[karthikstech]

This is a cracked version of the Ghost Tool For TWITCH.
Make sure to disable your antivirus and firewall before running the bot.
Exclude this folder in antivirus to not loose this file.

The app contains some cracked files which the antivirus treat as viruses.
So make sure to disable the antivirus and firewall before running the bot.

Thanks

DOWNLOAD :-
Removed - Staff.

[mothered]

Please provide an online virus scan report at your earliest convenience.

[0x59]

Please provide an online virus scan report at your earliest convenience.

This file is extremely suspicious.

not only is it called "miner.exe" in it's metadata but also it is loading a .exe file into a temp folder and running it and then simply closing. There is no window created for this exe file whatsoever.

Those are the decrypted strings; it loads the exe under the guise of a svchost64.exe which is also suspicious.

[mothered]

This file is extremely suspicious.

Indeed It Is.

Perhaps It was unbeknownst to the OP so for the moment, I've removed the link.
Appreciate the In depth analysis.

[karthikstech]

Please provide an online virus scan report at your earliest convenience.

This file is extremely suspicious.

not only is it called "miner.exe" in it's metadata but also it is loading a .exe file into a temp folder and running it and then simply closing. There is no window created for this exe file whatsoever.

Those are the decrypted strings; it loads the exe under the guise of a svchost64.exe which is also suspicious.

i found it in another forum,so i just uploaded it here,sorry to hear it that

[mothered]

i found it in another forum,so i just uploaded it here,sorry to hear it that

These things happen.

Are you planning to re-up a clean version? If not, I'll close this thread.

[0x59]

This file is extremely suspicious.

Indeed It Is.

Perhaps It was unbeknownst to the OP so for the moment, I've removed the link.
Appreciate the In depth analysis.

Perhaps.

The thing is the file literally does nothing else but download the file and run it in the background with no window; etc.
unless OP blindly reposted something he never tested to see if it worked as intended.

[d4ggm4sk]

why upload a file that you know contains viruses? im just curious.
isnt the virus scan to check for viruses? i mean, why have a virus scan for a file that you already know infected?

[Bish0pQ]

why upload a file that you know contains viruses? im just curious.
isnt the virus scan to check for viruses? i mean, why have a virus scan for a file that you already know infected?

There usually are a few false positives. Just having some obfuscated strings in your code is enough to set off flags with quite a few virus scanners.
Completely obfuscated code even sets of more results. It really depends on what is being detected. Only way to know for sure is decompiling the application (best in a sandbox) and check what code is actually being ran.

VT doesn't always give right results, but in this case, it's more than correct.

[mothered]

unless OP blindly reposted something he never tested to see if it worked as intended.

That's what I'm referring to.

It's not uncommon for users to contribute without personally testing the file.