Closed nirgranth closed 2 years ago
I mean... the code is all open source; go build it yourself if you have concerns? You could even go ahead and disassemble the executable and take a deeper look. It's obviously not packed or obfuscated.
Besides of that, I'm not sure what that post from "watermelonfelon" is on about; Maybe there is a re-packed executable of vibranceGUI out in the wild which contains a bitcoin miner or whatelse he is referring to. Not sure how to cope with that besides of guiding people to download vibranceGUI from the official website only.
This topic was brought up in a Reddit thread yesterday. You can find a little bit more detailed review of the warnings in the automated malware analysis from virustotal/hybrid-analysis here: https://www.reddit.com/r/GlobalOffensive/comments/rsovm1/comment/hqo5s2e https://www.reddit.com/r/GlobalOffensive/comments/rsovm1/comment/hqowyuf
Make sure to always download binaries from the official website
Find more info here https://www.reddit.com/r/GlobalOffensive/comments/rsovm1/vibrance_gui_suspicious_behaviour/
TL:DR; Its okay
https://www.virustotal.com/gui/file/1cbaa4d4c817743a7ec88bdc3f8d15200e543a86e0b3374c6d05a15a0762970f/community
anyone know why its flagged and any more info will be appreciated