0.9
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.62
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Upatre-D [Cryp] | 20200425 | 18.4.3895.0 |
| Baidu | Win32.Trojan-Downloader.Waski.a | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200426 | 2013.8.14.323 |
| McAfee | Downloader-FSH!9D0693A80AFA | 20200426 | 6.0.6.653 |
| Tencent | Malware.Win32.Gencirc.10b07783 | 20200426 | 1.0.0.1 |
静态指标
动态指标
网络通信
与未执行 DNS 查询的主机进行通信
(2 个事件)
| host | 114.114.114.114 | |||
| host | 8.8.8.8 | |||
文件已被 VirusTotal 上 64 个反病毒引擎识别为恶意
(50 out of 64 个事件)
| ALYac | Trojan.Ppatre.Gen.1 |
| APEX | Malicious |
| AVG | Win32:Upatre-D [Cryp] |
| Acronis | suspicious |
| Ad-Aware | Trojan.Ppatre.Gen.1 |
| AhnLab-V3 | Trojan/Win32.Upatre.C3416947 |
| Antiy-AVL | Trojan[Spy]/Win32.Zbot |
| Arcabit | Trojan.Ppatre.Gen.1 |
| Avast | Win32:Upatre-D [Cryp] |
| Avira | TR/Crypt.XPACK.Gen |
| Baidu | Win32.Trojan-Downloader.Waski.a |
| BitDefender | Trojan.Ppatre.Gen.1 |
| BitDefenderTheta | Gen:NN.ZexaF.34106.cqY@auL@H2oi |
| Bkav | W32.FamVT.GeND.Trojan |
| CAT-QuickHeal | Trojanspy.Zbot.8657 |
| ClamAV | Win.Downloader.Upatre-5744092-0 |
| Comodo | TrojWare.Win32.Spy.Zbot.SWEG@5bj6da |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.80afa5 |
| Cylance | Unsafe |
| Cyren | W32/Upatre.KB.gen!Eldorado |
| DrWeb | Trojan.DownLoad3.28161 |
| ESET-NOD32 | Win32/TrojanDownloader.Waski.A |
| Emsisoft | Trojan.Ppatre.Gen.1 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Upatre.KB.gen!Eldorado |
| F-Secure | Trojan-Downloader:W32/Upatre.D |
| FireEye | Generic.mg.9d0693a80afa536d |
| Fortinet | W32/Kryptik.GQIX!tr |
| GData | Trojan.Ppatre.Gen.1 |
| Ikarus | Trojan.Win32.Bublik |
| Invincea | heuristic |
| Jiangmin | TrojanSpy.Zbot.eeim |
| K7AntiVirus | Trojan-Downloader ( 0048f6391 ) |
| K7GW | Trojan-Downloader ( 0048f6391 ) |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| MAX | malware (ai score=87) |
| Malwarebytes | Trojan.Agent.REW |
| MaxSecure | Trojan.Upatre.Gen |
| McAfee | Downloader-FSH!9D0693A80AFA |
| McAfee-GW-Edition | BehavesLike.Win32.PWSZbot.nt |
| MicroWorld-eScan | Trojan.Ppatre.Gen.1 |
| Microsoft | TrojanDownloader:Win32/Upatre |
| NANO-Antivirus | Trojan.Win32.Zbot.czktya |
| Panda | Generic Malware |
| Qihoo-360 | HEUR/QVM20.1.D173.Malware.Gen |
| Rising | Dropper.Generic!8.35E (TFE:dGZlOgL7fYCDv4oNJA) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Dropper |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
1992-01-17 12:30:14
PE Imphash
120333c7f5efe2cf1ca4b387c2c6ca58
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x000017a8 | 0x00001800 | 6.630599592253614 |
| .rdata | 0x00003000 | 0x00000416 | 0x00000600 | 3.182457728583783 |
| .data | 0x00004000 | 0x0000065c | 0x00000400 | 4.081855804944679 |
| .rsrc | 0x00005000 | 0x00001e10 | 0x00002000 | 3.67888743520045 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_ICON | 0x000050f0 | 0x00001ca8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
| RT_STRING | 0x00006db0 | 0x00000060 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
| RT_GROUP_ICON | 0x00006d98 | 0x00000014 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
Imports
Library KERNEL32.DLL:
• 0x403018 HeapAlloc
• 0x40301c GetProcessHeap
• 0x403020 LoadLibraryW
• 0x403024 GetModuleHandleA
• 0x403028 CloseHandle
• 0x40302c GetCurrentThreadId
Library COMCTL32.dll:
• 0x403000 ImageList_Add
• 0x403004 None
• 0x403008 ImageList_Create
• 0x40300c ImageList_Destroy
• 0x403010 ImageList_AddMasked
Library USER32.dll:
• 0x403034 PostQuitMessage
• 0x403038 GetMessageA
• 0x40303c DispatchMessageA
• 0x403040 TranslateMessage
• 0x403044 CreateWindowExA
• 0x403048 RegisterClassExA
• 0x40304c DefWindowProcA
• 0x403050 SendMessageA
• 0x403054 SetWindowTextA
• 0x403058 GetActiveWindow
• 0x40305c TrackPopupMenu
L!This program cannot be run in DOS mode.
qHy'q&
qHy%q!
qHy#q&
qHy$q&
qRich'
`.rdata
@.data
^YQVVD$
tRVW|$
)+_^][
PjuhZ\
fold.html
userDefine.currenP @
@@@@@@
3PQPVj h
SWAVAf9
;wME;r
@@@@@@
@@@@@@@@@
P+5$0@
BBBBUE
tF]%L0@
AK}h'E$pJb
_Te=Bk}w.E9fKkn
rhb}n;13vKk
T"zKhXv-
i.f}{*E9fKij
Yn{~2E$vaiFn;r8vZO
D%DfwaH;
EV}Kbci;]V}Kbj~
r;T#v.M/
:GrQSZ
<DM{1BQeMmBC.
