iRenegadex is token logging. [With Proofs !]

I am not surprised.

Oof Wow Thats Bad Im Willing To Get On This Even More Sus His Updater Is Obfuscated No Reason To Obfuscate It Unless Your Hiding Something https://cdn.discordapp.com/attachments/704068405019541565/794265007718268928/unknown.png

You can understand by looking at its features :P

@ImmuneLion318

@Anthares Yea But I Mean Its A Updater I Mean Bruh Understandable Obfuscating The Main Exe But A Updater? Why Would You Even Obfuscate It Just Adds To The Suspicion

It does have the Anarchy Grabber title in its description but a VT scan of that updater.exe file doesnt reveal anything suspicious

maybe he just named it like that for fun, idk, or maybe anarchy grabber is good at hiding itself

however i dont think you can just call it anarchy grabber with the description as a proof

but also, it's obfuscated for no reason, when the real bootstrapper is not even obfuscated

shady and dont use, but you will need more proof

I Talked With iRenegadex And He Said He Never Made Spy And Pointed Out How There Is 2 Of His Accounts

He Said The One With Ren Is Him And The Other He Dosen't Know

https://cdn.discordapp.com/attachments/794266131414253580/794268499874021396/unknown.png

https://cdn.discordapp.com/attachments/794266131414253580/794268544677183498/unknown.png

@ImmuneLion318 Wth, Something wrong in here.

Can you give his discord name tag ?

https://cdn.discordapp.com/attachments/773974968449892382/794277688055562270/unknown.png

i feel like that such a shi*ty excuse A. theres no proof of this "spy" not being them i know that sounds stupid but you never know and ive seen people do crap like this before in the past so thats why im sus rn they make a fake account to look like there main account and do this kind of shi* (well what about the supected alts tab) vpns and etc you can always bypass that anyway thats what i think of this.

edit: it also seems like they made the 1st SX7 post (from what im seeing rn)

https://cdn.discordapp.com/attachments/773974968449892382/794279296839319583/unknown.png

@yranxzy I highly agree. No names or anything like as of "Who ratted him" and you can't really get compromised unless your that stupid to give someone your wrd password 

@yranxzy I Agree He Seemed To Act When I Contacted Him So Im Still Very Sus Of Him

I use Anarchy for a client chat but i dont grab tokens, i use the token of my second account for this

im cant deobfuscate VMP, Right ?

Virustotal:

Virustotal

here is stealer (Im not sure, but when you put VMP to virustotal never seen a stealer)

@Wabz

@Anthares

Run the file whilst having fiddler , or http debugger svc on. If there is a webhook its suspicious.

Move this to the dipsutes section.