UltimateGamingPower007 0 Posted December 18, 2022 Share Posted December 18, 2022 hello ESET Forum & Cybersecurity Experts. i want to use Kiddions Mod Menu for Grand Theft Auto Online. i want to know from the Cybersecurity Experts if its safe to use With ESET? i know Malwarebytes Blocked it as it was Detected as Malware. 😢 will ESET Protect me from The File harming my PC ? Windows 10.0.19044.2364  Please Advise! 😉 Link to comment Share on other sites More sharing options...
itman 1,739 Posted December 18, 2022 Share Posted December 18, 2022 (edited) 46 minutes ago, UltimateGamingPower007 said: Kiddions Mod Menu It's hard to determine whether this software is safe. When I downloaded from here: https://gamingforecast.com/kiddions-mod-menu-free-gta-5-best-free-mod-undetected-2022/ is was quite an ordeal to to so. Once the zip file was downloaded and extracted, Eset didn't detect anything malicious in the only .exe in the archive file. However when the .exe was submitted to VirusTotal: https://www.virustotal.com/gui/file/61458152c4215d24d3dd2b099a07916871d0ecc2dc3144106eb79e63182b2ae8 , a number of security solutions did flag it as at least a PUA. Of note is the solutions that flagged it detect primarily based on behavior. Also note in the Community section of the VT analysis, a number of cloud sandbox analyses were done on the file with all rendering a malicious verdict. Personally, I would stay away from the software. It's your call on this one. Edited December 18, 2022 by itman Link to comment Share on other sites More sharing options...
Administrators Marcos 5,228 Posted December 18, 2022 Administrators Share Posted December 18, 2022 Most likely it's detected as suspicious / PUA by some vendors because it's an unsigned file protected with the Themida protector. Link to comment Share on other sites More sharing options...
Nevermind 8 Posted December 18, 2022 Share Posted December 18, 2022 The file itman mentioned looks clean Link to comment Share on other sites More sharing options...
itman 1,739 Posted December 18, 2022 Share Posted December 18, 2022 53 minutes ago, Marcos said: Most likely it's detected as suspicious / PUA by some vendors because it's an unsigned file protected with the Themida protector. Based on Joe's Cloud Sandbox analysis here: https://www.joesandbox.com/analysis/754985/0/html which rated it malicious, I would say detection is based on the system "fingerprinting" activities it is performing in regards to sandbox or VM use. Link to comment Share on other sites More sharing options...
Recommended Posts