+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Question about scans on dyncheck and scanmybin (/showthread.php?tid=6039408)
Question about scans on dyncheck and scanmybin - Trip - Jan 9, 2020
So, I been interested into getting a crypter and noticed lately the “this is not a support thread” You never hear from the user who bought it.
I like to find the right product best bang for my buck if you will. I don’t jump the gun on spending, because that’s when you get burned.
I am asking do the scantime results even matter compared to runtime?
One more thing with dyncheck does it matter if the internet is on or off?
EDIT: Fixed shit first post was on phone
RE: Question about scans on dyncheck and scanmybin - FuzzyInteger - Jan 9, 2020
Use virtual machine install the most common av and test them locally, and yes enable internet u will get the most accurate resoult
Remember always to take a snapshot, and after you tested get the snapshot back ;)
RE: Question about scans on dyncheck and scanmybin - Trip - Jan 9, 2020
(Jan 9, 2020 09:15 AM)M0HX Wrote: scan-time doesn't matter if its fud on runtime. cuz if the signature is detected then it will be detected anyways for both.
scan-time results only show the file signature is not detected so when placing/copying/downloading the file AVs won't instantly mark it as malicious.
Yes internet on does matter because of how AVs work irl. if its off you won't get realistic results so it's not accurate.
So what would you suggest you do if your going to get a crypter? You don’t know if they have the internet on for the runtime scan?
RE: Question about scans on dyncheck and scanmybin - Trip - Jan 9, 2020
(Jan 9, 2020 09:23 AM)FuzzyInteger Wrote: Use virtual machine install the most common av and test them locally, and yes enable internet u will get the most accurate resoult
Remember always to take a snapshot, and after you tested get the snapshot back ;)
So, wouldn’t you say with the runtime scans their misleading when they are not using internet?
RE: Question about scans on dyncheck and scanmybin - FuzzyInteger - Jan 9, 2020
(Jan 9, 2020 09:39 AM)Trip Wrote: So, wouldn’t you say with the runtime scans their misleading when they are not using internet?
ATM WD it's heavly cloud dependant, some other av too, like nod32 with ML.AUGUR, Kaspersky (honeypot), and some other