Keyboard shortcuts

Press or to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Analyzed Binary

Reproducible findings depend on identifying the exact input. The current local sample is not stored in this repository.

PropertyValueSource
Project labelDark Ages 4.21 Stone clientsupplied identification
FilenameDarkages.exelocal sample
Size1,126,476 byteslocal sample measurement
SHA-25636093dc1572521ea8c4c5f25548068c971a3d41c7722ef9fe0c05c94e24d6979local sample measurement
Windows file version360, 0, 0, 0Windows version resource
Windows product version360, 0, 0, 0Windows version resource

Open identity question

The working identification is 4.21 Stone client, while the executable’s Windows version resource reports 360, 0, 0, 0. The reason for this mismatch is unknown. Until another internal version marker, release artifact, or independently identified sample resolves it, references to 4.21 describe the project’s supplied identification rather than a value proven from the executable itself.

Reproducing the hash

On PowerShell:

Get-FileHash -Algorithm SHA256 -LiteralPath 'C:\path\to\Darkages.exe'

Do not place the executable in this repository.