![]() ![]() ![]() HTTP/1.1Īllocates virtual memory in foreign processįound malicious artifacts related to "107.179.62.20" (ASN: 32421, Owner: Black Lotus Communications). User-Agent: Mozilla/4.0 (compatible MSIE 7.0 Windows NT 6.1 Trident/4.0 SLCC2. Sample was identified as malicious by a large number of Antivirus engines "WINWORD.EXE" (Access type: "QUERYVAL", Path: "\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS", Key: "BYPASSSSLNOCACHECHECK") "WINWORD.EXE" (Access type: "QUERYVAL", Path: "\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS", Key: "BYPASSHTTPNOCACHECHECK") "WINWORD.EXE" (Access type: "QUERYVAL", Path: "\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\5.0\CACHE", Key: "SCAVENGECACHEFILELIMIT") ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |