Sinisterly
Leak GHOST TOOL FOR TWITCH - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Software & Programs (https://sinister.ly/Forum-Software-Programs)
+--- Thread: Leak GHOST TOOL FOR TWITCH (/Thread-Leak-GHOST-TOOL-FOR-TWITCH)

Pages: 1 2

GHOST TOOL FOR TWITCH - karthikstech - 08-08-2021

This is a cracked version of the Ghost Tool For TWITCH.
Make sure to disable your antivirus and firewall before running the bot.
Exclude this folder in antivirus to not loose this file.

The app contains some cracked files which the antivirus treat as viruses.
So make sure to disable the antivirus and firewall before running the bot.

Thanks

DOWNLOAD :-
Removed - Staff.

RE: GHOST TOOL FOR TWITCH - mothered - 08-08-2021

Please provide an online virus scan report at your earliest convenience.

RE: GHOST TOOL FOR TWITCH - 0x59 - 08-09-2021

(08-08-2021, 10:55 AM)mothered Wrote: Please provide an online virus scan report at your earliest convenience.

This file is extremely suspicious.
[Image: 5oVvQWb.png]
not only is it called "miner.exe" in it's metadata but also it is loading a .exe file into a temp folder and running it and then simply closing. There is no window created for this exe file whatsoever.
[Image: 0XXKxyz.png]
Those are the decrypted strings; it loads the exe under the guise of a svchost64.exe which is also suspicious.

[Image: zIzQHY2.png]

RE: GHOST TOOL FOR TWITCH - mothered - 08-10-2021

(08-09-2021, 07:41 PM)0x59 Wrote: This file is extremely suspicious.
Indeed It Is.

Perhaps It was unbeknownst to the OP so for the moment, I've removed the link.
Appreciate the In depth analysis.

RE: GHOST TOOL FOR TWITCH - karthikstech - 08-10-2021

(08-09-2021, 07:41 PM)0x59 Wrote:
(08-08-2021, 10:55 AM)mothered Wrote: Please provide an online virus scan report at your earliest convenience.

This file is extremely suspicious.
[Image: 5oVvQWb.png]
not only is it called "miner.exe" in it's metadata but also it is loading a .exe file into a temp folder and running it and then simply closing. There is no window created for this exe file whatsoever.
[Image: 0XXKxyz.png]
Those are the decrypted strings; it loads the exe under the guise of a svchost64.exe which is also suspicious.

[Image: zIzQHY2.png]
i found it in another forum,so i just uploaded it here,sorry to hear it that

RE: GHOST TOOL FOR TWITCH - mothered - 08-10-2021

(08-10-2021, 07:27 AM)karthikstech Wrote: i found it in another forum,so i just uploaded it here,sorry to hear it that
These things happen.

Are you planning to re-up a clean version? If not, I'll close this thread.

RE: GHOST TOOL FOR TWITCH - 0x59 - 08-10-2021

(08-10-2021, 03:04 AM)mothered Wrote:
(08-09-2021, 07:41 PM)0x59 Wrote: This file is extremely suspicious.
Indeed It Is.

Perhaps It was unbeknownst to the OP so for the moment, I've removed the link.
Appreciate the In depth analysis.

Perhaps.

The thing is the file literally does nothing else but download the file and run it in the background with no window; etc.
unless OP blindly reposted something he never tested to see if it worked as intended.

RE: GHOST TOOL FOR TWITCH - d4ggm4sk - 08-10-2021

why upload a file that you know contains viruses? im just curious.
isnt the virus scan to check for viruses? i mean, why have a virus scan for a file that you already know infected?

RE: GHOST TOOL FOR TWITCH - Bish0pQ - 08-10-2021

(08-10-2021, 10:47 PM)d4ggm4sk Wrote: why upload a file that you know contains viruses? im just curious.
isnt the virus scan to check for viruses? i mean, why have a virus scan for a file that you already know infected?

There usually are a few false positives. Just having some obfuscated strings in your code is enough to set off flags with quite a few virus scanners.
Completely obfuscated code even sets of more results. It really depends on what is being detected. Only way to know for sure is decompiling the application (best in a sandbox) and check what code is actually being ran.

VT doesn't always give right results, but in this case, it's more than correct.

RE: GHOST TOOL FOR TWITCH - mothered - 08-11-2021

(08-10-2021, 07:51 PM)0x59 Wrote: unless OP blindly reposted something he never tested to see if it worked as intended.
That's what I'm referring to.

It's not uncommon for users to contribute without personally testing the file.