jewelryiop.blogg.se - Devxunity unpacker full

Malicious artifacts seen in the context of a contacted hostįound malicious artifacts related to "90.156.201.83". "csc.exe" wrote 8 bytes to a remote process "C:\Windows\Microsoft.NET\Framework64\v9\cvtres.exe" (Handle: 192) "csc.exe" wrote 52 bytes to a remote process "C:\Windows\Microsoft.NET\Framework64\v9\cvtres.exe" (Handle: 192) "csc.exe" wrote 32 bytes to a remote process "C:\Windows\Microsoft.NET\Framework64\v9\cvtres.exe" (Handle: 192) "DevXUnityUnpackerRun.exe" wrote 8 bytes to a remote process "C:\Windows\Microsoft.NET\Framework64\v9\csc.exe" (Handle: 552) "DevXUnityUnpackerRun.exe" wrote 52 bytes to a remote process "C:\Windows\Microsoft.NET\Framework64\v9\csc.exe" (Handle: 552) "DevXUnityUnpackerRun.exe" wrote 32 bytes to a remote process "C:\Windows\Microsoft.NET\Framework64\v9\csc.exe" (Handle: 552) "DevXUnityUnpackerToolsSetup.tmp" wrote 8 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\DevXUnityUnpackerMagicTools-Demo\DevXUnityUnpackerRun.exe" (Handle: 740)

"DevXUnityUnpackerToolsSetup.tmp" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\DevXUnityUnpackerMagicTools-Demo\DevXUnityUnpackerRun.exe" (Handle: 740) "DevXUnityUnpackerToolsSetup.tmp" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\DevXUnityUnpackerMagicTools-Demo\DevXUnityUnpackerRun.exe" (Handle: 740) "DevXUnityUnpackerToolsSetup.tmp" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\DevXUnityUnpackerMagicTools-Demo\DevXUnityUnpackerRun.exe" (Handle: 740) "" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\is-元BKT.tmp\DevXUnityUnpackerToolsSetup.tmp" (Handle: 200) "" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\is-元BKT.tmp\DevXUnityUnpackerToolsSetup.tmp" (Handle: 200)

"" wrote 8 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\is-元BKT.tmp\DevXUnityUnpackerToolsSetup.tmp" (Handle: 200) "" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\is-元BKT.tmp\DevXUnityUnpackerToolsSetup.tmp" (Handle: 200) "" wrote 1500 bytes to a remote process "%TEMP%\is-元BKT.tmp\DevXUnityUnpackerToolsSetup.tmp" (Handle: 200)