Reply to thread

Message

<blockquote data-quote="kC77" data-source="post: 997551" data-attributes="member: 92796">Hi Dan, thanks again, updated my 3 machines here and will keep an eye out again for any silent blocksas for the WC analyzer not doing anything, I think i have found something, &amp; it looks to be related to how the malware/sample is ran, in the test below windows defender realtime is disabled, so the only protection is DuiPro.When ran from commandline, it will just say whitelistcloud analyzing forever.... it never completesWhen ran normally (just by double clicking the sample) - by the time i have clicked &quot;more info&quot; it is already reported as not safe**its not only this one sample that does it... must be related to the way its ran? (command prompt in administrator mode) v&#039;s double clicking?[SPOILER=&quot;result from commandline execution&quot;][ATTACH=full]268220[/ATTACH][/SPOILER]or if ran normally (by just double clicking the sample) Whitelistcloud is immediatly reporting it as not safe[SPOILER=&quot;result from manual execution&quot;][ATTACH=full]268221[/ATTACH][/SPOILER]</blockquote>

[QUOTE="kC77, post: 997551, member: 92796"] Hi Dan, thanks again, updated my 3 machines here and will keep an eye out again for any silent blocks as for the WC analyzer not doing anything, I think i have found something, & it looks to be related to how the malware/sample is ran, in the test below windows defender realtime is disabled, so the only protection is DuiPro. When ran from commandline, it will just say whitelistcloud analyzing forever.... it never completes When ran normally (just by double clicking the sample) - by the time i have clicked "more info" it is already reported as not safe **its not only this one sample that does it... must be related to the way its ran? (command prompt in administrator mode) v's double clicking? [SPOILER="result from commandline execution"][ATTACH type="full" alt="105-cmd.png"]268220[/ATTACH][/SPOILER] or if ran normally (by just double clicking the sample) Whitelistcloud is immediatly reporting it as not safe [SPOILER="result from manual execution"][ATTACH type="full" alt="105-manual.png"]268221[/ATTACH][/SPOILER] [/QUOTE]

Verification