NET source code contains suspicious URLs sdmpīinary or memory string: OriginalFi lename7z.s fx.exe, vs KMSAuto N et.exe sdmpīinary or memory string: OriginalFi lenameuser 32j% vs KM SAuto Net. sdmpīinary or memory string: OriginalFi lenamemsco rrc.dllT v s KMSAuto Net.exe exeīinary or memory string: OriginalFi lename vs KMSAuto Ne t.exe
sdmpīinary or memory string: OriginalFi lenameclr. Sample file is different than original file name gathered from version info Static PE information: Resource n ame: RT_IC ON type: G LS_BINARY_ LSB_FIRST Static PE information: invalid ce rtificate Source: C:\Users\u ser\Deskto p\KMSAuto Net.exe Key, Mouse, Clipboard, Microphone and Screen Capturing: fontburea u.com/desi gners/frer e-user.htm l fontburea u.com/desi gners/caba rga.htmlN String found in binary or memory: emas.xmlso ap.org/ws/ 2005/05/id entity/cla ims/name String found in binary or memory: / post/19298 6/# String found in binary or memory: / post/19298 6/ String found in binary or memory: um.ru-boar d.com/topi c.cgi?foru m=2&topic= 5718&start =0 String found in binary or memory: um.ru-boar d.com/topi c.cgi?foru m=2&topic= 5559&start =00 String found in binary or memory: um.ru-boar d.com youtube.c om/watch?v =niXf0ov0S 8I equals (You tube) youtube.c om/results ?search_qu ery=%22KMS Auto%20Net %202015%22 +KMS Log A nalyzer.xl sm equals (You tube) youtube.c om/results ?search_qu ery=%22KMS Auto%20Net %202015%22 equals ww w.youtube.
com/watch ?v=niXf0ov 0S8I equal s (Y outube) dat5spp\st ore\cache\ cache.dat" spp\store \2.0\cache \cache.dat =spp\store \2.0\cache \cache.dat "U ww.youtube. String found in binary or memory: " /S /Q3sp p\store\ca che\cache. Found strings which match to known social media urls
0 kommentar(er)
