
70 216.14 6.43.70įound strings which match to known social media urls IP address seen in connection with other malware HTTP traffic detected: GET / HTTP /1.1Host: checkip.dy Co nnection: Keep-Alive May check the online IP address of the machine Standard Non-Application Layer Protocol 2 Net, VB or Delphi, or parses a document) for: Initial pricing for 4 items.exe, Explorer.exe, Explorer.exe, Explorer.exe, Explorer.exe
Skipping Hybrid Code Analysis (implementation is based on Java. Report size getting too big, too many NtSetInformationFile calls found. Report size getting too big, too many NtReadVirtualMemory calls found. Report size getting too big, too many NtQueryValueKey calls found. Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.Report size getting too big, too many NtOpenKeyEx calls found.Report size getting too big, too many NtOpenKey calls found.
Report size getting too big, too many NtEnumerateValueKey calls found. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtAllocateVirtualMemory calls found. Report size exceeded maximum capacity and may have missing behavior information. Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, ShellExperienceHost.exe, wermgr.exe, conhost.exe, CompatTelRunner.exe, mobsync.exe. Found application associated with file extension. Number of analysed new started processes analysed: