WinKeyFinder : Search for Windows key in bios dump

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • SRO2
    Member
    • Sep 2018
    • 44
    • FRANCE

    #1

    WinKeyFinder : Search for Windows key in bios dump

    Description:

    WinKeyFinder is a program that I developed to search the Windows key in a bios dump file. This manipulation is easily done with a hexadecimal editor but I have added some features to the program that can help save time.

    Program features:

    - Graphical interface : allows you to choose if you want to scan one or more files or if you want to scan all the files in a directory. The result is displayed in a window and the found keys are automatically inserted in the clipboard.

    - Drag and Drop : drag and drop one or more files or a folder directly on the executable. The result is displayed in a window and the found keys are automatically inserted in the clipboard.

    - Commande line interface : allows you to indicate on the command line the files and/or directories you wish to analyze. The result is returned by default in the console but the program can also create a CSV file associating the file name with the corresponding Windows key

    Help:
    For more information about the program features you can click on the "?" button in the graphical interface or type the command winkeyfinder.exe -h

    Licence:
    The license of the program is GNU GPLv3.

    Bug report:
    If you notice any bugs or if you have any suggestions please let me know

    Source code:
    The source code is available in attachment. The program is written in AutoIt and compiled with version 3.3.14.5.
    Attached Files
  • lapfix
    Badcaps Legend
    • Mar 2020
    • 2565
    • my workshop

    #2
    Re: WinKeyFinder : Search for Windows key in bios dump

    Thank you , i tested with some bios bin and it works

    Comment

    • hardware1
      Badcaps Legend
      • Sep 2021
      • 2888
      • N/A

      #3
      Re: WinKeyFinder : Search for Windows key in bios dump

      Thanks for sharing, I tried this tool with many files which I already know if they have a key or not. It's working fine and shows the correct key.
      ----------------------------------------------------------------------------------------------------------------------------------------------------------------------
      Due to a lack of donations, server free space at a critical level, and possible closure of Bios Requests
      all donations are welcome,
      see the donate button at the bottom of the page, or
      >>>>>
      click on this link to donate via PayPal. <<<<<
      Every donation made will go towards server fees and maintenance costs.
      ----------------------------------------------------------------------------------------------------------------------------------------------------------------------

      Comment

      • R_J
        Badcaps Legend
        • Jun 2012
        • 9514
        • Canada

        #4
        Re: WinKeyFinder : Search for Windows key in bios dump

        What about the Trojan:Script/Wacatac.H!ml included

        Comment

        • SMDFlea
          Super Moderator
          • Jan 2018
          • 20300
          • UK

          #5
          Re: WinKeyFinder : Search for Windows key in bios dump

          Originally posted by R_J
          What about the Trojan:Script/Wacatac.H!ml included
          It could be a false positive, the exe isn`t signed .
          All donations to badcaps are welcome, click on this link to donate. Thanks to all supporters

          Comment

          • R_J
            Badcaps Legend
            • Jun 2012
            • 9514
            • Canada

            #6
            Re: WinKeyFinder : Search for Windows key in bios dump

            Originally posted by SMDFlea
            It could be a false positive, the exe isn`t signed .
            Ok, just thought I would mention it.

            Comment

            • SMDFlea
              Super Moderator
              • Jan 2018
              • 20300
              • UK

              #7
              Re: WinKeyFinder : Search for Windows key in bios dump

              Originally posted by R_J
              Ok, just thought I would mention it.
              Its flagged by a few more at Virustotal https://www.virustotal.com/gui/file/...d5c4/detection
              All donations to badcaps are welcome, click on this link to donate. Thanks to all supporters

              Comment

              • SRO2
                Member
                • Sep 2018
                • 44
                • FRANCE

                #8
                Re: WinKeyFinder : Search for Windows key in bios dump

                Originally posted by R_J
                What about the Trojan:Script/Wacatac.H!ml included
                Programs written in AutoIt are unfortunately often recognized as trojan/malware... I think that Antivirus programs identify false positives because they make a correspondence with real trojans that also use the native AutoIt libraries.

