I have found some software on 1337 that a friend was asking for. It’s for Windows and I’m on Linux. Is test running the software inside a VM the only way to securely vet it (to see what connections it tries to make and what processes it starts)? On VirusTotal, I get one positive and 66 negatives. Preferably, I’d like to hand over the software without worrying about giving them malicious code…
VirusTotal also tells you a load of stuff about file read/writes and network access etc. What did it say? And what was the positive result for?
Holy crap, I had no idea! Cool!
The one positive is a malicious.high.ml.score by Trapmine and I can’t makes heads or tails of it.
Domains e592.d.akamaiedge.net www.msn.com www.msn.com.edgekey.net IP 23.50.32.0/20 (owned by Akamai Technologies, Inc.) Execution Parents Crack 29.2.ZIPNone of these sub categories under Relations give any positives.
That doesn’t look suspicious to me.