wtf community v1.0.0

ESET AV Module (ekrn.exe)

What is it with antivirus and weird DNS?

📋 Live Preview
ESET AV Module
ESET AV Module

Sandbox: execFile · Timeout: 30s

Capabilities

network.exfiltration.dns

Documentation

examples:

  • description: "Run the binary and monitor DNS exfiltration" command: "ESET AV Module"

ESET AV Module (ekrn.exe)

What is it with antivirus and weird DNS?

ESET NOD32 Antivirus kernel (ekrn.exe) performs random-looking Domain Name lookups.

Contributed by Alexandros Pappas (redblueops)

References