ComponentFactory / Krypton

Krypton WinForms components for .NET
BSD 3-Clause "New" or "Revised" License
1.86k stars 681 forks source link

Malware Alert #227

Open alimkoca opened 2 years ago

alimkoca commented 2 years ago

Looks like, a malware uses your software. Be careful about that, I found malware in cdn.discord.app via any.run website

Output:

6567 0x00085586 0x10088786 8   18   .rsrc   utf16le Comments

6568 0x00085598 0x10088798 34  70   .rsrc   utf16le ComponentFactory.Krypton.Navigator

6569 0x000855e6 0x100887e6 11  24   .rsrc   utf16le CompanyName

6570 0x00085600 0x10088800 25  52   .rsrc   utf16le Component Factory Pty Ltd

6571 0x0008563a 0x1008883a 15  32   .rsrc   utf16le FileDescription

6572 0x0008565c 0x1008885c 34  70   .rsrc   utf16le ComponentFactory.Krypton.Navigator

6573 0x000856aa 0x100888aa 11  24   .rsrc   utf16le FileVersion

6574 0x000856c4 0x100888c4 7   16   .rsrc   utf16le 4.6.0.0

6575 0x000856da 0x100888da 12  26   .rsrc   utf16le InternalName

6576 0x000856f4 0x100888f4 38  78   .rsrc   utf16le ComponentFactory.Krypton.Navigator.dll

6577 0x0008574a 0x1008894a 14  30   .rsrc   utf16le LegalCopyright

6578 0x0008576a 0x1008896a 53  108  .rsrc   utf16le  Component Factory Pty Ltd 2017. All rights reserved.

6579 0x000857de 0x100889de 16  34   .rsrc   utf16le OriginalFilename

6580 0x00085800 0x10088a00 38  78   .rsrc   utf16le ComponentFactory.Krypton.Navigator.dll

6581 0x00085856 0x10088a56 11  24   .rsrc   utf16le ProductName

6582 0x00085870 0x10088a70 17  36   .rsrc   utf16le Krypton Navigator

6583 0x0008589a 0x10088a9a 14  30   .rsrc   utf16le ProductVersion

6584 0x000858b8 0x10088ab8 7   16   .rsrc   utf16le 4.6.0.0

6585 0x000858ce 0x10088ace 16  34   .rsrc   utf16le Assembly Version

6586 0x000858f0 0x10088af0 7   16   .rsrc   utf16le 4.6.0.0