles
      • KDiff 3
      • YaraGen
      • YARA
      • Powershell
      • wmic
      • Sysinternals
      • BrowsingHistory
      • BLUESPAWN
      • Bruteshark
      • IOC Editor by FireEye
      • Redline by FireEye
      • Windows Live Response
      • THOR
      • LOKI
      • PSDecode
    • Eventlog Analysis
      • Advance log analysis
      • Baseline
      • DeepBlue CLI
      • Get-EventLog Hunt
      • Get-WinEvent Timeline
      • Get-WinEvent Hunt
      • Chainsaw
      • Hayabusa
    • Velociraptor
      • Custom Artifact
      • Shell Feature
      • Virtual File System
      • Velociraptor Hunt
      • Velociraptor Linux
      • Velociraptor Windows
      • Veloc WinMemCap
  • Digital Forensics
    • EZTools by EZimmerman
    • RegRipper by HCarvey
      • RegRipper3.0
    • FireEye
      • IOC Editor by FireEye
      • Memoryze
      • Redline by FireEye
    • Memory Acquisition
      • AccessData FTK
      • Belkasoft RamCapture
      • Dumpit
      • Magnet RAM Capture
      • Memoryze MemoryDD
      • Veloc WinMemCap
      • WinPmem
      • OSForensics
    • MemProcFS
    • Volatility
    • BulkExtractor
    • File Carving Photorec
    • Comae Hibr2bin
    • Timeline
      • Mactime
      • Volatility timeliner
      • log2timeline
    • The Sleuth Kit
      • TSK – fls
      • TSK – fsstat
      • TSK – icat
      • TSK – ils
    • Arsenal Image Mounter
    • Nirlauncher
    • fred
    • ewfinfo
    • vshadowmount
    • Autopsy Forensics
    • PhotoRec
    • Volatility3
  • Threat Hunting
    • MITRE ATT&CK
    • MITRE ATT&CK USAGE
  • Blog
  • EHMCrackTheCase
  • Latest News
  • Buy me a Coffee

Latest Blog From Palo Alto Unit42 Security

  • The Golden Scale: 'Tis the Season for Unwanted Gifts
    Source: Unit 42 Published on 2025-11-26 By Matt Brady
  • "Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack (Updated November 26)
    Source: Unit 42 Published on 2025-11-26 By Unit 42
  • The Dual-Use Dilemma of AI: Malicious LLMs
    Source: Unit 42 Published on 2025-11-25 By Unit 42
  • Anatomy of an Akira Ransomware Attack: When a Fake CAPTCHA Led to 42 Days of Compromise
    Source: Unit 42 Published on 2025-11-19 By Jeremy Brown
  • Digital Doppelgangers: Anatomy of Evolving Impersonation Campaigns Distributing Gh0st RAT
    Source: Unit 42 Published on 2025-11-15 By Keerthiraj Nagaraj, Vishwa Thothathri, Nabeel Mohamed and Reethika Ramesh

Latest Blog From TheHackerNews

  • CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV
    Source: The Hacker News Published on 2025-11-30
  • Legacy Python Bootstrap Scripts Create Domain-Takeover Risk in Multiple PyPI Packages
    Source: The Hacker News Published on 2025-11-29
  • North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware
    Source: The Hacker News Published on 2025-11-29
  • Why Organizations Are Turning to RPAM
    Source: The Hacker News Published on 2025-11-28
  • MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants
    Source: The Hacker News Published on 2025-11-28

Latest Blog from BleepingComputer

  • Japanese beer giant Asahi says data breach hit 1.5 million people
    Source: BleepingComputer Published on 2025-11-29 By Bill Toulas
  • Leak confirms OpenAI is preparing ads on ChatGPT for public roll out
    Source: BleepingComputer Published on 2025-11-29 By Mayank Parmar
  • Man behind in-flight Evil Twin WiFi attacks gets 7 years in prison
    Source: BleepingComputer Published on 2025-11-29 By Bill Toulas
  • Microsoft: Windows updates make password login option invisible
    Source: BleepingComputer Published on 2025-11-29 By Sergiu Gatlan
  • Public GitLab repositories exposed more than 17,000 secrets
    Source: BleepingComputer Published on 2025-11-29 By Bill Toulas

Latest Blog From SECURELIST by Kaspersky

  • Tomiris wreaks Havoc: New tools and techniques of the APT group
    Source: Securelist Published on 2025-11-28 By Oleg Kupreev, Artem Ushkov
  • Old tech, new vulnerabilities: NTLM abuse, ongoing exploitation in 2025
    Source: Securelist Published on 2025-11-26 By Leandro Cuozzo
  • To buy or not to buy: How cybercriminals capitalize on Black Friday
    Source: Securelist Published on 2025-11-24 By Kaspersky
  • ToddyCat: your hidden email assistant. Part 1
    Source: Securelist Published on 2025-11-21 By Andrey Gunkin
  • Inside the dark web job market
    Source: Securelist Published on 2025-11-20 By Kaspersky Security Services

Latest Blog From DFIR Report

  • Cat’s Got Your Files: Lynx Ransomware
    Source: The DFIR Report Published on 2025-11-17 By editor
  • From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion
    Source: The DFIR Report Published on 2025-09-29 By editor
  • Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs
    Source: The DFIR Report Published on 2025-09-08 By editor
  • From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
    Source: The DFIR Report Published on 2025-08-05 By editor
  • KongTuke FileFix Leads to New Interlock RAT Variant
    Source: The DFIR Report Published on 2025-07-14 By editor

