Ransomware Example 2URL ConnectCreate SocketDNS ResponseIP ConnectServer ConnectProcess StartURLSocketIPIP ConnectionsServer ConnectionsHostProcessHOST: epmhyca5ol6plmx3.tor2web.blutmagie.devssadmin.exePID: 2644yyxxhtv.exePID: 1756IP: 198.41.214.185IP: 194.150.168.74HOST: epmhyca5ol6plmx3.tor2web.ficmd.exePID: 2068HOST: 7tno4hib47vlep5o.7hwr34n18.comHOST: epmhyca5ol6plmx3.wh47f2as19.comIP: 104.16.28.2169b462800f1bef019d7ec00098682d3ea7fc60e6721555f616399228e4e3ad122.exePID: 10609b462800f1bef019d7ec00098682d3ea7fc60e6721555f616399228e4e3ad122.exePID: 1380yyxxhtv.exePID: 2148