Case 3:17-cv-05659-WHA Document 98-29 Filed 06/07/18 Page 1 of 2
`Case 3:17-cv-05659-WHA Document 98-29 Filed 06/07/18 Page 1 of 2
`
`
`
`
`EXHIBIT 26
`EXHIBIT 26
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`Case 3:17-cv-05659-WHA Document 98-29 Filed 06/07/18 Page 2 of 2
`
`Case 3:17-cv-05659-WHA Document 98-29 Filed 06/07/18 Page 2 of 2
`
`ky
`
`junipersecurity.net,
`
`What's new
`
`ee)almag al
`
`1)
`
`oN
`
`Networking: 17%
`
`Application error messages muted
`
`Fine-grained behavior: BX
`
`Persistence: 8%
`
`Obfuscation: 12%
`
`Fine-grained behavior: 29%
`
`Category
`Fine-grained behavior
`
`Evasion
`Obfuscation
`Evasion
`Obluscation
`Exfiltrabor
`
`Checkshosts file and opens for
`
`reading
`
`Contains evasive sleep loopsto bypass — s
`Executable falis checksum test
`=
`Performs checksfor kernel cebuggers
`Executable has sectons with non-standard names
`Certificate fle created
`entry point
`Sets user agent to be @ well known broswer while communicating via HT
`stens to changes in registry keys andvalues
`
`
Still Working On It
This document is taking longer than usual to download. This can
happen if we need to contact the court directly to obtain the
document and their servers are running slowly.
Give it another minute or two to complete, and then try the
refresh button.
A few More Minutes ... Still Working
It can take up to 5 minutes for us to download a document if the court servers are running slowly.
Thank you for your continued patience.
One Moment Please
The filing “”
is large (MB) and is being
downloaded.
Please refresh this page in a few minutes to see if the
filing has been downloaded. The filing will also be emailed
to you when the download completes.
Sealed Document
We are unable to display this document, it may be under a court
ordered seal.
If you have proper credentials to access the file, you may proceed
directly to the court's system using your government issued username
and password.
Access Government Site