"knctr_update.tmp" opened "C:\Users\%USERNAME%\AppData\Roaming\Knctr\metrics\is-744PE.tmp" with delete access "knctr_update.tmp" opened "C:\Users\%USERNAME%\AppData\Roaming\Knctr\metrics\is-DIBQ3.tmp" with delete access "" opened "C:\Users\%USERNAME%\AppData\Local\Temp\is-4704E.tmp" with delete access "" opened "%TEMP%\is-4704E.tmp\knctr_update.tmp" with delete access Looks up many procedures within the same disassembly stream (often used to hide usage) "KnctrLauncher.exe" wrote 1500 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\app\KNCTR.exe" (Handle: 632)Ĭontains ability to reboot/shutdown the operating system "knctr_update.tmp" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\app\KnctrLauncher.exe" (Handle: 432) "knctr_update.tmp" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\app\KnctrLauncher.exe" (Handle: 432) "knctr_update.tmp" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\app\KnctrLauncher.exe" (Handle: 432) "knctr_update.tmp" wrote 1500 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\app\KnctrLauncher.exe" (Handle: 432) "knctr_update.tmp" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\metrics\knctrMetrics.exe" (Handle: 432) "knctr_update.tmp" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\metrics\knctrMetrics.exe" (Handle: 432) "knctr_update.tmp" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\metrics\knctrMetrics.exe" (Handle: 432) "knctr_update.tmp" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\metrics\knctrMetrics.exe" (Handle: 480) "knctr_update.tmp" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\metrics\knctrMetrics.exe" (Handle: 480) "knctr_update.tmp" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\metrics\knctrMetrics.exe" (Handle: 480) "knctr_update.tmp" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\metrics\knctrMetrics.exe" (Handle: 508) "knctr_update.tmp" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\metrics\knctrMetrics.exe" (Handle: 508) "knctr_update.tmp" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Roaming\Knctr\metrics\knctrMetrics.exe" (Handle: 508) "" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\is-4704E.tmp\knctr_update.tmp" (Handle: 220) "" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\is-4704E.tmp\knctr_update.tmp" (Handle: 220) "" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\is-4704E.tmp\knctr_update.tmp" (Handle: 220) "" wrote 1500 bytes to a remote process "%TEMP%\is-4704E.tmp\knctr_update.tmp" (Handle: 220)
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |