Standard Non-Application Layer Protocol 3 Net, VB or Delphi, or parses a document) for: setup.exe, setup.tmp, ruplp.exe
Skipping Hybrid Code Analysis (implementation is based on Java. Report size getting too big, too many NtQueryValueKey calls found. Report size getting too big, too many NtProtectVirtualMemory calls found. Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtAllocateVirtualMemory calls found. Report size exceeded maximum capacity and may have missing behavior information. Execution Graph export aborted for target RevoUninPro.exe, PID 2060 because there are no executed function. Execution Graph export aborted for target Revo Uninstaller Pro v.4.0.0 Multi + NL by ElChaca.exe, PID 4084 because there are no executed function. 
Exclude process from analysis (whitelisted): taskhostw.exe, sc.exe, dllhost.exe, TiWorker.exe, wermgr.exe, SIHClient.exe, MusNotifyIcon.exe, conhost.exe, CompatTelRunner.exe, svchost.exe. Stop behavior analysis, all processes terminated. Found application associated with file extension. Successful, ratio: 99.8% (good quality ratio 90.7%). Number of analysed new started processes analysed: Revo Uninstaller Pro v.4.0.0 Multi + NL by ElChaca.exe
0 kommentar(er)