DM{A%J%C]
p\YVSM[
dM{GrU
^+zO.2
O@,1Vy
DGrYSZ
rAM[;GR1o[0
R{[mSz
;kS(|oBTDVB
$+BPg:@.
|cyV"X
1VJ1S-c
FC9kW'zA
lJ:.pl4;T/=V"
VcBf`5tK#|I7f{9
?Rx|.t
fqs&J_
:,F$l{|r
X+PQyY
TrackPopupMenu
GetActiveWindow
SetWindowTextA
SendMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
TranslateMessage
DispatchMessageA
GetMessageA
PostQuitMessage
USER32.dll
GetCurrentThreadId
CloseHandle
GetModuleHandleA
LoadLibraryW
GetProcessHeap
HeapAlloc
KERNEL32.DLL
ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ImageList_Add
COMCTL32.dll
nectarine
name please
plucklife
somnolent
static
RichEdit
button
trigeder
reelese
welation
tinits
hidelism
@@@@@@@
YT&!XT
30302/
/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"/"*
, 1#1#1#1#1#1#1#1#/"1#1#1#1#/"/"/"1#1#1#/"1#1#1#1#1#1#1#1#1#1#,
.!2$2$2$2$2$2$2$2$2$2$2$2$ia2$2$2$2$2$2$2$2$2$2$2$2$.!
0"4%4%4%4%4%4%4%4%2$2$3$4%pg4%4%4%4%4%4%4%4%4%4%4%4%0"
1#5&5&5&5&5&5&5&5&5&5&ri5&5&3$3$4&5&5&5&5&5&5&5&1#
3%7'7'7'7'7'7'7'7'L=
7'7'7'7'7'z7'7'7'7'7'7'7'3%
5&8(8(8(8(8(8(8(8(8(bW8(8(ul8(8(8(8(8(8(8(8(8(8(8(8(5&
7'<,<,<,<,<,<,<,<,bX<,bX<,<,7'7':+<,<,<,<,<,<,<,7'
;+B2B2B2B2B2B2B2B2B2{rB2B2
B2B2B2B2B2B2B2;+
B2G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7G7B2
I9L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;L;I9
O?nbnbnbnbnbnbnbnbnbnbmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcO?
r o g r a m i s f r e e s o f t w a r e ; y o u c a n r e d i s t r i b u t e i t a n d / o r m o d i f y i t u n d e r t h e
e r m s o f t h e G N U G e n e r a l P u b l i c L i c e n s e a s p u b l i s h e d b y t h e F r e e S o f
K e r n e l 3 2 . d l l
R i c h e d 3 2 . d l l
P a n e 1
P a n e 2
S t a n d a r d
C u s t o m i z e . . .
C : \ s a m p l e . e x e
C : \ 6 6 9 a 7 d 0 5 b 3 4 a 2 b e 8 b 8 0 8 f 2 d c 4 4 6 b f 9 5 7 e 1 e e 8 8 9 4 0 d a c e c b d c 1 9 a 7 b e 6 b d f 4 7 1 e 2
C : \ A a q G J R L X . e x e
C : \ 5 J j d h b X w . e x e
C : \ s 8 Z N n W V E . e x e
C : \ G Y z H U h t X . e x e
C : \ W H R q x g 6 5 . e x e
C : \ l E b t F 0 R 1 . e x e
C : \ J I V i x O e X . e x e
C : \ e 6 d 5 5 c a 7 4 6 6 a a 3 2 2 9 1 0 2 7 8 0 b b e 7 f 2 1 9 5 a 8 6 c a 6 1 d e 1 3 e 9 4 e f d 4 2 c a b c c 0 4 0 0 9 1 e 9
C : \ 7 8 9 e d c 6 5 c 3 5 0 f e 2 8 d e f a 5 8 2 3 5 9 8 f c f d b 8 4 c 9 6 d 2 a 1 7 c f 4 8 2 0 3 9 7 a 3 c 7 f 1 a a 5 f a a 1
C : \ B E 0 y x W Y c . e x e
C : \ 9 v _ d 0 8 O C . e x e
C : \ K 2 2 1 S k 8 E . e x e
C : \ f x S 0 6 R M h . e x e
C : \ 8 T G W x g O F . e x e
C : \ O X D Q W c Y a . e x e
C : \ p L 7 l R X Y z . e x e
C : \ D g l 4 C r t j . e x e
C : \ M 9 b Z 5 M Z H . e x e
C : \ I J K B U g G S . e x e
C : \ 5 R o D J U y Z . e x e
C : \ K B N 5 o t O X . e x e
C : \ j W H S 1 G v E . e x e
C : \ q X b B n x I 7 . e x e
C : \ 3 t h v 2 1 \ q v n 3 2 p . e x e
C : \ G G m O d y c Y . e x e
C : \ d 0 7 c 0 2 6 1 f 1 1 e f 0 0 8 1 6 a 1 1 b c f d b e e 5 7 b e a 4 6 e 0 1 0 1 d 0 e c a f 0 1 3 b a d 1 d 3 5 3 9 a 9 0 5 c 0
C : \ 3 6 3 b 0 3 7 7 6 7 7 2 c c 8 a d d 7 d d b 3 d 1 b f 6 c 9 b d 6 e 1 a 6 8 b 0 a 0 7 c 5 0 b f 1 f c 4 5 d a f 3 a 0 5 2 0 7 e
C : \ 8 0 5 6 e e c a 1 a e d d f 1 2 5 e 0 e 0 a 8 5 0 f e 9 5 2 9 2 8 e 7 7 8 8 6 4 7 5 2 9 9 2 f a a a b 2 e 7 2 a 6 f b c 9 c b 8
C : \ 4 4 b e b a 0 c d 2 3 b 7 7 2 5 5 7 b 1 f d 4 9 a 6 7 a 8 9 1 5 0 4 d 1 c 4 f 7 2 f 5 f 1 1 e 8 6 4 d 8 d f 2 0 1 d 6 d e 6 6 4
C : \ c 6 3 8 5 6 c 0 a 5 3 a f b c e 6 5 b 7 0 3 0 0 5 b 5 8 1 3 c 6 2 0 1 7 7 2 d d b 2 2 9 3 e a 6 6 a b a b a f 6 3 3 4 b f 8 3 c
C : \ 1 2 f d 7 c 6 2 a 1 7 f 8 a 7 c 7 0 3 d 5 8 3 b d d f f a 8 2 3 d 9 a 1 f c 3 0 c d f a 9 8 8 2 8 8 7 d 1 0 8 3 3 d d 8 8 9 a 5
C : \ U s e r s \ L i s a \ D e s k t o p \ Q u Q k F x s e . e x e
C : \ D Y t Y i R M 5 . e x e
C : \ d 9 5 1 0 0 8 f 1 9 9 8 d 8 3 f 7 c e e a 5 7 a 1 d 1 e 4 9 9 a f 2 6 6 7 a 9 f 6 1 9 0 b f 6 6 1 a 7 d f c 1 9 3 a d 2 e 6 b 3
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ Z d L p Q D m Z . e x e
C : \ u F f T f Y p a . e x e
C : \ 0 2 9 7 3 5 c 9 a 1 2 0 2 c d 5 1 0 8 b 8 4 3 4 0 a 3 4 a e 3 3 4 1 2 4 e 9 1 e 7 5 e 4 c 1 e e c b c 4 1 1 3 f 7 e 6 f e 3 0 7
C : \ a 0 9 b f 1 3 c 1 7 6 6 a 7 f e e d 4 2 b f 9 2 a a 6 7 2 8 8 7 3 a e f 0 b 4 e 6 2 3 e 1 1 7 e 9 6 c a 3 8 9 7 b 0 5 7 9 6 b 7
C : \ 4 c c 2 f b 9 3 1 0 d f 3 c 6 8 d a 4 0 7 8 0 b 6 5 9 f 5 7 e a 7 a a f 9 6 7 7 f 3 5 9 1 f 1 1 7 4 3 3 2 9 b 5 1 5 0 e 3 9 f e
C : \ a 2 d e 7 1 e 9 5 3 7 2 d d 4 1 3 b 8 b 0 d 6 3 b 8 5 8 b 2 0 a 0 2 5 a 1 a 0 2 e 8 c c 3 0 b a 8 4 5 3 8 5 0 b 0 1 3 2 3 c b 9
C : \ b 2 e a d 0 4 a d d 5 f 3 2 1 3 8 1 4 0 a 1 a 0 9 1 7 1 f 9 9 c a 7 c 2 0 f c 5 5 4 5 9 b 8 b f b 7 5 9 8 f f 6 1 6 6 a 5 a 6 3
C : \ f d 5 b f 9 b 2 9 7 4 1 0 2 d d 5 6 0 b d 4 4 2 9 7 2 4 2 5 2 6 e a 9 7 5 e 0 a 7 9 e 6 1 a 4 a 0 f 2 f 3 d 4 9 6 c 5 b d d b 2
C : \ U s e r s \ L i s a \ D e s k t o p \ M y 9 6 p 1 w k . e x e
C : \ b c 1 c 1 7 e 9 e 8 a 4 0 f 8 1 3 7 1 6 7 7 d c a 2 a e 3 4 c b d e 6 f 0 1 0 9 8 7 7 4 f 6 9 d 2 a 5 0 6 c 1 0 5 2 0 e 6 7 5 9
C : \ U s e r s \ L i s a \ D e s k t o p \ Q q g v n 0 n T . e x e
C : \ 7 c 3 3 3 d 7 5 e a 5 7 0 4 d d e 3 9 a a 7 9 b e 2 4 9 4 8 2 1 a 7 4 6 3 5 f 6 1 c a 5 5 a 5 b 8 1 c 1 3 2 d a 3 1 d 6 8 9 3 d
C : \ U s e r s \ L i s a \ D e s k t o p \ v A S Z k f h P . e x e
C : \ d 4 5 1 f d 7 5 3 2 1 f 0 d 0 4 7 c d d a 5 2 1 a 6 f e 3 d c 8 4 3 9 c 8 5 c 3 4 f 1 e f f d a 3 4 7 2 2 6 0 b e 9 a c 7 e 5 d
C : \ U s e r s \ L i s a \ D e s k t o p \ l j i A a T i Y . e x e
C : \ a 9 a d e 0 3 0 a b 3 7 5 1 1 c 6 e 1 f 4 9 4 c 0 2 8 a 0 5 d 1 0 c f 9 1 6 0 3 8 f 9 7 9 3 0 9 2 e d d e c d 2 0 b 1 1 4 0 2 5
C : \ U s e r s \ L i s a \ D e s k t o p \ 2 L k n f p f z . e x e
C : \ 3 5 f f 7 0 9 3 e 1 1 f 5 c 1 4 e e 6 b c d e b 7 0 3 6 8 d a 8 5 8 2 3 9 a 4 2 0 7 c c 6 3 e 8 6 5 2 8 a 2 c 9 c a b 3 2 1 7 0
C : \ 9 1 c 4 8 a e e 3 e 2 4 6 2 7 4 3 1 3 3 3 a c 3 3 6 e e 7 5 1 d 3 6 3 6 a 0 e 0 d 5 8 b 0 7 4 d 2 0 3 7 2 e b a 7 5 f b f f b a
C : \ b c 0 4 3 5 d 7 3 5 0 6 6 a 8 e 2 8 3 7 c b 6 2 1 2 7 b a c 9 6 7 0 2 e 2 c f a 6 3 e a 4 6 7 a 8 e f c 3 d f c 5 9 e 1 6 3 a 0
C : \ 9 2 3 1 f 0 6 4 f f 5 c 8 5 5 f 4 4 a e 5 b 7 b 0 d 7 f 1 9 a 4 6 3 9 7 c c 0 2 8 8 8 d 4 b d e c 1 1 5 b 2 6 1 d d 2 c 6 c 6 0
C : \ U s e r s \ L i s a \ D e s k t o p \ Q R 5 T 5 n G S . e x e
C : \ 2 e 3 1 8 b 3 1 0 8 1 e 3 e 5 b 2 f 7 4 2 e 6 5 4 d 5 d 1 d 6 0 5 4 b b a f f 0 4 3 c d a 4 b a b 6 0 6 3 7 8 4 a f 8 0 e 3 a c
