![]() "pc?decrapifier.exe" opened "%TEMP%\pcd4C43.tmp" with delete access "pc?decrapifier.exe" opened "%TEMP%\pcdc-reg-uninstall.txt" with delete access "pc?decrapifier.exe" opened "%TEMP%\pcd310A.tmp" with delete access "pc?decrapifier.exe" opened "%TEMP%\pcdc-version.txt" with delete access ![]() "pc?decrapifier.exe" opened "%TEMP%\pcd304D.tmp" with delete access "pc?decrapifier.exe" opened "%TEMP%\pcdc-machine.txt" with delete access "" opened "%TEMP%\nsvF558.tmp\" with delete access "" opened "%TEMP%\nsvF558.tmp\UserInfo.dll" with delete access Possibly tries to implement anti-virtualization techniques Source Hybrid Analysis Technology relevance 10/10 Which is directly followed by "cmp dword ptr, 02h" and "ret ". ![]() Which is directly followed by "cmp eax, 05h" and "jnbe 008FC058h".
0 Comments
Leave a Reply. |