3 ms·
Pretty sure it was in disassembled machine code, not source code.
by Avery3R 9y ago
Pretty sure it was in disassembled machine code, not source code.
- jtl999 9y agoI have taken the liberty to download a sample of WannaCry and I can see the "killswitch" domain just running strings on the binary. $ strings Downloads/24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c.bin |grep .com __p__commode http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com