"C:\Data\System Ninja\local\stubexe\0x8F9A582139FB74AD\System Ninja.exe" marked "C:\Data\System Ninja\config.ini._meta_" for deletion "C:\Data\System Ninja\local\stubexe\0x8F9A582139FB74AD\System Ninja.exe" marked "C:\Data\System Ninja\config.ini" for deletion "FileKey7=%LocalAppData%\VMware\VMware vCenter Converter Standalone Client\Logs|*.log *.gz" (Indicator: "vmware") "FileKey6=%LocalAppData%\VMware|*.log" (Indicator: "vmware") "FileKey4=%CommonAppData%\VMware\VMware vCenter Converter Standalone|*.log *.gz *.zip|RECURSE" (Indicator: "vmware") "FileKe圓=%CommonAppData%\VMware\logs|*.log|RECURSE" (Indicator: "vmware") "FileKey2=%CommonAppData%\VMware\Installer|*.*|REMOVESELF" (Indicator: "vmware") "FileKey1=%CommonAppData%\VMware\hostd|*.log *.gz|RECURSE" (Indicator: "vmware") "Detect=HKLM\Software\VMware, Inc.\VMware Workstation" (Indicator: "vmware") "FileKey2=%LocalAppData%\VMware|*.log" (Indicator: "vmware") "Detect=HKLM\Software\VMware, Inc.\VMware Player" (Indicator: "vmware") "FileKey2=%UserProfile%\VirtualBox VMs\*\Logs|*.log *.log.*" (Indicator: "virtualbox") "FileKey1=%UserProfile%\.VirtualBox|VBoxSVC.log.* VBoxSVC.* *.log *.log.*" (Indicator: "virtualbox") "FileKey1=%UserProfile%\.VirtualBox|VBoxSVC.log.* VBoxSVC.* *.log *.log.*" (Indicator: "vbox") "FileKey2=%UserProfile%\VirtualBox VMs\*|genymotion-player*.log logcat*.txt" (Indicator: "virtualbox") ( Show technique in the MITRE ATT
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |