I have found some software on 1337 that a friend was asking for. It's for Windows and I'm on Linux. Is test running the software inside a VM the only way to securely vet it (to see what connections it tries to make and what processes it starts)? On VirusTotal, I get one positive and 66 negatives. Preferably, I'd like to hand over the software without worrying about giving them malicious code...

you are viewing a single comment's thread
view the rest of the comments
[–] 14 points 1 month ago (4 children)

VirusTotal also tells you a load of stuff about file read/writes and network access etc. What did it say? And what was the positive result for?

  • source
  • hideshow 4 child comments
  • [–] [S] 10 points 1 month ago (3 children)

    Holy crap, I had no idea! Cool!

    The one positive is a malicious.high.ml.score by Trapmine and I can't makes heads or tails of it.

    Domains  
    e592.d.akamaiedge.net
    www.msn.com
    www.msn.com.edgekey.net
    
    IP  
    23.50.32.0/20 (owned by Akamai Technologies, Inc.)
    
    Execution Parents  
    Crack 29.2.ZIP
    

    None of these sub categories under Relations give any positives.

  • source
  • parent
  • hideshow 3 child comments