Latest Blog From Microsoft Security 

  • Charting the future of SOC: Human and AI collaboration for better security
    Source: Blog from Microsoft Security Published on 2025-11-26 By Microsoft Defender Experts
  • Microsoft named a Leader in the Gartner® Magic Quadrant™ for Access Management for the ninth consecutive year
    Source: Blog from Microsoft Security Published on 2025-11-22 By Joy Chik
  • ​​Ambient and autonomous security for the agentic era​​ 
    Source: Blog from Microsoft Security Published on 2025-11-19 By Vasu Jakkal
  • Agents built into your workflow: Get Security Copilot with Microsoft 365 E5
    Source: Blog from Microsoft Security Published on 2025-11-19 By Dorothy Li
  • Collaborative research by Microsoft and NVIDIA on real-time immunity
    Source: Blog from Microsoft Security Published on 2025-11-18 By Tina Romeo

© 2021 - 2026 Eyehatemalwares. All Rights Reserved.

About Us | Privacy Policy

Empowering the cybersecurity community with insights and resources.


⚠️ YOU ARE TRYING TO DOWNLOAD A FILE THAT CONTAINS MALICIOUS EXECUTABLE ⚠️

eyehatemalwares is “PAY WHAT YOU CAN” project.

The zip file associated with this lab is password protected.

For hands-on experience, click the “Donate” button and you will be redirected to eyehatemalwares Paypal donation homepage or scan the QR Code below.

Donate

Click the “Download” button again to download the lab zip file.

After successful donation, email us the zip file name and the Paypal transaction details for the password.

Thank you for helping us build this community!

We will make sure that your donation will be use to bring more value to the community.

Contact us: About

– EHM Team

Eyehatemalwares Pre-Compiled Virtual Machine

You will be redirected to our cloud storage to download a pre-compiled eyehatemalwares VM.

Choose a virtual machine of choice:

  • REMNux: VMWare | VirtualBox
  • Windows: 10×64 | 7×64
  • Flare-VM: 10x64Flare

Please copy and enter the decryption key below to continue download your Windows-based VM:

Windows 10×64: rCkfUy4IoRrtulXo9bKXbsmVkKb1NypTWcJH8Y7XCtU

Windows 7×64: AMUtF8H3lh13ECuN_U0csJ0JpoVKzO58ig3p38-f9XM

Windows 10×64 Flare VM: NtC3qSFVwdmZg5Ao7sn8PIQXUAcei9g3tdVbdlJU3s0


Feel free to browse the site to create your own toolkit. Happy learning! 😉

Terms of Service

Acknowledgment These are the Terms of Service governing the use of this Service and the agreement that operates between You and the Company. These Terms of Service set out the rights and obligations of all users regarding the use of the Service. Your access to and use of the Service is conditioned on Your acceptance of and compliance with these Terms of Service. These Terms of Service apply to all visitors, users and others who access or use the Service. By accessing or using the Service You agree to be bound by these Terms of Service. If You disagree with any part of these Terms of Service then You may not access the Service. Your access to and use of the Service is also conditioned on Your acceptance of and compliance with the Privacy Policy of the Company. Our Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your personal information when You use the Application or the Website and tells You about Your privacy rights and how the law protects You. Please read Our Privacy Policy carefully before using Our Service. Copyright Policy We respect the intellectual property rights of others. It is Our policy to respond to any claim that Content posted on the Service infringes a copyright or other intellectual property infringement of any person. If You are a copyright owner, or authorized on behalf of one, and You believe that the copyrighted work has been copied in a way that constitutes copyright infringement that is taking place through the Service, You must submit Your notice in writing to the attention of our copyright agent via email [email protected] and include in Your notice a detailed description of the alleged infringement. Your Feedback to Us You assign all rights, title and interest in any Feedback You provide the Company. If for any reason such assignment is ineffective, You agree to grant the Company a non-exclusive, perpetual, irrevocable, royalty free, worldwide right and license to use, reproduce, disclose, sub-license, distribute, modify and exploit such Feedback without restriction.Links to Other Websites Our Service may contain links to third-party web sites or services that are not owned or controlled by the Company. The Company has no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third party web sites or services. You further acknowledge and agree that the Company shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any such content, goods or services available on or through any such web sites or services. We strongly advise You to read the terms and conditions and privacy policies of any third-party web sites or services that You visit. Termination We may terminate or suspend Your Account immediately, without prior notice or liability, for any reason whatsoever, including without limitation if You breach these Terms of Service. Upon termination, Your right to use the Service will cease immediately. If You wish to terminate Your Account, You may simply discontinue using the Service. Governing Law The laws of the Country, excluding its conflicts of law rules, shall govern this Terms and Your use of the Service. Your use of the Application may also be subject to other local, state, national, or international laws.Disputes Resolution If You have any concern or dispute about the Service, You agree to first try to resolve the dispute informally by contacting the Company. For European Union (EU) Users If You are a European Union consumer, you will benefit from any mandatory provisions of the law of the country in which you are resident in. United States Legal Compliance You represent and warrant that (i) You are not located in a country that is subject to the United States government embargo, or that has been designated by the United States government as a “terrorist supporting” country, and (ii) You are not listed on any United States government list of prohibited or restricted parties. Contact Us If you have any questions about these Terms of Service, You can contact us: • By visiting this page on our website: https://www.eyehatemalwares.com/about • By sending us an email: [email protected]

Loading

Warning! ⚠️⚠️⚠️

You are trying to download a file that contains malicious executable.

To continue, click the “Download Sample” button to download the file.

Lastly, Execute the sample in a safe isolated environment.

Want to setup your own isolated environment? Click Me!

Enjoy and learn at your own risk 🙂