Scans about unpacked MPH pub hack
Here i come with both scans of mph hack and dll.
They have so many false positives.
The file was misteriously compressed (not packed) but compression sometimes hide malware.
The file is 5.19Mb ok, the unpacked file is 5.25Mb so don't trust the "Dummy" because a dummy increase the size of the file, but when a file is compressed, all the dummy is reduced. Is impossible that this guy had increase the file size.
SO ABOUT 5Mb are code.
THIS IS INFORMATION.
Also a video, using me the unpacked dll fixed with no advertisment.
unpacked *****.exe(123.exe): Virustotal. MD5: d5024bb00fe0ecb52e68bfe63da27233 Heuristic.BehavesLike.Win32.Worm.I Backdoor.Win32.Elfrit.12!IK Suspicious File
3/47
unpacked dll(mph_pub.dll): Virustotal. MD5: 0296c53218c5ecbd3ff2234f9195fe55 Trojan.Vundo.Gen TR/Vundo.Gen
5/47
They have so many false positives.
The file was misteriously compressed (not packed) but compression sometimes hide malware.
The file is 5.19Mb ok, the unpacked file is 5.25Mb so don't trust the "Dummy" because a dummy increase the size of the file, but when a file is compressed, all the dummy is reduced. Is impossible that this guy had increase the file size.
SO ABOUT 5Mb are code.
THIS IS INFORMATION.
Also a video, using me the unpacked dll fixed with no advertisment.
unpacked *****.exe(123.exe): Virustotal. MD5: d5024bb00fe0ecb52e68bfe63da27233 Heuristic.BehavesLike.Win32.Worm.I Backdoor.Win32.Elfrit.12!IK Suspicious File
3/47
unpacked dll(mph_pub.dll): Virustotal. MD5: 0296c53218c5ecbd3ff2234f9195fe55 Trojan.Vundo.Gen TR/Vundo.Gen
5/47

