[Added] ArtMoney - App-Request
-
Here you need HASH values to detect it.
-
@olli_s You are probably right about that, but on the other hand, from your screenshot, there seems to be some useful information in the registry.
-
OK, so just keep me updated.
-
This one will be postponed a bit more, as we need one small (but not very important feature overall) to properly support this
-
Here is the version information of ArtMoney 8.01
File name and path: C:\Games\ArtMoney\am801.exe Product Name: Internal Name: Original Filename: File Description: Company: Legal Copyright: Legal Trademarks: Comments: File Version String: 1.0.0.0 File Version: 1.0.0.0 Product Version String: 1.0.0.0 Product Version: 1.0.0.0
Here is the version information of ArtMoney 8.02
File name and path: C:\Games\ArtMoney\am802.exe Product Name: Internal Name: Original Filename: File Description: Company: Legal Copyright: Legal Trademarks: Comments: File Version String: 1.0.0.0 File Version: 1.0.0.0 Product Version String: 1.0.0.0 Product Version: 1.0.0.0
-
@Tom In my original posting I uploaded the app-icon in ICO-format.
So here is the app-icon in PNG-format: -
@olli_s Do you still have this app?
I just stumbled upon this post, we and found that we have all the capabilities to detect it now. In fact I have made a "test" detection, so I can verify it next time you inspect a host with this app. -
@tom said in ArtMoney - App-Request:
Do you still have this app?
No, I am using Cheat Engine instead.
But I can install ArtMoney in my VM to prove the detection.
Should I? -
@olli_s Up to you, but detection should be working.
-
I installed ArtMoney in ny VM, but it is not detected by VulnDetect.
File name and path: C:\Games\ArtMoney\am812.exe Product Name: Internal Name: Original Filename: File Description: Company: Legal Copyright: Legal Trademarks: Comments: File Version String: 1.0.0.0 File Version: 1.0.0.0 Product Version String: 1.0.0.0 Product Version: 1.0.0.0
-
@olli_s Thank you.
I installed it just to verify that it is detected, and I can see that we started detecting it for a few other users as well.
So I'll mark this as Added.
-
@tom ArtMoney is now detected properly.
Thank you for adding this!