C : \ a 9 8 6 f 6 1 e 0 f 9 0 9 b 0 a 2 9 4 c 1 1 7 c 3 9 1 a a e 8 f b 1 5 9 0 0 6 4 a b e c 6 b b d 7 a 5 d 9 d 4 6 7 0 f 0 7 a b c
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ v b 9 c s s i 1 . e x e
C : \ V Q z T O 7 M l . e x e
C : \ 2 6 4 0 1 d 6 5 6 b f 0 2 a 7 2 5 b a e a f 5 1 5 1 2 d 9 9 1 f 7 5 7 3 8 e e c 3 6 8 3 4 f 6 8 d d d d 4 0 8 b 6 0 4 0 c d 4 7
C : \ 1 9 8 a 7 1 0 c d d f c 5 6 0 d 5 e 0 e b b 3 1 f f d f 9 4 8 c 4 d a 5 6 e 9 3 9 a 6 1 9 9 6 7 4 1 2 f 0 6 f 1 9 d 7 5 2 6 b f
C : \ 0 7 8 e c f e 5 8 8 8 a 4 4 1 a 9 5 3 0 1 1 0 e 9 1 8 c 8 2 4 6 7 a 5 e 0 b 8 9 8 4 4 2 d 3 0 6 6 f 5 c 9 b b 1 7 c 2 b 4 2 4 8
C : \ D o c u m e n t s a n d S e t t i n g s \ l u s e r \ D e s k t o p \ c Q L 4 k B 9 l . e x e
C : \ 9 c c e 0 9 8 0 0 a 3 3 a 9 6 6 6 b 1 0 4 4 a 3 1 6 3 8 4 0 6 7 3 c b c 7 0 4 8 b d d 8 d 0 4 5 f 9 2 2 f 0 0 a d b 8 2 6 c e 6
C : \ b 1 6 3 5 3 9 f d 7 b 6 7 8 3 8 9 1 6 b d 0 4 5 3 f 7 9 5 e d 1 8 6 e 8 d f 5 f a 6 1 c 8 5 2 d 1 4 6 1 2 4 e c a d 0 5 3 c 2 3
C : \ 4 6 5 f f 5 f c a e 4 9 1 4 9 5 6 0 3 c f 6 b 9 f d 6 7 a 8 3 3 3 3 c 9 a 1 c 3 4 0 5 6 b 1 1 2 6 7 4 a 2 3 8 8 6 4 0 f 9 3 a 3
C : \ U s e r s \ L i s a \ D e s k t o p \ M 2 z w l N K W . e x e
C : \ d E c I 8 u t D . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ 4 K W 7 D c o t . e x e
C : \ U s e r s \ J o e C a g e \ D e s k t o p \ J w R 0 n V C i 4 N . e x e
C : \ 7 5 0 a 6 5 4 c 6 9 0 7 b d 8 9 e 8 2 b 1 5 2 3 6 5 5 3 9 f 8 2 5 c a a f d 3 b 3 8 7 c 1 9 b d 7 4 7 c d 8 a a 9 8 7 b 7 6 9 d
C : \ a 3 7 1 4 7 9 9 e 0 0 d e e f 6 e 9 f 1 5 1 7 4 8 c 5 c 0 a f 0 f 4 e 0 a 5 d 3 4 8 8 d b 5 d 6 6 4 f c d 1 6 c f 9 7 6 9 0 9 f
C : \ U s e r s \ L i s a \ D e s k t o p \ Q B V g 9 p N A . e x e
C : \ a 9 1 a 5 7 7 3 2 f 0 3 1 4 b 6 8 e a 5 e 5 7 4 0 3 6 1 0 1 f b 8 f 4 3 4 2 0 7 4 4 a 5 1 1 3 8 3 3 e 1 5 4 6 9 2 3 7 c 1 c 4 1
C : \ 6 2 9 5 0 a b 1 5 4 5 1 6 e 1 b 3 6 6 6 6 3 c c d 2 a 1 f a c 4 4 6 3 4 a 4 2 e a a f c 0 2 e 7 0 9 6 b 1 9 e c e 2 c d e b d 5
C : \ d 1 8 3 c 2 a 4 1 f 9 8 5 c 6 a b c 5 a 8 4 8 9 8 c 8 5 2 9 d e a 6 9 f 1 b 1 9 4 2 0 3 4 2 6 d b 8 9 1 b 5 3 7 3 5 b 7 a d 0 7
C : \ f 8 2 c 7 8 d d c c e 5 5 1 3 9 a 4 f 9 9 5 3 3 b e 1 d a 3 c 2 f 4 c 2 7 7 3 4 3 2 7 2 2 c f 6 f 7 8 e b 9 f 6 a 2 b 9 4 d 3 8
C : \ d 2 3 7 c b c 2 c e 7 1 5 1 d 6 8 d 9 8 d 4 a 3 8 9 1 2 8 e 4 4 3 3 9 0 0 8 5 f 6 4 4 6 d 8 5 c 4 d e 1 f c 5 4 a 0 9 d f f c e
c : \ t a s k \ E C 5 9 5 4 6 1 6 5 3 2 D 9 D 4 3 A 3 7 0 6 4 4 C 2 3 6 B F 0 9 . e x e
C : \ 4 6 b 5 b 7 7 0 6 4 a f 4 4 a 2 5 d d 2 a c c c 8 b 0 1 0 7 4 9 3 6 b 7 f 1 b e 1 7 f 7 a 6 2 7 7 9 b 3 8 9 7 2 9 b f 0 4 d 3 7
C : \ U s e r s \ L i s a \ D e s k t o p \ 4 0 F 1 6 g k B . e x e
C : \ 5 t m Y D b X K . e x e
C : \ 7 1 7 0 5 1 8 d 4 8 0 7 d 5 3 0 4 1 8 6 f f 8 0 4 e e 6 f e 7 5 f 8 1 3 2 1 2 f f 4 6 3 8 8 2 7 d 2 1 7 4 5 8 6 6 d 5 e c 3 4 5
C : \ d f f 5 b d 3 4 d f c 3 2 a 7 f 6 2 5 b 8 1 d 9 f 0 0 4 a 0 4 3 8 7 e 0 b 7 0 d c 0 8 5 e e 0 f c 3 0 5 3 b 8 3 9 5 0 1 f 5 f f
C : \ 6 e 5 0 4 a 3 b a 7 5 e 0 4 b c d 2 0 7 7 c 7 f 1 9 6 2 a 8 3 6 0 d 9 0 2 1 a 0 1 c 1 9 0 f 0 7 a 5 a 3 2 e 1 5 c a d f 3 4 8 5
C : \ U s e r s \ L i s a \ D e s k t o p \ V o E d 9 6 Y J . e x e
C : \ b d b 6 2 f 4 c 1 0 8 9 c 7 f 5 d b 4 6 e 5 8 2 3 9 e e 0 c 5 5 e 5 5 d a e 5 5 5 8 e 7 f 7 3 e a b 0 9 7 a 7 b f 5 5 d 0 0 5 3
C : \ D o c u m e n t s a n d S e t t i n g s \ l u s e r \ D e s k t o p \ M r 8 4 G o Z O . e x e
C : \ Q B o Q 1 C o y . e x e
C : \ d 7 4 c 8 5 8 a 3 7 7 e 2 d 4 0 5 2 7 2 0 0 1 e 0 0 3 d 6 2 4 d c 0 2 b e b 6 a 7 8 6 a 0 7 a 0 5 5 8 6 5 5 8 6 e 7 8 4 f d a 1
C : \ U s e r s \ L i s a \ D e s k t o p \ g S R s Q L t d . e x e
C : \ O J k y 1 7 5 c . e x e
C : \ U s e r s \ J o e C a g e \ D e s k t o p \ M s 5 Z k Q Z b z E . e x e
C : \ e 1 5 1 8 3 a f c c f 5 f e 9 1 c 2 f 2 0 2 a 7 d 8 8 0 5 f 9 e 7 a 7 e 4 1 8 a 4 2 9 a 8 0 4 a 4 e 7 e f b e 0 0 1 c 5 8 0 5 7
C : \ 2 5 1 9 2 5 3 6 d 2 e 5 5 b 4 d a 4 6 f 1 7 0 8 6 d 4 f d d d 2 7 f 9 8 0 a 1 6 7 1 e 5 2 b 0 5 b 5 d 1 3 7 2 9 0 7 2 b 1 c 1 3
C : \ a c c e 2 9 c 4 2 e 6 a 6 c 1 f 9 b 1 2 b 8 d d 3 d 8 7 7 f b 8 3 3 2 0 1 a d 1 2 9 1 e a 0 6 6 6 c 1 3 f 8 c a a 9 0 2 2 1 0 a
C : \ Q A Y 9 Q 8 u K . e x e
C : \ 4 c b 1 5 a d d 5 3 6 8 8 5 f 5 e 7 e a 0 5 8 3 4 8 c 6 2 d 8 a 9 1 6 0 d e a 6 6 8 9 2 e 9 6 5 d d f 9 a 7 b b 6 7 f 4 b 2 f 9
C : \ f a d a f f 5 2 b 8 8 8 8 a c 2 6 8 e f e d c 5 8 1 4 0 c b d 0 c c c b 7 3 f e 9 7 e e 3 f c 4 b 2 8 3 a 4 b 8 8 c 9 b 0 0 7 0
C : \ U s e r s \ A D M I N I ~ 1 \ A p p D a t a \ L o c a l \ T e m p \ 1 d 0 3 9 0 5 2 3 b 1 b 7 b 5 1 1 2 9 6 b 3 d 6 8 1 b f 0 1 1 1 c e 7 a f 9 9 b . e x e
C : \ U s e r s \ L i s a \ D e s k t o p \ n d c 9 o U I x . e x e
C : \ L 1 k o B Q j d . e x e
C : \ 5 f f a 5 f c 7 c c 2 4 8 a 6 c d 8 5 0 3 b d 1 b a 5 5 2 c 8 b 4 e 5 7 f 1 c e a 7 1 7 a a d 6 c d f b e e 5 e b 8 0 b 5 e 0 d
C : \ U s e r s \ L i s a \ D e s k t o p \ b 8 C A d G 9 p . e x e
C : \ X Z 7 P 7 8 A c . e x e
C : \ U s e r s \ L i s a \ D e s k t o p \ M E 4 i f i 8 E . e x e
C : \ g Y d H Y W f z . e x e
C : \ b 6 7 4 5 9 2 c 6 4 0 7 e 5 4 7 f 8 6 7 6 b e 0 5 1 7 a e a 4 a c 6 4 0 0 4 d 2 e 5 8 0 b 9 2 b 7 c e d 3 5 6 e 9 2 1 4 8 0 b 3
C : \ e 2 9 3 6 2 d c 6 4 d c d d 0 d 9 4 d d 8 8 a b a c d 9 5 e 2 5 2 8 c 7 e 2 5 e b 0 d 3 0 a 4 1 a 8 c d 2 2 5 a e d c 6 f a f b
C : \ 5 7 6 0 1 d 1 0 4 b d 2 6 e 8 1 f 5 b b d e 4 7 6 7 4 a 6 c 6 8 1 0 e 7 6 2 7 9 2 c 9 e b 1 9 5 d 0 4 a 9 b 9 4 6 b f 7 1 f 3 8
C : \ 9 b a 8 2 8 c e 4 d c b 2 2 f f d 6 3 a 4 c 3 d d 1 0 9 0 8 8 7 f e 8 3 d 4 c d 8 b c 4 5 0 8 9 7 1 9 e 6 a c e 7 f a a 0 e 2 a
C : \ j 4 N U v P r U . e x e
C : \ 8 3 0 b d 4 2 5 2 1 4 1 4 0 b d c 7 c a 5 a d d a 4 a c 9 7 9 a 5 c 8 2 1 f d c 5 0 0 d b 3 5 4 8 a 6 f 8 7 2 b b d 1 e c 1 1 1
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i n v o i c e . e x e
C : \ a 2 c c 5 9 8 a b e 8 3 4 6 f 4 c 0 c c 4 a 6 6 e 4 f f d c 5 8 a b 2 4 8 a 8 e 0 9 d 4 1 9 4 e 3 e c b 0 7 9 b 6 8 5 a 4 6 7 a
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i m p o r t a n t _ d o c u m e n t . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i n v o i c e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ f a c t u r a . e x e
C : \ 8 1 2 b 6 1 1 b 4 3 b b 0 2 7 c 1 e 4 0 4 f 4 4 5 d 7 4 9 b 8 d 1 2 4 d 9 f 8 2 6 6 9 4 7 5 c 2 1 d 7 b 6 5 b a 8 4 b 5 4 e 2 4
C : \ 4 c 6 e 1 0 2 3 b 2 a f 9 e b 0 a 7 3 e 3 4 8 2 f a e d d 5 3 7 3 0 3 d a 1 e b 4 3 6 d b 1 1 c 9 c 0 e 0 9 6 c 0 a b f a 0 4 d
C : \ U s e r s \ L i s a \ D e s k t o p \ P t H x R Y 1 j . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i n v o i c e . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ w s a c e . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i m p o r t a n t _ d o c u m e n t . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i m p o r t a n t _ d o c u m e n t . e x e
C : \ U s e r s \ L i s a \ D e s k t o p \ Y 7 W z 4 b I O . e x e
C : \ K C R 3 b 0 _ S . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ s a m p l e . e x e
C : \ r y 2 1 Y x F Z . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ S u F k q 5 S D . e x e
C : \ U s e r s \ J o h n \ A p p D a t a \ L o c a l \ T e m p \ U U u Y d y c j o u u . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ c c 9 8 5 d 0 8 b 5 6 e 0 a f 5 6 0 c c 9 6 7 d 7 c f 6 d 9 a 1 . v i r u s . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ w s a c e . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 9 a b 9 9 c 2 c 3 4 1 5 5 0 a 5 _ w s a c e . e x e
C : \ f 2 a 8 1 2 0 d 7 9 4 2 a 5 c 0 c b 9 3 3 b 5 2 a f e 9 e b 1 f a d 4 9 f a 0 4 7 c 7 e 3 a 6 f 1 a c 5 e f 5 c 4 0 5 a b 4 2 5
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ 5 5 3 9 6 0 3 5 0 0 1 d 5 b e 8 0 6 b 5 0 3 a a 1 4 e 6 f c d 7 e 3 0 2 3 a e 2 7 2 7 c b c 9 a 0 2 d f 0 8 7 3 9 1 6 4 2 2 5 d
C : \ b 5 f 9 9 3 8 2 1 e 8 b 3 6 8 d 7 f 9 4 0 0 4 0 1 b 3 9 7 3 0 8 9 a 9 9 b c 9 b 0 0 c 6 5 e e 0 1 2 f 4 c 7 5 f b 7 5 9 c 7 5 e
C : \ c d 8 6 d a b 8 7 2 4 3 9 0 2 b 5 3 2 6 0 2 b d 6 c 0 d e 3 8 2 5 7 2 1 9 b d b 3 4 e 5 b f 7 1 e c e d 8 0 7 1 4 c d 0 5 9 2 8
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ w s a c e . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ b 7 c a 9 2 c b d 9 0 c 7 2 b a _ w s a c e . e x e
C : \ 6 7 2 1 f b 4 b 8 7 7 b b 6 e e d 5 e 6 5 5 f 4 e e 2 7 1 5 3 d e 9 8 8 7 6 a 7 d 4 d e 0 e 4 3 4 4 4 e f 7 1 a 9 9 f 3 8 e 1 3
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ 4 0 2 5 1 0 f 7 5 1 2 b b 9 6 7 8 e c 1 7 b 5 a a b 7 3 1 d 9 6 0 e 0 6 1 0 4 f b 7 9 a 7 0 3 4 e a 7 4 2 0 7 2 c 4 7 f 6 f d 9
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ d a d d 9 0 e 9 e b 0 e 6 e d a 4 8 0 9 1 7 c 5 3 d 7 9 d 9 9 9 7 9 7 9 c 2 3 8 4 8 f f b 0 5 1 f c 5 5 0 9 9 d 1 2 0 7 f f 7 2
C : \ d d 8 b b 7 0 8 a f 3 7 3 7 5 0 c 8 a b 9 9 d 7 7 6 5 1 d b 3 e 3 5 b c f 0 f d b 1 1 2 5 8 3 3 7 9 3 c d 5 0 c b d a f c 3 f b
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ w s a c e . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ f 1 d c b b 8 a 0 6 9 e e a 4 6 _ w s a c e . e x e
C : \ f c 1 9 e 4 e 6 2 d e 8 2 6 2 1 7 e 3 c 5 b a 4 a 6 3 0 0 f c 9 1 2 a 0 c 0 b f 8 8 d 4 7 a 6 2 7 5 2 a c e b a 0 7 c d 6 4 a 6
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ w s a c e . p e 3 2
C : \ 5 f 8 c 4 e 1 8 3 6 6 e 5 e f a 1 9 4 1 9 4 1 8 2 7 e d e 9 1 8 1 3 8 2 6 0 9 d 8 3 e 8 a 4 2 f 8 7 6 e 2 0 9 6 9 6 e f 5 5 b d
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ 7 b 9 9 c 0 f 1 b a 6 e 5 7 0 a 7 e f 2 9 b 2 f 5 f 6 b 7 b 7 0 4 e 4 b e e 0 7 9 9 3 e 5 0 1 3 d c 8 b 8 7 7 f 2 8 9 c 5 0 3 0
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ w s a c e . p e 3 2
C : \ 5 7 7 5 3 3 2 d 1 a e 2 7 1 3 9 c 6 c c 2 5 b d 8 d b c 4 b 4 5 8 0 9 1 6 8 f d 7 5 9 9 8 4 7 4 0 c 0 3 c 3 4 c f 0 4 f 4 4 d e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ e a e f 7 9 6 b e 2 8 5 8 3 1 5 3 a 7 8 8 1 7 2 e 2 d 5 2 3 6 a b 0 3 1 9 f 9 7 a e 4 8 c 8 b e 4 3 0 4 a c d 0 0 d d 2 f f 7 a
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ w s a c e . p e 3 2
C : \ 7 6 5 0 1 0 8 4 a 9 f 9 1 1 9 6 a a e b 2 c a 5 a d b a 6 f e d 4 3 5 c 3 9 9 e 6 e 2 4 c c d 3 f 7 8 5 4 5 9 b 9 d 1 1 2 7 2 e
c : \ t a s k \ 6 5 5 9 2 3 3 3 7 9 8 5 2 9 F 3 F 7 8 8 E F F E 6 B 0 A C D 3 F . e x e
C : \ d a 6 d 1 3 d 1 0 7 e 9 a c e a 8 a 4 9 3 b b 1 0 2 a 0 a a d e 1 a 3 2 2 3 6 e 7 4 f 5 1 4 1 3 4 a 6 a b 6 2 5 8 c 5 5 f d f f
C : \ a 0 1 2 2 1 c 0 b 1 3 d 9 e 8 1 f 6 4 1 a 4 4 9 5 b 9 e 0 5 b 9 1 0 9 c 7 5 f 5 0 4 8 4 0 3 f e c c 3 f 2 c 8 1 3 6 a 8 5 9 6 4
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ 6 a d b 3 1 0 1 9 6 2 9 3 e 1 e 7 5 1 2 4 8 8 e a c 1 2 5 b d 7 3 3 2 a d 8 d a 6 c 6 c 4 1 6 7 7 d 9 1 9 b e f f 6 0 4 b c 2 4
C : \ 3 2 d 4 a f 0 c 6 e 6 1 1 a f 7 6 f 2 4 8 c 9 f 5 8 4 2 0 1 8 0 6 3 1 7 5 f a 0 d f 2 7 a 4 d 5 d a 7 1 f 4 b c 0 4 3 d d a 3 0
C : \ e 7 4 9 a 8 9 f a d f 1 0 5 d 0 6 c 5 5 b 9 b f a b 1 0 7 8 8 f 9 6 b 1 0 3 6 0 4 8 f 6 d 6 a 4 f c b 1 2 8 7 9 b 1 b d a a 5 c
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 3 6 d 1 b 2 7 c 7 d e e e 9 4 5 c b 0 1 5 1 d e 8 d 2 d 9 1 5 f b 1 4 7 3 9 8 6 6 f b 7 f 1 5 a a 6 a 1 5 9 a d 6 c e 6 8 1 9 3 . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 5 0 4 d 7 b b 3 f 3 9 8 a 6 3 6 9 8 c a a 1 7 4 4 5 0 f 3 4 8 8 6 0 2 b 3 7 a 9 0 3 3 f 8 6 f d 8 1 8 6 a b a b 6 4 9 8 5 8 e 1 . e x e
C : \ 3 a 7 9 0 1 6 a 7 8 0 9 7 b 5 0 c 7 c 8 6 d 4 2 f 0 4 7 2 3 a 6 9 f 9 e b 2 a b d 7 c e 7 8 e a d c 8 3 4 d f f e 7 9 7 6 1 4 f
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 9 b 7 c 1 6 3 8 7 a f 8 6 a b 4 c b a c 4 6 7 b c 2 2 1 5 0 d d 2 1 6 9 0 1 8 6 8 9 a 4 f 5 e a b f c d f c 4 7 a 3 2 0 e 9 9 f . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ c d 6 d 5 f f 4 a 9 d b a 8 4 8 e 8 d b 0 d 3 8 d f 0 4 2 2 9 b 5 b d 6 1 3 9 8 7 d 5 9 1 3 d c 8 5 a e a 6 f c 9 5 6 3 d 1 c a . e x e
C : \ d a 0 2 1 e 3 f 9 8 5 1 d 1 b 2 e f f f 3 f 4 0 d 4 4 4 b 3 c a b b 1 8 3 6 8 4 5 5 d e 0 2 7 c b 4 d d c f 8 f 2 f e 2 2 8 1 3
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 1 9 9 a 9 6 9 2 2 9 6 9 3 c 4 7 5 c 4 3 7 d 3 f 8 8 f 0 8 e 9 b 7 9 6 d c c 7 3 6 4 c 6 6 b 2 4 8 7 4 9 9 0 7 6 b b f 0 c 8 4 d . e x e
C : \ b 3 0 3 2 c 2 a f 4 7 1 8 3 e 0 e 3 6 a 3 0 e 8 0 5 6 8 7 d a e 7 8 a 9 3 7 a 3 b 7 1 a c 5 a 5 6 a f d 1 c 5 e 2 a 0 9 8 f c 1
C : \ b 9 e 6 0 0 d 9 9 a 3 c a 7 9 f f 3 d 2 0 4 0 7 a b 1 3 9 3 d 6 4 f b 5 d 7 a 7 d 8 8 e c 4 3 0 a 2 0 1 6 8 8 9 3 f e 2 b 4 2 a
C : \ f 6 7 0 0 5 6 2 3 1 a e 0 1 a 1 0 1 0 3 a 0 4 3 9 1 3 b 0 0 8 5 6 7 7 0 2 2 2 7 1 a 5 e 9 3 e 2 b 2 b 3 9 b 1 8 0 e 1 5 6 9 6 8
