How to use this template
Show in Graph
Image Description
Common Information
Type Value
UUID bb6c0af5-be90-42d3-b5b3-f684723dd505
Fingerprint 340f1b163d1eebe814043b6fac4a6b403f93fee98267ae16090961cbdf2bc549
Analysis status DONE
Considered CTI value -2
Text language
Published Sept. 25, 2014, 11:09 p.m.
Added to db April 16, 2024, 5:59 p.m.
Last updated Aug. 30, 2024, 11:49 p.m.
Headline How to use this template
Title How to use this template
Detected Hints/Tags/Attributes 30/2/27
Source URLs
Redirection Url
Details Redirection https://www.virusbulletin.com/pdf/conference_slides/2014/Hu-VB2014.pdf
Details Source https://www.virusbulletin.com/uploads/pdf/conference_slides/2014/Hu-VB2014.pdf
URL Provider
Details Provider Source level domain
Details virusbulletin.com www.virusbulletin.com
Attributes
Details Type #Events CTI Value
Details Domain 228 
system.io
Details Domain 1 
tem.io
Details Domain 1 
nj7-mikey.no-ip.org
Details Domain 339 
system.net
Details Domain 1 
clrprofiler.codeplex.com
Details Domain 397 
www.microsoft.com
Details Domain 16 
www.codeproject.com
Details Domain 5 
www.ntcore.com
Details Domain 201 
msdn.microsoft.com
Details File 13 
clr.dll
Details File 2 
mscorwks.dll
Details File 1 
crjit.dll
Details File 2 
mscorjit.dll
Details File 2 
filename.csv
Details File 1 
windowslogs.exe
Details File 1 
e6lo5xeg22fb3xp0tnod.exe
Details File 1 
internet.exe
Details File 38 
details.aspx
Details File 1 
disasmsil.htm
Details sha1 1 
a954c1e3104e119ff683bd2fc549dba4cd1568ab
Details sha1 1 
0e2ef3bd304ee78ed9cae5d2d6d309920b3a0aaa
Details sha1 1 
0e7935efe3218f4bde2ddb26a016964e21dec517
Details Url 1 
http://clrprofiler.codeplex.com
Details Url 1 
http://www.microsoft.com/en-ca/download/details.aspx?id=4917[3]
Details Url 1 
http://www.codeproject.com/articles/26060/net-internals-and-code-injection
Details Url 1 
http://www.ntcore.com/files/disasmsil.htm
Details Url 1 
http://msdn.microsoft.com/en-us/library/ms404386(v=vs.110).aspx