                I can assure you that the executable I provided is compiled from the source code I provided.

                More informations on the official Wiki of AutoIt : https://www.autoitscript.com/wiki/AutoIt_and_Malware
                Last edited by SRO2; 01-31-2023, 01:45 AM.

                Comment

                Related Topics

                Collapse

                • Habble7
                  I need a BIOS dump for the Samsung S49CG934SU monitor
                  by Habble7
                  The Samsung S49CG934SU monitor does not power on - no LED indicator activity and no response to power button. However, when 21V power is connected, it immediately draws 0.8A of current with no display output. The motherboard processor gets warm, and there is continuous reading activity from the W25Q128BV BIOS chip.

                  Suspected Cause:
                  I suspect the BIOS may have been corrupted during a power interruption while updating the firmware. The official website provides firmware updates, but they can only be installed via USB flash drive.

                  Troubleshooting Attempts:
                  ...
                  05-22-2025, 07:28 AM
                • DynaxSC
                  MSI PRO B660M-G DDR4 - real bios dump from board needed (no stock bios)
                  by DynaxSC
                  Hi, I have an MSI PRO B660M-G DDR4 board with damaged BIOS and i need a bios dump from a real board, along with MAC, UUID and Serial Number info (eg. a BIOS screenshot and pictures from the board stickers).

                  I need to reconstruct the bios on my board, based on another bios image form a real board - meaning a bios image containing MAC address, UUID and Serial number. A stock BIOS is not suffiecient, as it is impossible to discover where the MAC, UUID and SerialNumber are stored. Tried with a similar board, but there are too much differences, and the stock BIOS is missing a lot of...
                  11-17-2023, 10:56 AM
                • grimacelord
                  Trying To Find UUID In BIOS Dump - HP 14-dq0055dx
                  by grimacelord
                  This laptop is the same laptop I was working on in this thread and I wasn't sure if I should post a new topic or post in that thread because I already solved the issue that thread was discussing and this is a completely different issue although it is dealing with the same laptop. I decided to make a new thread since it's a new issue, but please move if I made a mistake.

                  Motherboard model number: DA0PAMB46A1 REV: A
                  Secondary motherboard model number: 0PAB
                  SKU: 685K4UA
                  Serial number is: 5CD3223BJP

                  Recently reflashed this laptop with latest BIOS and once...
                  05-07-2024, 08:06 AM
                • DynaxSC
                  Who has a MSI Z590 PRO WIFI - Need BIOS dump ?
                  by DynaxSC
                  Hi,

                  I need a BIOS dump for MSI Z590 PRO WIFI from a real physical board, along with MAC address and serial no.

                  It must be a dump from a physical board, as it contains personalized data eg. MAC Address, UUID, Serial no.

                  I have a board which has lost the BIOS contents, I have the MAC and serial to this board, and need to insert it into the another BIOS image. To do it, I need to have a real image from a real board, as the images from the MSI site are without this data. The only way to find where MAC/UUID/Serial is located in the BIOS is to have a bios...
                  11-06-2022, 05:22 PM
                • vinaypundith
                  Razer RZ09-01682 Blade Stealth 13 2016 BIOS dump needed
                  by vinaypundith
                  I have this laptop that does boot but it's on an older BIOS that has issues with Secure Boot, and I cannot use the normal Razer BIOS updater because for some reason the serial number is missing / got deleted somehow (Common issue on this model, from what I've read). I got a dump of the BIOS chip (or at least what I think is the BIOS chip), and its 16MB in size - the files from the Razer BIOS update are 8MB. (There's two 8MB files, am I supposed to combine these somehow? Or combine with an Intel ME firmware? I have no idea).
                  So, I'm looking for a BIOS dump for this machine - a 16MB one....
                  08-03-2024, 12:32 PM
                • Loading...
                • No more items.
                Working...