C : \ 6 7 8 5 2 f 9 5 8 9 7 1 8 2 4 a 8 3 1 a e 3 a e 7 a 3 c 9 8 1 1 2 1 c c e 6 7 f 1 a 6 5 1 7 f a 3 3 0 9 5 9 c 9 a 6 3 9 4 3 5 8
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ e b 1 c f a 7 d f 7 5 f 8 0 a f 0 5 3 c 8 3 2 5 5 c 8 4 8 9 0 b 2 1 d 1 0 7 7 e 4 c 4 4 0 1 0 3 2 6 4 3 5 6 5 9 0 1 4 4 b b b 7 . e x e
C : \ 1 b d 5 7 f 7 f c 4 5 d 6 e 2 d d 6 4 4 f f 2 2 5 1 8 d e 8 f 2 a a 1 0 a d f f b b a 6 4 7 e a 6 b 9 6 5 7 0 6 4 9 2 3 e d 3 0
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ 8 c 6 a c 1 8 a f 7 9 6 f 7 1 2 1 0 4 9 b 8 c f 1 2 b 6 c 3 a 3 e 6 3 e c 6 b b 4 c 5 f 4 c 9 a 5 0 0 e 9 b a 9 9 8 8 e 3 b a b
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ 1 3 4 a a f 1 3 4 b 1 4 e c 7 1 e 5 e 4 c 7 f c b 4 6 8 b a 7 4 7 9 7 7 4 2 3 b 7 0 7 c f 7 9 e 5 0 c 1 f 7 c 4 6 f 3 a 9 9 d 1
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ 0 c 7 c 5 f 6 f 5 9 2 e 7 3 a 2 c 0 c c 8 9 7 e 2 4 a 6 f 7 a 9 9 4 2 9 f 3 7 8 2 2 e a 6 9 4 3 5 7 e 5 a 4 a 8 4 d 3 1 5 7 2 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ e 0 7 c c 6 5 8 7 1 8 5 d f 6 7 f 4 e 1 9 4 5 e 5 2 d a 1 8 1 3 3 f 0 4 e 2 4 1 7 a 7 6 2 9 0 c 2 7 f c e b 2 9 0 f 0 2 4 8 d 8 . e x e
C : \ d a e d d e 0 6 6 4 5 1 b 2 4 0 b 3 2 d 5 f 7 f 8 7 8 2 0 f 7 2 2 3 5 3 c 8 3 4 6 1 1 d d 9 a 0 7 f 0 2 d 7 9 e c b 6 b 7 c 1 0
C : \ 0 7 8 7 3 7 0 7 c 4 4 b 2 2 e 9 8 c 0 5 1 a 2 2 5 5 c e 6 4 1 9 7 0 a b c e d 5 c e 2 9 d 5 7 6 a 0 c d d 1 2 b b e 0 8 b 8 7 d
C : \ f 3 0 a 0 5 0 5 b 6 8 c a 0 0 4 7 b 1 2 a 7 3 6 9 9 2 e c f 5 8 a 6 3 0 4 8 1 f a e 7 0 f 0 6 c d b b 3 f 3 2 c 6 1 d 6 e 0 d f
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ w s a c e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 4 2 2 e 1 3 7 3 0 e 7 c e e 2 d b a 3 4 2 a f b 6 8 9 e 4 a 4 5 3 0 1 2 9 a 6 0 2 2 7 9 2 7 b a 7 9 9 b a 9 d 9 d 3 f 4 e 1 e 3 . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ b 5 b 7 0 4 0 9 e 1 5 e 3 5 2 a e 0 e b f 1 0 1 b 6 2 4 3 1 4 b 1 f 6 d 4 7 0 0 6 c 5 f 0 1 3 3 1 2 6 e 0 b e 4 9 7 3 7 2 f 9 e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 7 4 9 e 0 f 7 5 3 4 e f c b 8 1 2 1 5 8 0 0 b 9 f d 7 5 a 1 9 4 0 3 5 8 e 0 8 4 e a d a b 2 9 1 4 3 4 b 8 c 9 f f 7 7 6 e 7 f d . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 7 5 c 3 a 3 a f d 0 1 9 7 2 5 d 4 6 6 2 7 2 9 7 6 e 7 0 d b b b 6 8 c 2 9 e f b 6 3 f 3 e 7 6 e 9 0 b 4 d 3 8 3 1 4 c b 3 4 a 5 . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 7 2 2 2 b b 8 f a b 8 8 8 b b b d 3 f 1 a 1 7 4 1 3 4 7 4 6 7 f 4 7 d 9 3 c d 9 9 8 9 d d 0 8 7 2 0 b 6 e f 6 e 9 f b f d d a 6 . e x e
C : \ 2 5 1 5 1 2 f b 9 2 1 9 a 9 7 9 9 e 4 1 c 5 5 2 0 2 f 8 6 4 0 e 7 b d d e 6 a e 0 0 8 a e f 2 8 7 e b 7 6 0 9 8 3 d 2 1 4 c 7 3
Hosts
| IP |
|---|
| 114.114.114.114 |
| 8.8.8.8 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com |
A 131.107.255.255
A 131.107.255.255 |
131.107.255.255 |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 61714 | 8.8.8.8 | 53 |
| 192.168.56.101 | 56933 | 8.8.8.8 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
| 192.168.56.101 | 58485 | 114.114.114.114 | 53 |
| 192.168.56.101 | 58485 | 8.8.8.8 | 53 |
| 192.168.56.101 | 57665 | 114.114.114.114 | 53 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.