[Mr Kake]

Some sketchy shit @VisualSoft is doing: https://hackforums.net/showthread.php?tid=5259115





ummmmmmm ok?

[SUI-3183372]

If you upload a copy of the executable / files I can analyze them for you.

[Mr Kake]

If you upload a copy of the executable / files I can analyze them for you.

PM'ed you.

[DelziumTheProudWhale_temp]

Crypt a file and verify if it creates a new file under that same folder. Sometimes crypter developer copy files to the appdata/temp for security reason..

and adds itself to startup uhuh?

[TRH4CK]

and adds itself to startup uhuh?

Removed my post, I hadn't read that 🤝

[aesad]

It will start when computer starts, and checks for update. Nothing bad.

First time i thought it was ratted. But it wasnt.

[Mr Kake]

It will start when computer starts, and checks for update. Nothing bad.

First time i thought it was ratted. But it wasnt.

Right but really installing into startup and checking for updates automatically without consent? For all you know he can upload a new "update" and rat everyone.

[SUI-3183372]

From what I can tell it's ok. Doesn't make any network connections, doesn't drop any additional files. It could be sleeping and attempt to make a connection then, but I'm not gonna wait for that. It's never nice that something like this is added to start up, but I think you're ok. You should run this sort of stuff in a VM anyways.

[Mr Kake]

From what I can tell it's ok. Doesn't make any network connections, doesn't drop any additional files. It could be sleeping and attempt to make a connection then, but I'm not gonna wait for that. It's never nice that something like this is added to start up, but I think you're ok. You should run this sort of stuff in a VM anyways.

Right but it checks for updates, installs itself, and adds itself to start up. If he wanted to he can just upload a RAT as a update and on startup everyone would automatically download and run the rat.

EDIT: FYI it does make connections to his server for updates

[Decim]

Right but it checks for updates, installs itself, and adds itself to start up. If he wanted to he can just upload a RAT as a update and on startup everyone would automatically download and run the rat.

EDIT: FYI it does make connections to his server for updates

Why wouldn't he just give you the infected file in the first place then?
You should just wait for a response from the creator before jumping to conclusions.

[Mr Kake]

Why wouldn't he just give you the infected file in the first place then?
You should just wait for a response from the creator before jumping to conclusions.

Maybe he wanted everyone to download with the auto update so later he can rat? You know the auto updater starts on startup, checks for update, downloads update if there is one, etc.

I was just saying what could be possible.

[VisualSoft]

You should have send me a Pm before opening such stupid thread as Everything was already explained over here:
https://hackforums.net/showthread.php?tid=5300006 & also over here : https://hackforums.net/showthread.php?tid=5312327

Also I would like to correct you:
It does not Have hidden startup or Hidden Process, Everything Is visible.
It does not download any Update or any files, if you read the above thread then you will find, it only Checks for Update and news and notifies user on real time base once there is any release.

Note: The Stub source is not protected as i know there will be many users like you who wont like my free service, You can check it under reflector.

[Mr Kake]

You should have send me a Pm before opening such stupid thread as Everything was already explained over here:
https://hackforums.net/showthread.php?tid=5300006 & also over here : https://hackforums.net/showthread.php?tid=5312327

Also I would like to correct you:
It does not Have hidden startup or Hidden Process, Everything Is visible.
It does not download any Update or any files, if you read the above thread then you will find, it only Checks for Update and news and notifies user on real time base once there is any release.

Note: The Stub source is not protected as i know there will be many users like you who wont like my free service, You can check it under reflector.

1. The process that does start on startup doesn't launch the actual program rather is a silent process that runs concurrently.
2. Not sure about your Stub, but the exe that was in appdata was protected with confuserex.

Also, I would appreciate it if you made a message box on first time run that asks if the user wants to install because I believe most people didn't read the small text so something like that would be a nice addon.

Anyways back on the thread topic since you have explained it I don't believe there is a reason for this thread to continue. I am going to close it.